I have started to accept the collateral damage that is false positives and delete all emails on the server that spamassassin classifies as spam. Here is my procmailrc, ready for use with any Maildir based setup. If you use /var/spool/mail, just remove the DEFAULT line. enjoy, but don’t come crying to me if you miss emails.
#LOGFILE=$HOME/procmail.log
#VERBOSE=yes
#LOGABSTRACT=all
DEFAULT=${HOME}/Maildir/
# Send all mail through SpamAssassin
:0fw: spamassassin.lock
* < 256000
| spamassassin
# Mail that is classified as spam will be deleted
:0
* ^X-Spam-Status: YES
/dev/null
Recently, spam has hovered around the 4.5-5.0 mark in spamassassin. Looks like spammers try to send spam just below the default threshold (5), so I made my new threshold 4.5