I work a small ISP and we have been using spam assassin for about 2 mos. So far it works great except for one thing. Maybe you can point me to some info on it (we have searched google, the documentation available on the spam assassin web site, and several newsgroups).
Some of our customers don't like have their messages tagged (go figure, the used to complain about getting spam), and when we turn them off (all_spam_to [email protected]) it still tags messages when their e-mail address isn't in the To: or Cc: parts of the header (I'm not an expert on e-mail, and I'm not quite sure how that works but it happens).

The only solution that I think might work is to grep for their e-mail address and not run spam assassin at all if its found, but we were hoping for a more graceful solution. Oh yeah, were using it with qmail + vpopmail.

Out of curiosity, what are you using to let the customers turn it on or off themselves -- is it an in house solution or one freely available?

Thanks for any info you can give.