Rather than using the qmail-queue patch and qmail-scanner to get Spam Assassin working with qmail this (Broken link http://bluesine.com/view?p=debian_qmail) page suggests replacing qmail-queue with a simple sh script.

Seems to work on our internal work server, but of course you would need to put qmail-scanner in to check for viri.