mailto: links will be a problem with spam if its a public server. Better to use a form with a captcha or login, OR you could only show the mailto: to logged in users, that should stop the spam.
he doesn't want links.
about the captcha, i came to an idea. javascript idea.
when the user click "send", i can just change the button in "press another time".
and just then you'll be truly sending.
we'll probably may get a better "text" for the buttons, or we may like to create a second button just after the first is pressed.
but the point is that this may stop the bots.
the bots, actually, can force the submit without pressing the button. but i may wait for a certain value that is created only when you click the second button. without this special value the submitting can be simply ignored.