==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version: 1.6.2 MARIADB
- Linux/BSD distribution name and version: Rocky Linux 8.5
- Manage mail accounts with iRedAdmin-Pro? No
====

Excerpt from /etc/amavisd.conf

$sa_tag_level_deflt  = -999;  # add spam info headers if at, or above that level
$sa_tag2_level_deflt = 3;  # add 'spam detected' headers at that level
$sa_kill_level_deflt = 7;  # triggers spam evasive actions (e.g. blocks mail)
$sa_dsn_cutoff_level = 9;   # spam level beyond which a DSN is not sent
$final_spam_destiny = D_DISCARD;

I made sure these settings only exist once.

Excerpt of a X-SPAM Header of a detected Spam E-Mail.

X-Spam-Flag: YES
X-Spam-Score: 8.721
X-Spam-Level: ********
X-Spam-Status: Yes, score=8.721 tagged_above=-999 required=3
    tests=[DRUGS_ERECTILE=2.221, HTML_FONT_LOW_CONTRAST=1,
    HTML_IMAGE_ONLY_28=4, HTML_IMAGE_RATIO_04=0.5, HTML_MESSAGE=0.25,
    SPF_HELO_NONE=0.5, SPF_PASS=-0.25, T_TVD_MIME_EPI=0.5]
    autolearn=no autolearn_force=no

Expected result:
Based on the settings for $sa_kill_level_deflt and $final_spam_destiny I would expect e-mail with a spam score of 8.721 to be discarded, i.e. not delivered to inbox.

Actual result:
While this e-mail is marked as "[SPAM]" it is still delivered to the inbox.

How can I achieve the expected result? I can't find the faulty configuration that is leading to $sa_kill_level_deflt being ignored.