I don't know if this should be reported as a bug or as a feature request - or if I just didn't find the feature.
Sometime certain contacts sends mail that looks like spam to spamassassin. Since there is no automatic way to teach spamassassin as integrated with sme server what is and isn't spam with the bayes filter - we need a way to whitelist those esential email addresses.
Also fyi - spamassassin reads all files ending with .cf that are in the /etc/mail/spamassassin folder so you don't need to have those in the local.cf - they could be in whitelist.cf then restart spamassassin and they will be live.