[exim] Duplicates using unseen deliver

Exim users,
I'm attempting to troubleshoot an issue for a client, they are using
Exim 4.68 that came bundled with cPanel.
They are trying to archive all messages to/from a certain domain to
another e-mail address. A problem arises when there are multiple
recipients for the local domain. If someone outside sends to
userA@???, and CC:'s others at localdomain.com, the unseen
delivery creates a copy for each user, with a new message ID for the
unseen delivery each recipient.

Here is the system filter in use:

if $recipients contains localdomain.com
         or $sender_address_domain contains localdomain.com
         then
                 unseen deliver archive@???
         else
                 finish
endif

I have a few thoughts on what could be duplicating, such as a program
called BoxTrapper, which according to cPanel does anti spam and anti
virus. It seems it may be accepting the messages, scanning, then
resubmitting to Exim thus triggering multiple system filters for each
recipient.
I have limited access to the server unfortunately.
Is there a way from within the system filter to tell if it is a
resubmitted message, such as the method it was submitted (local
delivery?)



Brent Jones
brent [at] servuhome [dot] net





----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.