On Fri, 2007-08-17 at 16:31 +0200, Kai Schaetzl wrote:
> Robert Fitzpatrick wrote on Fri, 17 Aug 2007 08:56:33 -0400:
>
> > Well, like I said, we had big problems using anything in Botnet except
> > nordns.

>
> That's why everything except the main BOTNET is set to 0 I guess ;-) You
> have to check for yourself if it fits or not. I just enabled a few (using
> a score of 1.) and lowered the main BOTNET score from 5.0 to 2.0. I think
> 5 is much too high as a default, this should be changed. Or maybe it's
> deliberate, so people don't just drop the files on their system without
> reading botnet.txt and botnet.variants.txt :-)
>


Yes, we also cut the nordns score to 4.5, been working well since we did
that during that initial setup, now going to try some other things

*thanks to all for the suggestions*

--
Robert