@sun @i @asa @jeffcliff

I've been running spamassassin (spamd) for decades, all I've ever had to do is roughly the following. Mind you my postfix smtpd_recipient_restrictions (ie. check_sender_access, check_recipient_access, reject_rbl_client, etc) and fail2ban pretty much eliminate the need for it for all intents and purposes.

sa-learn --no-sync --spam ~/Maildir/spam/*
sa-learn --no-sync --ham ~/Maildir/ham/*