We figured it out. Wanted to post something back for the next guy- there's a patch for spamass-milter. We simplified it down to always allowing authenticated users.
in the spamass-milter 0.3.1 soure code, in the file called spamass-milter.cpp, search for a couple lines that look like struct context *sctx = (struct context *)smfi_getpriv(ctx); char *queueid; directly after this, put if( smfi_getsymval(ctx, "{auth_type}") !=NULL ){ return SMFIS_ACCEPT; } and save and recompile. But make sure you actually send the tokens to the milter! In your sendmail.mc file, make sure to define something like define(`confMILTER_MACROS_ENVFROM', ``i, {auth_type}, {auth_authen}, {auth_ssf}, {auth_author}, {mail_mailer}, {mail_host}, {mail_addr}'')dnl or it won't even show up! Thank you for the hints. We wouldn't have figured it out without them. -- View this message in context: http://www.nabble.com/a-rule-to-allow-authenticated-users-stopped-working%2C-unless-run-at-user-level-tf3952490.html#a11243044 Sent from the SpamAssassin - Users mailing list archive at Nabble.com.