Federico Giannici wrote:
I installed Botnet 0.6 with SA 3.1.7.
It seems that it sees botnets where there aren't.
Here it is an example:
X-Spam-Status: No, score=5 required=8
tests=BAYES_00,BOTNET,BOTNET_CLIENT,BOTNET_CLIENTWORDS,BOTNET_IPINHOSTNAME,RCVD_IN_NJABL_DUL,RCVD_IN
_SORBS_DUL
Received: from galadriel.neomedia.it (galadriel.neomedia.it
[195.103.207.9])
by arwen.neomedia.it (8.13.7/8.13.7) with ESMTP id kBE8jqVf015060
for <[EMAIL PROTECTED]>; Thu, 14 Dec 2006 09:45:55
+0100 (CET)
Received: from Giuseppe
(host189-198-static.104-80-b.business.telecomitalia.it [80.104.198.189])
by galadriel.neomedia.it (8.13.7/8.13.7) with SMTP id kBE8jp10017336
for <[EMAIL PROTECTED]>; Thu, 14 Dec 2006 09:45:51
+0100 (CET)
Maybe it looked at the second Received?
Is the first received a trusted IP addr?