John Rudd wrote:
The next version of the Botnet plugin for Spam Assassin is ready. The
install instructions are in the Botnet.txt file, and in the INSTALL file.
Great work!
To Do before 1.0:
(...)
There's another thing that would be really nice to have. You know how
the DNS rules' descriptions specify what actually matches? e.g.:
3.9 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[12.34.56.789 listed in sbl-xbl.spamhaus.org]
1.6 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: example.com]
It would be great if Botnet could do something similar, like:
2.0 BOTNET The submitting mail server looks like part
of a Botnet
[ip=12.34.56.789 rdns=dhcp12.34.example.org]
Regards,
- Michael
