I have implemented site wide SA and it works pretty well except for this kind of spam. postmaster account has been receiving many spam and its not being blocked by SA, I have feed SA to learns hundred of similar spam manually, but still not able to catcth up.
spamassassin --lint -D ... [26113] dbg: bayes: corpus size: nspam = 31488, nham = 6671 ---- *X-Spam-Status:* No, score=3.8 required=5.2 tests=BAYES_99,FORGED_RCVD_HELO, HTML_50_60,HTML_MESSAGE autolearn=disabled version=3.1.4 --- Content-Transfer-Encoding: quoted-printable =20 CAjRTIER TIjFFANY & CO BVjLGARI OMjEGA ROjLEX PAjTEK BRjEITLING =20 ---