I installed Botnet 0.6 with SA 3.1.7.
It seems that it sees botnets where there aren't.
Here it is an example:
X-Spam-Status: No, score=5 required=8
tests=BAYES_00,BOTNET,BOTNET_CLIENT,BOTNET_CLIENTWORDS,BOTNET_IPINHOSTNAME,RCVD_IN_NJABL_DUL,RCVD_IN
_SORBS_DUL
Received: from galadriel.neomedia.it (galadriel.neomedia.it [195.103.207.9])
by arwen.neomedia.it (8.13.7/8.13.7) with ESMTP id kBE8jqVf015060
for <[EMAIL PROTECTED]>; Thu, 14 Dec 2006 09:45:55 +0100 (CET)
Received: from Giuseppe (host189-198-static.104-80-b.business.telecomitalia.it
[80.104.198.189])
by galadriel.neomedia.it (8.13.7/8.13.7) with SMTP id kBE8jp10017336
for <[EMAIL PROTECTED]>; Thu, 14 Dec 2006 09:45:51 +0100 (CET)
Message-ID: <[EMAIL PROTECTED]>
From: XXXXXXXXXXXXXXXXX
To: XXXXXXXXXXXXXXXX
References: <[EMAIL PROTECTED]>
Subject: XXXXXXXXXXXXXXX
Date: Thu, 14 Dec 2006 09:53:31 +0100
MIME-Version: 1.0
Content-Type: multipart/report;
report-type=disposition-notification;
boundary="----=_NextPart_000_0021_01C71F65.B65AA420"
X-Mailer: Microsoft Outlook Express 6.00.2800.1478
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1478
Maybe it looked at the second Received?
Bye.
--
___________________________________________________
__
|- [EMAIL PROTECTED]
|ederico Giannici http://www.neomedia.it
___________________________________________________
