On Mon, 27 Nov 2006, Daryl C. W. O'Shea wrote:
> John Rudd wrote:
> > Rob Mangiafico wrote:
> >> On Thu, 23 Nov 2006, John Rudd wrote:
> >>> I've changed RelayChecker's name to Botnet (since that's its real 
> >>> purpose: identify potential botnet submitted messages).  Here's the 
> >>> 0.4 release.
> >>> ... So, let me know what you think.  Let me know if you find any 
> >>> bugs, what your hit/miss/fp stats are (one person said 78% accuracy 
> >>> with 1% fp's), 
> >>
> >> Does the program skip over those IPs in the trusted_networks array or 
> >> IP's that are added from the POPAuthPlugin Plugin?
> >> http://wiki.apache.org/spamassassin/POPAuthPlugin
> >>
> >> Rob
> >>
> > 
> > It skips over the IPs in trusted_networks, but I have no knowledge of 
> > how it interacts with the POPAuthPlugin plugin.
> 
> The POPAuth plugin just dynamically adjusts your trusted_networks 
> config, so anything that pays attention to your trusted_networks config 
> will work just as well with the POPAuth plugin.

Great, thanks for confirming. Didn't want to score it that high until I 
knew we'd be avoiding our own users. Been running it for a few hours, got 
a few 1000 hits so far, sorted by score, and have not found a false 
positive yet. So far so good!

I think I'll score it at 3 instead of 5 for now.

Rob

Reply via email to