On Wed, 20 Sep 2006, Larry Starr wrote: > Are you certain that SA even sees the message before it's forwarded? > > My first guess, without seeing config files, etc. Would be that your SMTP > daemon (sendmail?) is forwarding the message as it's received.
This sounds like 'filtering with procmail' during personal delivery. In this configuration the MTA will forward (by .forward or /etc/aliases) *before* procmail would ever be called. In this case the user should forward by a private procmail-rule insteaded of the MTA, so that his procmail has a chance to filter Spam. Stucki