Thanks for your answer. But what happens if the spam score is 9? In my case, some user which set "required_hits 10" at user_prefs file, receive mails with spam, because of the system-wide is just 8.
I think you're running into a problem where your user_prefs aren't being read.
IF that user's user_prefs was read, the required_hits would be 10. A spam with a score of 9 would NOT be tagged, and the system-wide setting of 8 would be completely nonexistant.
However, as I said before, you MUST take extra steps to make user_prefs be used. Most typical setups result in only one user's user_prefs being read for everyone, usualy root or mail.
You MUST tell spamassassin what user to run as when you invoke it from your mail processing system. It can't figure this out on it's own.
