Not that it directly attacks the problem, but I'd consider either blocking at MTA with Spamcop, or pushing up the scoring for it. In my current production system (not Zimbra) I use Spamcop to block at MTA, and I can't remember the last time it generated a false positive, if ever. |