A message slipped through untouced. Obvious spam from "Minister of Finance" with many attachments.
/var/log/mail shows a message skipped "spamc[7262]: skipped message, greater than max message size (512000 bytes)" at the time this came thru. I'd guess that was it. Unusual, but any way to prevent that in future? joe a.