The Rest of the Stack

Mail getting past spamd goes to your MTA
SpamAssassin scores spaminess/haminess on mail accepted by the MTA
Procmail redirects by score, spam get cc'd to...
Wildcard addresses get sent as spam to...
relaydb - a database maintainer for blacklists and whitelists
spamd-setup uses relaydb to update pf blacklist