[phoenix]

You can check what the accounts are by running:

zmprov gacf | grep -i spamis

then fix it with:

zmprov mcf zimbraSpamIsNotSpamAccount <ham account>@your.domain
zmprov mcf zimbraSpamIsSpamAccount <spam account>@your.domain