Here is an RBL test for china IP addresses that connect to your server to
pass email. I tested it and it works. I have score of 5 for a while, but you
can change that for anything you want.
Add it to your local.cf if you like it. You should be able to modify for
other countries, see the country list here: http://www.blackholes.us
---start example code----
header RCVD_IN_CHINA eval:check_rbl('country', 'china.blackholes.us')
describe RCVD_IN_CHINA Received via a China IP address in
china.blackholes.us
tflags RCVD_IN_CHINA net
score RCVD_IN_CHINA 5
---end example code-----
Here is another way to do it as well. www.blackholes.us/docs/usage.html
(Above example makes more sense to me though.)
-----Original Message-----
From: Jonathan Nichols [mailto:jnichols@pbp.net]
Sent: Monday, August 08, 2005 9:24 PM
To: SpamAssassin Users
Subject: Re: GeoCities Link-only spam
Back on topic..
Since Geocities has done exactly *nothing* to delete the spamvertized
sites, I have no objection to adding 3 points to anything with
*.geocities.com in the URL.
I tried this:
uri GEOCITIES /uk.geocities.com/i
describe GEOCITIES High amounts of spam from Geocities.
score GEOCITIES 4.0
... spamassassin --lint came out ok.
Will this work, or have I accomplished something that I wasn't actually
trying to do? ;)
|