Firstly, many thanks to ART for the time taken to keep all these packages up to date and provide yum channels to make it easy for us all to keep our servers current.

Any idea if SA-3.0.1 and Qmail-Scanner are implementing SPF checks, and if so, how to modify the scores assigned to them? I think SPF may need an extra perl module (if I read the SA docs correctly), but I'm not sure if this was included in the rpm?

I'm configuring a new server this week and am aiming for a three-tier anti-spam/virus system:
Tier 1: reject (at smtp level) anything listed in sbl-xbl.spamhaus.org (don't want to use anything drastic like sorbs, since many people do send legitimately from dynamic IP ranges)
Tier 2: reject (at smtp level) anything with an SA score over 20, or anything with a virus. I want to increase the score attached to SPF so that if SPF fails (hard fail rather than soft fail), the score will be high enough to trigger a rejection.
Tier 3: allow users to customize their personal SA scores for subject rewriting or moving stuff into a spam box

I'm trying to ensure *nothing* goes into the global quarantine at all.
Is this kind of configuration possible with SA-3.0.1 + qmail-scanner?

I noticed in qmail-scanner.pl there are 3 different methods for running SA: fast_sa, verbose_sa, alt_sa. Which one are people using with per-user settings configured in ART's SquirrelMail package? There are also some sections in the sa_alt section commented out with things like "remove the comments for per-user sql settings". Is this required?

Thanks in advance folks.

I believe SA implements SPF as just another test in its arsenal of other tests. You shouldnt have to do anything special to get it to work (I didnt)