MXes


all but the remote ones NFS-mount the Maildir storage
remote ones basically relay to the local ones

spamd in greylisting mode on each host
using replication
custom greyscanners running on other hosts
volume solves most greylisting disadvantages

some pf games
max-src-conn, max-src-conn-rate
passive OS fingerprinting