Le 19/05/2011 04:46, John Hardin a écrit :
Sure. Well, not a _single_ rule, but you can achieve what you want...

First, write a rule that hits on all messages and assign it a positive
score:


meta       RELAYCOUNTRY_ALL    __HAS_RCVD
describe   RELAYCOUNTRY_ALL    Relayed through any country
score      RELAYCOUNTRY_ALL    1.00


Then write a RelayCountry rule for the "trusted" countries, and assign
it an offsetting negative score:


header     RELAYCOUNTRY_GOOD   X-Relay-Countries=~/(?:US|CA|FR)/
describe   RELAYCOUNTRY_GOOD   Relayed through trusted country
score      RELAYCOUNTRY_GOOD   -1.00

That could be simplified:

header     __RELAYCOUNTRY_GOOD   X-Relay-Countries=~/(?:US|CA|FR)/
meta       RELAYCOUNTRY_NOTGOOD  __HAS_RCVD && !RELAYCOUNTRY_GOOD

[except of course that you might find some legit French senders, for example, relaying via servers elsewhere in Europe, so the list of "good" countries might need to be a bit longer than you initially think]

John.

--
-- Over 4000 webcams from ski resorts around the world - www.snoweye.com
-- Translate your technical documents and web pages    - www.tradoc.fr

Reply via email to