Le 19/05/2011 04:46, John Hardin a écrit :
Sure. Well, not a _single_ rule, but you can achieve what you want...
First, write a rule that hits on all messages and assign it a positive
score:
meta RELAYCOUNTRY_ALL __HAS_RCVD
describe RELAYCOUNTRY_ALL Relayed through any country
score RELAYCOUNTRY_ALL 1.00
Then write a RelayCountry rule for the "trusted" countries, and assign
it an offsetting negative score:
header RELAYCOUNTRY_GOOD X-Relay-Countries=~/(?:US|CA|FR)/
describe RELAYCOUNTRY_GOOD Relayed through trusted country
score RELAYCOUNTRY_GOOD -1.00
That could be simplified:
header __RELAYCOUNTRY_GOOD X-Relay-Countries=~/(?:US|CA|FR)/
meta RELAYCOUNTRY_NOTGOOD __HAS_RCVD && !RELAYCOUNTRY_GOOD
[except of course that you might find some legit French senders, for
example, relaying via servers elsewhere in Europe, so the list of "good"
countries might need to be a bit longer than you initially think]
John.
--
-- Over 4000 webcams from ski resorts around the world - www.snoweye.com
-- Translate your technical documents and web pages - www.tradoc.fr