To show my point that this is related to all X-Spam header-fields that are already in the original mail I added a new rule and a similar header to my test-mail:
Email-Header: X-SPAM-FLAG: YES X-SPOM-FLAG: YES Rules: header ALLREADY X-SPAM-FLAG:raw =~ /YES/ describe ALLREADY wurde schon mal markiert score ALLREADY 4 header OLLREADY X-SPOM-FLAG:raw =~ /YES/ describe OLLREADY wurde schon mal markiert score OLLREADY 4 Result: 4.0 OLLREADY wurde schon mal markiert So again my first question: How do I force SA to check X-Spam-* fields in the header of the original mail?
<<attachment: nobs.vcf>>