> I think this should not only be addressed in the documentation (for > pcap-filter, spamd -M / spamlogd, pf.conf log/rdr-to / pflogd, > tcpdump), but in the actual spamlogd code changes, too -- it should > be smart enough to not automatically whitelist the connections that > are rewritten to the default spamd port.
Constantine, this statement of yours makes no sense. spamlogd only pays attention to connections to port 25. spamlogd listens on 8025. Unless you are doing something crazy in your pf.conf.
