I came across a message from an appriver.com (a large mail filtering service and mail provider) server that failed the BOTNET_BADDNS rule. It does have a serverword, so I modified my scores to prevent the BADDDNS rule from hitting if SERVERWORDS also hits.

Also, I suppose serverwords should include something like "exch".

The IP in question is 207.97.227.84 if you want to see for yourself.

Mark Nienberg

Reply via email to