When we initially installed ZCS we did not enable the spam or virus features as we had an external device doing this. We've recently thought about spamassassin only in Zimbra, so I thought I'd try it out in our test environment.

Like our production environment, our test environment is a multi-server setup.

Via the admin web interface, I enabled the spamassassin service for both mta's. I then had to run zmspamctl start on each of the mta's.

When I attempt to send an email from one internal account to another internal account it's being deferred and I'm finding this in the logs:

Jun 22 12:29:20 mta1 amavis[1931]: (!)DENIED ACCESS from IP, policy bank ''

Any idea what could be causing this?