Re: [Declude.JunkMail] adding weight based on x-country-chain

[Scott Fisher]

I do score this way. One of the reasons is I can track whwere the spam is coming from with the log results. I'll score 30 points on a hold of 200. Not too high.   I'll then run those that didn't fail the Filter-country through Matt's MP_Foreign Test ending those that triggered the initial country filter. Matt's MP Foreign filter looks at the headers/mailfrom/helo/revdns for country codes.   There is definite false positives but 30 points is 15% of the hold weight, pretty reasonable. With the internationalization of companies, you never know where a company's email server lives.   ----- Original Message ----- From: John Carter To: Declude.JunkMail@declude.com Sent: Wednesday, February 15, 2006 9:46 AM Subject: RE: [Declude.JunkMail] adding weight based on x-country-chain Of course, all of this is "your mileage will vary", but .... Scott's filter might be simpler (therefore better), but I have a country filter (which I got from Scott) which allows me to set the score by the country.   The Global.cfg is FILTER-COUNTRY filter  d:\Decludefilters\filter-country.txt x 0 0 (zero scoring because it comes from the filter)   $default$.junkmail is FILTER-COUNTRY  WARN   The filter-country.txt file is (snip) COUNTRIES    3    CONTAINS    AD COUNTRIES    3    CONTAINS    AE COUNTRIES    3    CONTAINS    AF COUNTRIES    3    CONTAINS    AG COUNTRIES    3    CONTAINS    AI COUNTRIES    3    CONTAINS    AL COUNTRIES    3    CONTAINS    AM COUNTRIES    3    CONTAINS    AN COUNTRIES    3    CONTAINS    AO COUNTRIES    3    CONTAINS    AQ etc.   For me, I removed the US and set CA & UK to one (of course based on the nature of our clientele.) Others are at 3, but I can adjust each if I have particular problems.   John C From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Duncan Sent: Wednesday, February 15, 2006 8:48 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] adding weight based on x-country-chain Is there a way to add a weight based on the country?  I do not want to block on country, but the chances of mail coming from somewhere other than Canada or the US is fairly remote, so a weight on country + anything would mean it’s got a high chance of being spam.   I couldn’t find anything in the docs on it.   Susan Duncan Web/Communications Officer / Agent des Communications/web Union of Taxation Employees / Syndicat des employées de l'Impôt Tel: 613-235-6704 ext 240 Fax: 613-234-7290 e-mail: [EMAIL PROTECTED] http://www.ute-sei.org/