Once in a while I detect messages in the MAILSPAM database that should not be there. Analyzing one of the messages today I detected the following:



KS_REASON: Body: cbfe



This rule exists. However, opening the document I cannot see 'cbfe' as part of the displayed content. It also looks like the text has been cut for some reasons.



Taking a closer look at the field properties I find the letters CBFE as part of the encoded MIME content.



After moving the document to another database for further analysis I was no longer able to open or analyce the document. I've got a "field too large" error message.



If I try to look at the mime content I've got a MIME error message, telling something about corrupted multi-part MIME content.



Unfortunately I was not able to do further analysis because I deleted the document on server but could not open the copy of the document in a local database. Therefore my decription of the error and the error messages are vague.



My questions are:



1) Why is MIME corrupted? Is it Domino? Is it kSPAM? Is it somewhere else?



2) Is the corrupted MIME the reason for that matches are found in the encrypted content? If yes, should I avoid valid hex combinations to make sure it does not go to mailspam.



3) If MIME is corrupt, why can I open and read it in Notes Mail without error message after I move it to mailgood?



Peter