Sending smtp-authed mail to policyd?

[Rich Bishop]

We currently permit smtp auth on ports 25, 465 and 567. We're having 
issues with spammers using compromised accounts to auth. I'd like to 
send all smtp authed connections to policyd, but am unsure how to do 
this for just the authed mail. Is is possible to somehow separate the 
authed mail and do this? Or is there maybe another way to deal with 
these authing spammers?

Thanks in advance,
Rich