> > Did you restart spamd? > > > > Effectively yes (but no not really). I am using commandline scanner > whilst doing the tests so the LOCAL.CF is being loaded each time I run > the test. When it is all working then I will restart my spamd daemon to > take effect for all incoming mail. Proof that its working: when I > added the "add_header all Relays-Untrusted" entries (at the same time as > the internal_network entry) they immediately appeared in the spam report.
You’re calling the spamassassin binary? Are you running it as the same user that spamd would run as? What does spamassassin -d tell you about (which/whether) local.cf is loaded? — Matthias