Network Associates WebShield SMTP V4.5 MR1a on viehom08 intercepted a mail from <glug@lists.linux.it> which caused the Content Filter .pif to be triggered.