Here is an RBL test for china IP addresses that connect to your server to
pass email. I tested it and it works. I have score of 5 for a while, but you
can change that for anything you want.

Add it to your local.cf if you like it. You should be able to modify for
other countries, see the country list here: http://www.blackholes.us


---start example code----

header RCVD_IN_CHINA            eval:check_rbl('country', 'china.blackholes.us')
describe RCVD_IN_CHINA          Received via a China IP address in
china.blackholes.us
tflags RCVD_IN_CHINA            net
score RCVD_IN_CHINA             5

---end example code-----


Here is another way to do it as well. www.blackholes.us/docs/usage.html
(Above example makes more sense to me though.)







-----Original Message-----
From: Jonathan Nichols [mailto:[EMAIL PROTECTED]
Sent: Monday, August 08, 2005 9:24 PM
To: SpamAssassin Users
Subject: Re: GeoCities Link-only spam


Back on topic..

Since Geocities has done exactly *nothing* to delete the spamvertized
sites, I have no objection to adding 3 points to anything with
*.geocities.com in the URL.

I tried this:

uri GEOCITIES             /uk.geocities.com/i
describe GEOCITIES        High amounts of spam from Geocities.
score GEOCITIES   4.0

... spamassassin --lint came out ok.

Will this work, or have I accomplished something that I wasn't actually
trying to do? ;)




Reply via email to