John Rudd wrote: > Botnet's score of 5 is meant to say "this message should be quarantined > or flagged for review". It's not saying "this message is _definitely_ > spam".[snip]
The trouble is redundancy in scores, the BOTNET score is usually just the start of a HELO_DYNAMIC_DHCP,HELO_DYNAMIC_HCC,HELO_DYNAMIC_IPADDR plus RDNS_DYNAMIC or RDNS_NONE and RCVD_IN_PBL,RCVD_IN_SORB ... long list. So, unless one disables the redundant scores, the other option is to lower the BOTNET score. The first procedure is better but needs more work (which ones are the redundant rules?), the second procedure is easy and that's why most of us use it. -- René Berber