Hello All. MIAB has been outstanding for us. Thanks for sharing.!
We have an odd issue. We have one particular user in one particular domain who is getting hammered with spam out of the blue. All other users in that domain are good. I was thinking some sort of Bayes issue so I completely deleted that user account from the system (deleted home directory, etc) and recreated but the massive amount of spam continues. It is odd because it is not just a few here and there. It is tons like the filter is disabled for this one particular user (But I still see spam headers so the filter is processing these).
Anyway, thanks for any ideas. I have not changed his PW yet but can do that as well in the event others may think his account was compromised. But it does not seem like that.