I use quite low scoring for this plugin. I know its outdated, but it does (imho) some helpful checks on rdns which sa cannot do alone as it relies on the rdns result from mta. And my mta (postfix) only logs rdns if its a fcrdns :-) And thxs for the hint to check sa baserules first before defining own ones. Will do it this evening
Cheers tobi ----- Originale Nachricht ----- Von: Alex <mysqlstud...@gmail.com> Gesendet: 08.07.2017 - 05:05 An: jahli...@gmx.ch, SA Mailing list <users@spamassassin.apache.org> Betreff: Re: Random word spams and wiki spams > Hi, > >> Without that rule it might have flown below my sa-radar. >> Got some scoring on it by using this plugin: >> https://github.com/eilandert/Botnet.pm > > Be careful with the botnet plugin - it's terribly out of date and very > prone to false-positives. It's just not effective anymore.
