-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
John Rudd wrote: > Michael Schaap wrote: >> John Rudd wrote: >>> >>> The next version of the Botnet plugin for Spam Assassin is >>> ready. The install instructions are in the Botnet.txt file, and >>> in the INSTALL file. >>> >> >> Great work! >> >>> >>> To Do before 1.0: >>> >>> (...) >>> >> >> There's another thing that would be really nice to have. You >> know how the DNS rules' descriptions specify what actually >> matches? e.g.: >> >> 3.9 RCVD_IN_XBL RBL: Received via a relay in Spamhaus >> XBL [12.34.56.789 listed in sbl-xbl.spamhaus.org] 1.6 URIBL_SBL >> Contains an URL listed in the SBL blocklist [URIs: example.com] >> >> It would be great if Botnet could do something similar, like: >> >> 2.0 BOTNET The submitting mail server looks like >> part of a Botnet [ip=12.34.56.789 rdns=dhcp12.34.example.org] >> > > Any tips on how to do that? :-} Have a look at the FuzzyOcr plugin, especially on Scoring.pm in the SVN, found here: http://fuzzyocr.own-hero.net/browser/trunk/devel/FuzzyOcr/Scoring.pm In each of the functions, the mail is scored with a different rule, a custom score and a custom description which is generated there. That should be enough for you to reproduce that :) Chris -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFeTiMJQIKXnJyDxURAicaAJ9n5XdSIpvWXrz3W4w2DtKmbiQ82ACgvyAB ywuRctN/qak0u61idiMFw5o= =obGb -----END PGP SIGNATURE-----
