This is the issue:
Genuine spam will arrive, be scored appropriately, then the scored mail will be thrown into the notspam folder:
Aug-26-10 04:33:11 Connected: x.x.x.x:35601 -> x.x.x.x:225 -> 127.0.0.1:25;
Aug-26-10 04:33:11 93591-13575 [BombSubject] x.x.x.x <[email protected]> to: [email protected] [scoring:36] -- bombSubjectRe: '% (20)' , 'affordable (16)' -- [*****SPAM***** 66% off. Affordable Watches];
Aug-26-10 04:33:11 93591-13575 [BombRaw] x.x.x.x <[email protected]> to: [email protected] [scoring:70] -- bombRe: 'subject: *****spam (40)' , '66% off (40)';
Aug-26-10 04:33:11 93591-13575 85.113.82.116 <[email protected]> to: [email protected] ClamAV: scanned 9718 bytes in local message - OK ;
Aug-26-10 04:33:11 93591-13575 [Local] x.x.x.x <[email protected]> to: [email protected] local -- relayPort -- [*****SPAM***** 66% off. Affordable Watches] -> /usr/share/assp/notspam/SPAM_66_off_Affordable_Watches__521.eml;