Jonas, > I just found one reason for FPs in the Botnet plugin. It doesn't > make a difference between timeouts (and other DNS errors) and > negative answers. So if your DNS server/proxy is overloaded (or > slow for some other reason), you'll get FPs > > Since 15 minutes ago, I'm running a slightly modified version of > the plugin that tries to avoid this.
Not to forget the long-standing DNS problem with Botnet: http://marc.info/?l=spamassassin-users&m=118641079630268 http://marc.info/?l=spamassassin-users&m=120783518919154 > In a while I'll send a patch to the author. That is noble, but apparently it doesn't have any effect. Mark