> On Mon, 2008-02-18 at 06:14 -0600, Chris wrote: > > > scoring BOTNET at 5.0 dont you get far too many FP's > Besides how do you get clamav to score a plain text mail. > Are you using the clam signatures for spam
Botnet "as is" is way dangerous for an ISP, but for personal defence it works fine. I have it at 4.0 and have got no false positives because of it. All it takes is a Unix/Linux user who does not know about smart hosts to get tagged as an FP... but I do not now such. If some of my friends got tagged because of that, I would tell him about the dangers about having an own mail server w/o a smarthost... and then whitelist him. But so far, no false positives. Botnet gets lots of spam and no false positives. But then again, if I were an ISP I would set the score to .1 or something.
