I have been using isoqlog in a relatively low volume email
environment with great success. However, my users and I am getting
tired of getting viagra ads and other spam so I was implementing
spamguard. In reading the documentation, it is suggested that I run
spamguard on the isolog log file. However, it seems to me that since
my isolog file is only added to about four times per day that I am
running spamguard in crontab for no good reason.

It appears that it would be better to still run spamguard on a copy
of the current log since it is upgraded more frequently -- or am I
missing the point?

Thanks
Frank Hagar