the vacation program generates a file called .forward in your home directory.
The content of the file looks like this (just substitute "ballisti" with your user_name) \ballisti, "|/usr/bin/vacation ballisti"
\ballisti, "|/usr/bin/awk '! /^X-Spam-Status: Yes/ {print}'|/usr/bin/vacation ballisti"
(of course you will substitute "ballisti" with your user_name)
Please note the use of the following characters: " | ' ^ ! / { }
If you have some doubt or problem editing (PC users) then feel free to ask me to do this editing for you: in the long run it save time to both of us!
Please, feel free to look at my /home/ballisti/.procmailrc and /home/ballisti/.forward.bkup files