Bill Landry a écrit : > Christian Brel, AKA "rich...@buzzhost.co.uk" (among other aliases), is > back... > > Bill
he switched MUA, but forgot to switch "helo" and get a different IP range... Received-SPF: softfail (nike.apache.org: transitioning domain of brel.spamassassin091...@copperproductions.co.uk does not designate 82.70.24.237 as permitted sender) Received: from [82.70.24.237] (HELO styone.spampig.org.uk) (82.70.24.237) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 14 Dec 2009 16:09:40 +0000 .... From: Christian Brel <brel.spamassassin091...@copperproductions.co.uk> Received: from [82.70.24.238] (HELO stytwo.spampig.org.uk) (82.70.24.238) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 07 Dec 2009 14:42:42 +0000 Subject: Interesting low scoring phish From: "rich...@buzzhost.co.uk" <rich...@buzzhost.co.uk>