On Fri, 2007-08-17 at 16:31 +0200, Kai Schaetzl wrote: > Robert Fitzpatrick wrote on Fri, 17 Aug 2007 08:56:33 -0400: > > > Well, like I said, we had big problems using anything in Botnet except > > nordns. > > That's why everything except the main BOTNET is set to 0 I guess ;-) You > have to check for yourself if it fits or not. I just enabled a few (using > a score of 1.) and lowered the main BOTNET score from 5.0 to 2.0. I think > 5 is much too high as a default, this should be changed. Or maybe it's > deliberate, so people don't just drop the files on their system without > reading botnet.txt and botnet.variants.txt :-) >
Yes, we also cut the nordns score to 4.5, been working well since we did that during that initial setup, now going to try some other things :) *thanks to all for the suggestions* -- Robert
