I've worked out my problem. SpamAssassin is invoked by amavis. Because there is not point in scanning outgoing e-mail for SPAM, amavis only invokes SpamAssassin for a fixed list of domains. Tiger configures amavis to only scan your primary domain, not any others that you list in Local Host...