[Dshield] I refuse to "whitelist" the word "p-nis"

Johannes B. Ullrich jullrich at sans.org
Wed Aug 13 17:32:08 GMT 2003


This message was converted from multipart/signed to ascii armored
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

for the mail filter people, a sanitized version.

it looks like a MSBlaster variant is going around
which uses as file name the name of a male organ
instead of blaster.exe   (in kiddie speak, the
file name is p 3 |\| 1 5.exe

On Wed, 2003-08-13 at 13:31, David Hart wrote:
> What thread are we bouncing back? I can't be the only person rejecting
> the most filtered word in spam.
> 
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list
-- 
SANS - Internet Storm Center
http://isc.sans.org
PGP Key: http://isc.sans.org/jullrich.txt

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQA/OnYXR1p7hYJvB/wRAo+CAJ9sb0STTRO9a8w5W8jpMPmkzWgZQwCeJibi
5/9VafIZJRDT3cbFpPiIPCM-----END PGP SIGNATURE-----

--
SHA1



More information about the list mailing list