Spamd failure (content-length mismatch)

ну вот тебе пример письма распознаного как спам:


Received: from gate.domain.ru ([192.168.1.3]) by mail.domain.ru with Microsoft SMTPSVC(5.0.2195.5329);
Fri, 27 Aug 2004 14:06:41 +1100
Received: from 200.48.92.55 ([200.48.92.55])
by gate.domain.ru (8.12.11/8.12.11) with SMTP id i7RDnHvF027705;
Sat, 28 Aug 2004 00:49:25 +1100
Message-Id: <200408271349.i7RDnHvF027705@gate.domain.ru>
From: =?koi8-r?B?7UFQ60VU6e7nIHUgTeXy/kXu5EHq+unu5yA=?= <cgvnephyvep@mkg.com>
To: akrptk <akrptk@domain.ru>
Subject: ***MESSAGE_MARKED_AS_SPAM*** =?koi8-r?B?8s/aznXeztnFINDSz8TB1skuIPPP12XS22XO09TXb9fBzsllLiDTZQ==?=
Date: Fri, 27 Aug 2004 06:51:15 +0400
Reply-To: cgvnephyvep@mkg.com
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_412F3BEB.E6893009"
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-Priority: 3
X-MSMail-Priority: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Flag: YES
X-Spam-Status: Yes, hits=14.3 required=8.0 tests=BAYES_99,DATE_IN_PAST_06_12,
FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_TAGS,HTML_FONTCOLOR_BLUE,
HTML_FONTCOLOR_RED,HTML_FONT_BIG,HTML_MESSAGE,HTML_TITLE_EMPTY,
MIME_HTML_ONLY,RCVD_IN_DSBL,RCVD_IN_NJABL,RCVD_IN_NJABL_PROXY,
RCVD_IN_SORBS,RCVD_IN_SORBS_HTTP,RCVD_IN_SORBS_SOCKS autolearn=no
version=2.63
X-Spam-Level: **************
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on gate.domain.ru
Return-Path: cgvnephyvep@mkg.com
X-OriginalArrivalTime: 27 Aug 2004 03:06:41.0712 (UTC) FILETIME=[E069DB00:01C48BE2]

This is a multi-part message in MIME format.

------------=_412F3BEB.E6893009
Content-Type: text/plain; charset=koi8-r
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "gate.domain.ru", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or block
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: (О95) 98О-6О-58 URI:mailto:merchpod@netscape.net
merchpod@netscape.net 09-10 сентября 2004 года МАРКЕТИНГ и
МЕРЧЕНДАЙЗИНГ В ТОЧКЕ РОЗНИЧНЫХ ПРОДАЖ В результате семинара участники:
[...]

Content analysis details: (14.3 points, 8.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.1 HTML_FONTCOLOR_BLUE BODY: HTML font color is blue
0.1 HTML_MESSAGE BODY: HTML included in message
0.3 HTML_FONT_BIG BODY: HTML has a big font
5.4 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]

0.3 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 HTML_TITLE_EMPTY BODY: HTML title contains no text
0.1 HTML_FONTCOLOR_RED BODY: HTML font color is red
0.7 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date
1.2 RCVD_IN_SORBS_SOCKS RBL: SORBS: sender is open SOCKS proxy server
[200.48.92.55 listed in dnsbl.sorbs.net]
1.1 RCVD_IN_SORBS_HTTP RBL: SORBS: sender is open HTTP proxy server
[200.48.92.55 listed in dnsbl.sorbs.net]
0.7 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org
[<http://dsbl.org/listing?ip=200.48.92.55>;]
0.5 RCVD_IN_NJABL_PROXY RBL: NJABL: sender is an open proxy
[200.48.92.55 listed in dnsbl.njabl.org]
0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS
[200.48.92.55 listed in dnsbl.sorbs.net]
0.1 RCVD_IN_NJABL RBL: Received via a relay in dnsbl.njabl.org
[200.48.92.55 listed in dnsbl.njabl.org]
1.0 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
2.6 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.

а дальше само письмо вложением....