why are pf-blocked ips 'leaking' thru to spamd?

[snowcrash]

hi jon,

> Multiple tables in rules are tricky because they are not treated as
> "sets" that can be arbitrarily compared (ie, IPs in table A that are
> not in table B).

well a big aha!+grumble on my part ... thanks! for the clarification.
i did NOT understand that correctly :-(

so, *IS* there a way to accomplish that? namely, match against a
boolean-composite of tables?