Basically, what I want to do is add about 3 or 4 points to any mail that comes from certain countries (I'm looking in particular at the lists at http://www.okean.com/asianspamblocks.html).
I don't want to out and out block those ranges, but it'd be nice to be able to bump up the spam score for countries we simply don't have any business contact with.
Why not just do it RBL style and use blackholes.us? Doing it with static rules is rather difficult, and hard to update.. DNSBLs were MEANT for this kind of thing.
header RCVD_IN_RUSSIA eval:check_rbl('country', 'russia.blackholes.us.')
describe RCVD_IN_RUSSIA Received from Russia
score RCVD_IN_RUSSIA 0.1
You can even cache the DNS zones locally by downloading them or doing a zone transfer.
