I run the following combination: MTA: postfix IMAP: cyrus SPAM: amavisd-new/spamassassin Antivirus:amavisd-new/antivir Postfix is very simple to configure but very secure and supports many faces like Realtime blackhole lists, teergrubbing etc etc. Amavisd-new is just a kind of traffic-deviation (it's more complicated but nevermind) it gets all mails from postfix and delivers it to spamassassin for spam check and antivir for virus-checks before it gets delivered to the cyrus-mailboxes. Cyrus is very flexible if you need virtual domain support and mailbox-quotas. Dovecot is more simple, but even stable and secure. HTH Roger