I never saw any comment on the country code problem I was having. Is there an updated list that would have properly identified this email? Is there a way to detect "reserved" countries?
You can download the latest IP->Country database from http://www.declude.com/release/170/all_list.dat .
Note that there are no known instances of spammers forging IPs, so if there aren't any IP designations that you should always block mail from. While there are some that spammers should never send from -- such as private IPs -- those IPs could possibly be used internally to send mail.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
