Turns out I sent this email too soon. Even though I have use_pyzor 0
in my local.cf, having these lines in v310.pre uncommented was causing
the 5 seconds extra scan time:
loadplugin Mail::SpamAssassin::Plugin::Pyzor
loadplugin Mail::SpamAssassin::Plugin::Razor2
On Tue, Aug 31, 2010 at 10:51 AM
So... They fabricated a mail with a fake mailer, added some fake
double-bounce headers, and then sent it to your postmaster account? That
seems exceptionally unclever of some idiot.
I just ran that twice here on an unloaded system and it took about 6.5
seconds. Only net rule it hit was spam