Thanks Bob, Matt -
blackholes.us was just what I needed!
Now, the docs were a little fuzzy on what to use where, but does this look about right?
# RULES TO CATCH CHINESE AND KOREAN ORGINIATING ADDRESSES
header LOCAL_RCVD_IN_CN-KR rbleval:check_rbl('cn-kr', 'cn-kr.blackholes.us.')
describe LOCAL_RCVD_IN_CN-KR Received from Chinese or Korean network
score LOCAL_RCVD_IN_CN-KR 3.500
Thanks,
Evan
----Original Message----- From: Bob Apthorpe [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 17, 2004 3:12 PM To: SATalk list Subject: Re: rules based on IP blocks?
Hi,
On Wed, 17 Mar 2004, E. Falk wrote:
> This may be a newbie question, but I'm wondering how I would go about > scoring for Spamassassin based on a list of IP blocks (those could be in > ranges, 127.0.0.1 - 127.0.1.255, or in CIDR format, 123.123.123.123/8, > but not a straight list). > > Basically, what I want to do is add about 3 or 4 points to any mail that > comes from certain countries (I'm looking in particular at the lists at > http://www.okean.com/asianspamblocks.html). > > I don't want to out and out block those ranges, but it'd be nice to be > able to bump up the spam score for countries we simply don't have any > business contact with.
Go to http://www.blackholes.us/ to pick out the appropriate country or ISP DNSBL, then write custom eval:check_rbl() rules. See 'perldoc Mail::SpamAssassin::Conf' for details.
hth,
-- Bob
