What happens if you only accept 1 recipient (in filter_recipient) per message, and tempfail all of the others? In theory, this should cause every message that gets to the body filters to have 1 recipient, and thus there should be no conflict between anti-spam settings, right?