Thanks for the suggestions, everyone. This is a small-scale system that’s mostly for personal use, so unfortunately it doesn’t warrant the expense of a standalone appliance for spam, so I’m pretty much limited to what I can roll up on the box itself. I’ve used SA+qmail in various permutations for about 15 years, and for the most part it’s worked reliably and well, but every once in a while spammers change tactics and figure out a way through and there’s an upsurge for a bit.
I’ll give sa-learn a shot and see if it improves anything. Cheers, Steve -- Steve Linberg, Chief Goblin Silicon Goblin Technologies http://silicongoblin.com Be kind. Remember, everyone you meet is fighting a hard battle.
