so I would think that SpamAssassin is the one deciding on which spam to drop and which spam to let through.
SpamAssassin is only a filter. SpamAssassin cannot 'drop' mail or reject mail.
If that isn't the case, any idea what file I need to edit to block the BAYES_99 spam?
A procmail recipe perhaps?
