Re: [AMaViS-user] poor phisher has nimda?

2009-04-11 Thread Michael Scheidell
SPF_PASS ? Gee, did you even READ what I wrote? How is spf_pass going to stop emails with: /html html (new html section after the /html close?) Guess I am just stupid and don't understand what spf has to do with malformed html. -- Michael Scheidell, CTO |SECNAP Network Security

[AMaViS-user] poor phisher has nimda?

2009-04-10 Thread Michael Scheidell
just when you thought nimda was dead ! A couple of interesting things in this spam, including the use of some span class=SpellEFirst/spanspan Class=SpellElast/span http://pastebin.com/m3c5544f7 (lots of them) almost like the '[]' block art ED adds of last week. also, the email ends in: /html

Re: [AMaViS-user] poor phisher has nimda?

2009-04-10 Thread Benny Pedersen
On Fri, April 10, 2009 14:00, Michael Scheidell wrote: so, what is it trying to do, bank of america phishing? phishing along with nimda? SPF_PASS ? -- http://localhost/ 100% uptime and 100% mirrored :) -- This