Hi Rafael, ossec does not have spam detection built in, but it does have rules for handling spam events from several email services like Exchange, postfix, and sendmail. Take a look at ./rules/postfix_rules.xml Then you just have to get ossec looking at the postfix log so it can analyze events.
- Dave
