Re: Botnet 0.8 Plugin is available (FINALLY!!!)

2007-10-02 Thread hanz
to reduce their load and some of my users forward their email from other departmental servers. Hanz Daryl C. W. O'Shea wrote: > > hanz wrote: >> Thanks for the explanation and quick replies from everyone. I was >> definitely >> wrong in my assumption on how b

Re: Botnet 0.8 Plugin is available (FINALLY!!!)

2007-10-01 Thread hanz
. botnet_skip_ip ^128\.6\.72\.254$ botnet_skip_ip ^128\.6\.72\.72$ botnet_skip_ip ^128\.6\.31\.85$ botnet_skip_ip ^128\.6\.31\.86$ Hanz John Rudd wrote: > > hanz wrote: > >> >> I believe if botnet.pm is check

RE: Botnet 0.8 Plugin is available (FINALLY!!!)

2007-09-28 Thread hanz
Thanks for confirming how botnet works. This is exactly the problem! Botnet.pm is only checking the LAST IP and not the FIRST in the example email. The first IP in the list is a definite botnet source but botnet.pm does not detect this as a botnet email. hanz Jason Bertoch [Electronet

Re: Botnet 0.8 Plugin is available (FINALLY!!!)

2007-09-28 Thread hanz
I hope I am right and you could find a way to get this to work. Here is a sample of the bad email which may or may not be from botnet source. http://www.cs.rutgers.edu/~makmur/forjrudd.txt Hope I give enough details. Thanks again for making fighting spam email e