That empty .../rules000300010001 directory will prevent Spamassassin from working so removing it if it be empty is a needed fix. I did so manually.
Enabling port 8090 allowed sa_update to work correctly so all's well that ends well. I would want to place spamassassin.org IP into my DMZ rather than globally allowing this port.
