I think the weight option would work well. It could be used in conjunction with the rest of the tests.
John Tolmachoff IT Manager, Network Engineer 211 E. Imperial Hwy., Suite 106 Fullerton, CA� 92835 714-578-7999, ext. 104 [EMAIL PROTECTED] www.reliancesoft.com � -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Monday, March 18, 2002 10:16 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Identifying countries Several people have requested a way for Declude JunkMail to identify E-mail from certain countries that commonly send a lot of spam. We did not work on this in the past, as most companies can not block all E-mail from certain countries. However, with the weighting system, this may be a useful test. As those who follow the IMail Forum mailing list know, we are working on a way for Declude JunkMail to identify the country/countries that an E-mail travels through to reach its destination. Rather than rely on the host name of the sending mail server (which is often incorrect, or a .com domain), we wanted to find a way to determine the origin of the E-mail based on the IP address. We searched for a long time to find a way to do this, thinking it was nearly impossible, but have finally found a way to do it (without having our customers have to pay over $300/year for the IP/Country data). To see it in action, you can go to http://www.DNSstuff.com and use the Reverse DNS Lookup or IPWHOIS lookup, both of which will return the country the IP is located in. So, the question now becomes, what to do with this data? Right now, we are adding a "%COUNTRYCHAIN% variable that allows you to have a header such as "X-Country-Chain: Poland->China->Destination" (for an E-mail originating in Poland and routed through a mail server in China). I'm guessing the best use would be a way to have a weight set up for certain countries. For example, an E-mail from China or Korea may start off with a weight of 5, whereas an E-mail from Switzerland could start off with a weight of -2 (which would be useful for mail servers located in Switzerland, who likely do not get much spam directly from other mailservers in their country). Is there a better way to handle countries (such as adding an option for a blacklist, similar to the sender blacklists), or other ways the country information might be useful? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
