Seeing DNS_FROM_SECURITY_SAGE prompted me to set that to score 0 since security sage is dead now. (another point. according to spamassassin's website "This rule is obsolete, and [WWW] was removed in October 2007." Why is it still in Zimbra's rules?)

Anyway, I set the score to 0 in salocal.cf.in:

score DNS_FROM_SECURITYSAGE 0

and restarted zmamavisdctl and sent myself a message. I still see the DNS_FROM_SECURITYSAGE score. So, I added the score line to salocal.cf, restart. No dice. Then I added it to /opt/zimbra/conf/spamassassin/local.cf which also did nothing.

Am I missing something here? How do I score this thing 0? It wasn't until commenting the DNS_FROM_SECURITYSAGE line out of

/opt/zimbra/conf/spamassassin/updates_spamassassin_org/50_scores.cf

that it finally worked.

Looks like that updates folder is being scanned in the wrong order upon amavisd start.