I've found these:
http://wiki.apache.org/spamassassin/...kViaForwarding
http://wiki.apache.org/spamassassin/...ailWithHeaders
I added 2 users to my domain,
spam
domain.com and
ham
domain.com (I should've used something obscure so they don't get filled up with spam). They do NOT have SPAM or HAM folders, just inbox.
I added sections with these lines to your great learnspam script:
for FILE in `find $HOME -regex ".*/spam/inbox" -print`
for FILE in `find $HOME -regex ".*/ham/inbox" -print`
(these are untested, please do NOT use them yet)
(I also changed my learnspam cron job to every 5 minutes while I was testing this.)
I forwarded as attachment from my yahoo mail client some previously SA-processed messages that I POP'd in from my surpass mail account; spam to the spam

user and ham to the ham

user. Those forwarded messages have the forwarding headers, but also the X-Spam SA headers in the original message as it passed through my surpass mail server.
I got results like:
Processing /home/<user>/mail/domain.com/spam/inbox
Learned tokens from 5 message(s) (5 message(s) examined)
and
Processing /home/<user>/mail/domain.com/ham/inbox
Learned tokens from 0 message(s) (1 message(s) examined)
So, I'm hopeful...
So, now I need to add a removeforwardingheaders script to my cron jobs.
Can someone please help with that? I have no clue where to start (except the apache.org links above).
(We may need to use the inbox for a working area and then have at the end of the removeforwardingheaders script some code to move the stripped msgs from the inbox to the BigJohn HAM and SPAM folders, and if so, my "find FILE ... regex ..." lines in learnspam will no longer be needed.
Thanks again!
Pete