How do you protect against outgoing spam

[kilburn]

I just pass clients' outgoing mails through amavisd-new, using their own "identified" class (to skip rbls). I'm not in favor of rate limiting because some users use a single account as mail proxy for their whole domain ('cause they have an exchange server in-house), so they are much more likely to hit any limits...