On Mon, 22 Mar 2010 10:51:20 -0400 micah anderson <mi...@riseup.net> wrote:
> Yeah, I've been having problems recently which I think are related to > me using both Zen/PBL along with the Botnet plugin weighted to score > level 5, even if I were to have it lower at 3 it would still be too > much. If you look in the BOTNET documentation, it's possible to have BOTNET as a meta rule rather than have the logic inside the plugin. IMO it would be sensible to score PBL at 0.001 and bring it inside a BOTNET meta rule, and rescore BOTNET at the current value of the PBL score.
