John Rudd wrote:

> Botnet's score of 5 is meant to say "this message should be quarantined
> or flagged for review".  It's not saying "this message is _definitely_
> spam".[snip]

The trouble is redundancy in scores, the BOTNET score is usually just the start
of a HELO_DYNAMIC_DHCP,HELO_DYNAMIC_HCC,HELO_DYNAMIC_IPADDR plus RDNS_DYNAMIC or
RDNS_NONE and RCVD_IN_PBL,RCVD_IN_SORB ... long list.

So, unless one disables the redundant scores, the other option is to lower the
BOTNET score.  The first procedure is better but needs more work (which ones are
the redundant rules?), the second procedure is easy and that's why most of us
use it.
-- 
René Berber

Reply via email to