Hi David,
David Barker wrote:
We may want to create a new test which would trigger if multiple countries
are in the routing. Any thoughts would be welcome.
I do not think it would add much value For example I have a Russian
company that send all their email via Hong Kong. I suspect there are
many other instances where it is normal for email to pass through
multiple countries..
-Nick
David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 x 7007 office
978.988.1311 fax
[EMAIL PROTECTED]
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry
vanderzand
Sent: Wednesday, October 08, 2008 7:03 AM
To: [email protected]
Subject: RE: [Declude.JunkMail] country chain
Anybody have any idea why the ROUTING test is not adding to my weight.
Here is another sample of where the ROUTING test should have added to the
score
X-Country-Chain: UNITED STATES->EL SALVADOR->CANADA->destination
X-Spam-Tests-Failed: UCEPROTECT-LEVEL2-, NOABUSE, NOPOSTMASTER,
FILTER-COUNTRY [6]
Harry Vanderzand
NEW ADDRESS Effective Jan 24, 2008
Intown Internet
117 Ruskview Road
Kitchener, ON, N2M 4S1
519-741-1222
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry
vanderzand
Sent: Monday, October 06, 2008 11:24 AM
To: [email protected]
Subject: RE: [Declude.JunkMail] country chain
I am still trying to figure this out
I have the following command in my global.cfg:
ROUTING spamrouting x x 6 0
Yet the following sample did not trigger it:
X-Country-Chain: NIGERIA->UNITED STATES->CANADA->destination
X-Spam-Tests-Failed: FILTER-COUNTRY, WEIGHT10, WEIGHT11 [11]
Should there not have been another 6 points added for the path the mail
took?
Thank you
Harry Vanderzand
NEW ADDRESS Effective Jan 24, 2008
Intown Internet
117 Ruskview Road
Kitchener, ON, N2M 4S1
519-741-1222
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Thursday, October 02, 2008 11:21 AM
To: [email protected]
Subject: re: [Declude.JunkMail] country chain
The ROUTING test was meant for this. It checks for spam that was sent
through multiple countries.
Another way is to add weight to individual countries using a filter and the
COUNTRIES test which will fail based on a country code:
COUNTRIES 10 CONTAINS CN
If you wanted to get really complicated, you could create an IP4R test for
each country using the blacklist at http://countries.nerd.dk/
-------- Original Message --------
From: "Harry vanderzand" <[EMAIL PROTECTED]>
Sent: Wednesday, October 01, 2008 11:35 AM
To: [email protected]
Subject: [Declude.JunkMail] country chain
When spam goes through several countries as in:
X-Country-Chain: UNITED ARAB EMIRATES->POLAND->CANADA->destination
Is there a way to add weight to mail that would have travelled this way?
Harry Vanderzand
NEW ADDRESS Effective Jan 24, 2008
Intown Internet
117 Ruskview Road
Kitchener, ON, N2M 4S1
519-741-1222
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
