Welcome to the forums
Are you talking about the server or desktop ? It would really help us if you were to update
your profile with the output from the following commands so we know which version of ZCS you are running
Code:
su - zimbra
zmcontrol -v
I will make the assumption though you mean server so why not create a simple SpamAssassin rule ?