Looks like most of the pdf/xls/doc spam gets rejected at MTA level if you use greylisting and dynamic IP rbls. So far I haven't seen any on my private server that didn't make it thru to SA unless it got forwarded. And I have seen only a few on the little less protected servers.
Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com