> Thanks for confirming how botnet works. This is exactly > the problem! > > Botnet.pm is only checking the LAST IP and not the FIRST > in the example email. > > The first IP in the list is a definite botnet source but > botnet.pm does not detect this as a botnet email. > > hanz > >
As far as I have understood it Botnet checks the first IP not being in your "trusted networks". Works for me fine.
