The spam filter does both. You can verify for yourself that flagging a comment most of the time is not enough to kill it.