Loren Wilton wrote:
As far as I have understood it Botnet checks the first IP not being in
your "trusted networks".
botnet probably does such checks based on trusted_networks and
internal_networks settings: doesn't check IP in trusted_networks, but
continues on next IP when current one is in internal_networks
(where you should put your own mail forwarders and backups, altogether
with
trusted_networks)
Probably uses first_untrusted. So indeed, if one does not have
trusted_networks set up right, then Botnet will probably draw the wrong
conclusions.
Actually, as currently written, Botnet does a few things of its own to
figure out which entry is the one to check. And it has a few config
options to modify that behavior.
I might change that at some point (to use first_untrusted by default
might be best). But, for now, it does its own thing in trying to figure
it out.