This might be very simple, but Botnet keeps triggering on a local
school district. I THOUGHT that I added it to the pass_domains list
correctly.
Help!
Botnet.cf has the following in it:
botnet_pass_domains amazon\.com # they use IP in Hostname;
dorks
botnet_pass_domains apple\.com # special test case
botnet_pass_domains ebay\.com # pool in hostname
botnet_pass_domains nisdtx\.org # Northwest ISD
botnet_pass_domains ntta\.org # NTTA
The headers that keep getting tripped:
Received: from localhost (localhost [127.0.0.1])
by heap.pbp.net (Postfix) with ESMTP id 76927E41E6
for <jnich...@pbp.net>; Tue, 3 Nov 2009 15:35:26 -0600 (CST)
X-Virus-Scanned: amavisd-new at heap.pbp.net
X-Spam-Flag: NO
X-Spam-Score: 5.743
X-Spam-Level: *****
X-Spam-Status: No, score=5.743 tagged_above=-999 required=6
tests=[AWL=-0.313,
BAYES_00=-2.599, BOTNET=5, HTML_MESSAGE=0.001,
HTML_MIME_NO_HTML_TAG=0.097, MIME_HTML_ONLY=1.457, RCVD_IN_BNBL=2,
RDNS_NONE=0.1]
Received: from heap.pbp.net ([127.0.0.1])
by localhost (heap.pbp.net [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id S3FCL7keoDvd for <jnich...@pbp.net>;
Tue, 3 Nov 2009 15:35:20 -0600 (CST)
Received: from mail.nisdtx.org (unknown [70.129.99.5])
by heap.pbp.net (Postfix) with ESMTP id D58E8E41E4
for <jnich...@pbp.net>; Tue, 3 Nov 2009 15:35:20 -0600 (CST)
Received: from espapp01.nisdtx.org ([10.111.9.24])
by mail.nisdtx.org with ESMTP; Tue, 03 Nov 2009 15:35:18 -0600
Received: from espapp01 ([10.111.9.24]) by espapp01.nisdtx.org with
Microsoft SMTPSVC(6.0.3790.3959);
Tue, 3 Nov 2009 15:35:17 -0600
MIME-Version: 1.0
