John Rudd wrote:

> Botnet's score of 5 is meant to say "this message should be quarantined=


> or flagged for review". It's not saying "this message is _definitely_
> spam".[snip]


The trouble is redundancy in scores, the BOTNET score is usually just the=
start
of a HELO_DYNAMIC_DHCP,HELO_DYNAMIC_HCC,HELO_DYNAMIC_IP ADDR plus RDNS_DYN=
AMIC or
RDNS_NONE and RCVD_IN_PBL,RCVD_IN_SORB ... long list.

So, unless one disables the redundant scores, the other option is to lowe=
r the
BOTNET score. The first procedure is better but needs more work (which o=
nes are
the redundant rules?), the second procedure is easy and that's why most o=
f us
use it.
--=20
Ren=C3=A9 Berber