I ran a test and noticed that they are coming through tagged "BAYES_00" which takes the score down alot:
Sounds like you might want to consider doing some heavy training. I have the occasional spam hit BAYES_20, but rarely, if ever, do I get a BAYES_00.
I'm on a regiment of dumping spamtrap and hamtrap addresses into mailboxes and feeding them to sa-learn in a cron job.
score BAYES_00 0 0 -4.901 -4.900
(BTW, what's with the 4 columns? I never really understood how those work).
From the Mail::SpamAssassin::Conf manpage under the description of the "score" keyword:
If only one valid score is listed, then that score is always used
for a test. If four valid scores are listed, then the score that is used
depends on how SpamAssassin is being used. The first score is used
when both Bayes and network tests are disabled. The second score is
used when Bayes is disabled, but network tests are enabled. The
third score is used when Bayes is enabled and network tests are
disabled. The fourth score is used when Bayes is enabled and net-
work tests are enabled.