Here is an RBL test for china IP addresses that connect to your server to pass email. I tested it and it works. I have score of 5 for a while, but you can change that for anything you want.
Add it to your local.cf if you like it. You should be able to modify for other countries, see the country list here: http://www.blackholes.us ---start example code---- header RCVD_IN_CHINA eval:check_rbl('country', 'china.blackholes.us') describe RCVD_IN_CHINA Received via a China IP address in china.blackholes.us tflags RCVD_IN_CHINA net score RCVD_IN_CHINA 5 ---end example code----- Here is another way to do it as well. www.blackholes.us/docs/usage.html (Above example makes more sense to me though.) -----Original Message----- From: Jonathan Nichols [mailto:[EMAIL PROTECTED] Sent: Monday, August 08, 2005 9:24 PM To: SpamAssassin Users Subject: Re: GeoCities Link-only spam Back on topic.. Since Geocities has done exactly *nothing* to delete the spamvertized sites, I have no objection to adding 3 points to anything with *.geocities.com in the URL. I tried this: uri GEOCITIES /uk.geocities.com/i describe GEOCITIES High amounts of spam from Geocities. score GEOCITIES 4.0 ... spamassassin --lint came out ok. Will this work, or have I accomplished something that I wasn't actually trying to do? ;)