I'm using something very similar, except incoming messages from never-seen-before senders are greylisted instead:
https://en.wikipedia.org/wiki/Greylisting_(email)
95% of spammers never retry.
https://en.wikipedia.org/wiki/Greylisting_(email)
95% of spammers never retry.
My server sends 451 after DATA, and keeps a copy of greylisted message, as marked-as-read entry in separate folder. Those are deleted after few hours, or moved out after a successful delivery retry.