ALL TRUSTED - not natted - getting negative scored spam

[Terry]

I am not on a natted machine but it is firewalled.  So, I set
trusted_networks to my local machine IP because that's really the only
one I trust.  I am still, after setting this, getting spams with
negative scores.  What am I missing?