perform rule-based tests on header and body. such as:
what fraction of the body is HTML?
what user-agent? (mutt, pine, mozilla are seen as non-spam agents)
Base64-encoded?
To address is empty?
Message-id is generated by spam tool?
Timezone doesn't exist?