Yahoo Groups archive

Milter-greylist

Index last updated: 2026-04-28 23:32 UTC

Message

BotNet plugin

2006-12-25 by Federico Giannici

I'm new to this mailinglist so I don't know if this has already been 
proposed...

Have you considered to implement the tests done by the BotNet plugin of 
SpamAssassin?

http://people.ucsc.edu/~jrudd/spamassassin/Botnet-0.7.tar

It try to identify the botnets by looking at the DNS information of the 
last relay. It appears to me (and many others on SpamAssassin 
mailinglist) to be VERY effective. It gives some false positives so it's 
not a good idea to use for blacklisting, but it is very good for 
greylisting.


Thanks.

-- 
___________________________________________________
     __
    |-                      giannici@...
    |ederico Giannici      http://www.neomedia.it
___________________________________________________

Attachments

Move to quarantaine

This moves the raw source file on disk only. The archive index is not changed automatically, so you still need to run a manual refresh afterward.