[uxbod]

The appropriate headers we need to see are

X-Spam-Flag: YES
X-Spam-Score: 14.841
X-Spam-Level: **************
X-Spam-Status: Yes, score=14.841 tagged_above=-10 required=6.6
tests=[AWL=-19.240, BAYES_50=0.001, BOTNET=2, DIGEST_MULTIPLE=0.001,
HELO_DYNAMIC_IPADDR2=4.395, HELO_DYNAMIC_SPLIT_IP=3.493,
HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, PYZOR_CHECK=3.7,
RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_BRBL=3,
RCVD_IN_JMF_BL=1.5, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033,
RCVD_NUMERIC_HELO=2.067, RDNS_NONE=0.1, TVD_RCVD_IP=1.931,
URIBL_BLACK=1.955, URI_HEX=0.368]

That way we can see which SA rules have been hit.