Does Exchange Sentry learn what is spam by itself?
Yes and no. Blackhole queries are real time queries of third-party servers and those learn or are dynamic. In that sense, Exchange Sentry is always learning. The heuristic scoring system does not learn. It is manual. This is by design and as such is not prone to spam tricking it. Learning systems will pick up words that spammers deliberately put in their spam emails to spoil or confuse the learning process.