On 18 Jan 2018, at 12:52, Andy Howell <a...@gamubaru.com> wrote: > Any ideas what I'm doing wrong?
The headers for your original message will show you , most likely, how Spamassassin was called which is not the same way that it is called on your command line test. Probably you are using something like amavisd or a milter to invoke SA and that is using a different configuration location or is set to load a different configuration (that ignores local.cf, perhaps). I’d start by checking your headers for received lines that contains 127.0.0.1. For example, I see the following on my incoming mail: Received: from mail.covisp.net (localhost [127.0.0.1]) by mail.covisp.net (Postfix) with ESMTP id 3zMvkL61dHzxbCl; Thu, 18 Jan 2018 12:52:26 -0700 (MST) Received: from mail.covisp.net ([127.0.0.1]) by mail.covisp.net (mail.covisp.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bwx-NVnJBvTg; Thu, 18 Jan 2018 12:52:25 -0700 (MST) -- Bishops move diagonally. That's why they often turn up where the kings don't expect them to be.