This is so far what I have achieved:
How about MIMEDefang, ClamAV, and SpamAssassin? I'm currently running MD+Clam from sendmail and SA from procmail, but I'm open to seeing the equivalent solution with Postfix and the Dovecot LDA.
(One thing that keeps me from switching to Postfix is the need to accept "plussed" addresses using both the plus sign and the dot (for websites that refuse "+" in an email address).)
