ah... resolved. I forgot that these message hadn't been checked by spamd (and I didn't realize they needed to) after running the whole directory through spamassassin it works as expected.
Learned tokens from 1741 message(s) (2469 message(s) examined) :D -- Caleb Cushing my blog http://xenoterracide.blogspot.com
signature.asc
Description: This is a digitally signed message part.