Yes, all the nasty countries could be added. Great idea going here.
-----Original Message----- From: jdow [mailto:[EMAIL PROTECTED] Sent: Monday, August 08, 2005 5:07 PM To: users@spamassassin.apache.org Subject: Re: GeoCities Link-only spam From: <[EMAIL PROTECTED]> > > On Sun, 2005-08-07 at 12:27 -0400, Greg Allen wrote: > >> They are also using non-Geocities addresses now. Most of the IPs they > >> use seem to been from China, so you could RBL china at the front end, > >> if you are allowed to block China that is... (my users won't let me > >> block China...uggh) > >> > >> > >> ---------------example------ > >> http://enlighteningvaluezone.com?djBK=nNSn7m > >> ---------------end example--------------- > >> > > > > I wrote a SpamAssassin plugin that enables scoring of URIs based on > > country using IP::Country::Fast. It's kind of a companion to > > RelayCountry.pm. I meant to make it public but never got round to > > tidying up the code. Would people be interested in my posting it? > > > > It allows rules such as: > > uricountry URICOUNTRY_CN CN > > header URICOUNTRY_CN eval:check_uricountry('URICOUNTRY_CN') > > describe URICOUNTRY_CN Contains a URI hosted in China > > tflags URICOUNTRY_CN net > > score URICOUNTRY_CN 2.0 > > > > Derek > > > Oh yes, that type code would be very nice to have indeed for people like > me who can't outright RBL them. Do you also have code for Korea even? But > dare I ask too much. :-) I could give it a score of 4 or so... and up it > even more when spammer simpletons start thinking they are on to the latest > greatest China spam idea. :-) Those guys are annoying. The "ro" folks are just plain not nice people. If it comes from Romania it's a phish, keylogger, or worse. {^_^}
