Thanks for the suggestions. I had a bit of bother with volatile-sloppy - spamc started timing out and a lot of spam got through. I ended up downgrading back to the sarge version. It looks like the latest version in sloppy needs to be compiled by hand. Think I'll wait until Etch becomes stable - that has 3.1.4, which I believe contains sa-update.