EFA Project works great out of the box. However I did run across one issue.
By default it only scans messages that are 200k and smaller. This worked great in the past when bandwidth was expensive and spammers were using plain text. however these days they are sending pictures to get by spam filters etc. That being the case the messages are getting larger than 200k and not getting by the spam filter due to their size without being scanned. so here is how to correct that
The specific location to edit is:
/etc/MailScanner/MailScanner.conf
This line:
Max Spam Check Size = 200k
I modified by adding a 0
Max Spam Check Size = 2000k
On a resource constrained box this might cause performance issues but for me it’ll be ok (CPU and RAM is cheap these days).
Thanks to BitWrangler at EFA project forums for the info in this post