I am using the Argosoft Mail serve Spamassassin plugin called ArgoSA that
uses the SA engine.
Here's what happens:
-Message is sent to [EMAIL PROTECTED] and cc'd to [EMAIL PROTECTED]
-Message is intercepted by SA and interrogated - two copies of the message
are delivered to each mailbox - one with the full SA headers and checking
report and the other seeming to have bypassed the check...
SA only adds markup to the message, it can't duplicate it, delete it, or
mail it to someone.
I'd ask on the ArgoSA mailing list.
Loren