> Most of the spam that I get is coming from Netherlands,
> Germany, France, Italy and so on and so on.
Why do you know from where the message is comming from?
Note that a message having a sender address like [EMAIL PROTECTED] can
come from everywhere around the world.
> Is there anyway to block these based on the country?
Using Declude Pro you can use the all_list.dat file. With this file declude
is able to resolve IP-Adresses to the assigned countries.
Based on your question I assume that at the moment you don't know exactly
from where your spam is comming from really.
Below you can see a report from our server created on 11/07/2003:
>From 7880 hold spam messages that was delivered to our server in Italy
they was sent from or delivered trough
3411 UNITED STATES
1177 [IANA Reserved]
950 CHINA
690 ITALY
481 [Unknown]
418 KOREA-KR
344 CANADA
327 BRAZIL
266 GERMANY
218 [ARIN Unlisted]
198 UNITED KINGDOM
168 [Multicast]
148 FRANCE
141 MEXICO
127 SPAIN
122 JAPAN
99 NETHERLANDS
90 SWEDEN
88 RUSSIAN FEDERATION
86 TAIWAN
81 [RIPE Unlisted]
74 VENEZUELA
61 INDIA
58 POLAND
58 ISRAEL
58 CHILE
58 AUSTRIA
58 AUSTRALIA
56 ARGENTINA
41 HONG KONG
38 SWITZERLAND
35 BELGIUM
33 [APNIC Unlisted]
22 FINLAND
22 DENMARK
22 [Central/South America]
18 TURKEY
18 SLOVENIA
17 NEW ZEALAND
17 HUNGARY
15 THAILAND
14 PHILIPPINES
13 NORWAY
13 MALAYSIA
12 PORTUGAL
12 PERU
12 EGYPT
11 SINGAPORE
11 [Public Data Network]
9 COLOMBIA
7 UNITED ARAB EMIRATES
7 SOUTH AFRICA
7 SAUDI ARABIA
7 IRAN
6 NIGERIA
6 ESTONIA
6 CZECH REPUBLIC
6 BAHRAIN
5 TRINIDAD AND TOBAGO
5 SLOVAKIA
5 PALESTINE
5 PAKISTAN
5 OMAN
5 LUXEMBOURG
5 LATVIA
5 KUWAIT
5 [Multi-Regional]
4 ROMANIA
4 PANAMA
4 MALTA
4 ICELAND
4 GREECE
4 EL SALVADOR
3 IRELAND
3 INDONESIA
3 BOLIVIA
2 UKRAINE
2 TUNISIA
2 MOROCCO
2 LITHUANIA
2 JORDAN
2 ECUADOR
2 DOMINICAN REPUBLIC
2 BARBADOS
2 ALGERIA
1 YUGOSLAVIA
1 VIET NAM
1 URUGUAY
1 TOGO
1 SUDAN
1 SENEGAL
1 PUERTO RICO
1 MAURITIUS
1 LAO
1 KENYA
1 GIBRALTAR
1 GEORGIA
1 CROATIA
1 COTE D'IVOIRE
1 COSTA RICA
1 BULGARIA
1 BAHAMAS
1 AZERBAIJAN
I can't immagine that spammers are smart enough to send spam only from
oversea (in both directions)
If you can see a lot of spam messages having .de/.fr/.nl sender domains and
you're pretty sure that nobody on your server will repeatedly receive a
legit message from such a sender domain that you can assign an accurate
weight to it.
Markus
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
