> There are many valuable SMTP realtime checks that must be done at > the edge MTA. Since you don't have control of this, then you have to > resort to tuning SA constantly which is a never-ending game of > cat-n-mouse since spam changes characteristics all of the time.
That was unfortunately my takeaway as well. A lot of spam is rejected before it gets to SA.