You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Robert Nicholson <ro...@elastica.com> on 2006/11/11 02:31:22 UTC
Re: is there a way to block email coming from
Here's the solution I use
loadplugin Mail::SpamAssassin::Plugin::URICountry
uricountry URICOUNTRY_GB GB
header URICOUNTRY_GB eval:check_uricountry('URICOUNTRY_GB')
describe URICOUNTRY_GB Contains a URI hosted in GB
tflags URICOUNTRY_GB net
score URICOUNTRY_GB 2.0
On Jun 7, 2006, at 11:53 AM, John D. Hardin wrote:
> On Wed, 7 Jun 2006, Screaming Eagle wrote:
>
>> country, other than USA? How would you look up the network block
>> on country such as Romania, China, Taiwan,Thailand, Korea, and so
>> on...
>
> describe BL_COUNTRY_TW_1 Mail client in Taiwan
> header BL_COUNTRY_TW_1 eval:check_rbl('taiwan',
> 'tw.countries.nerd.dk')
> score BL_COUNTRY_TW_1 0.5
> tflags BL_COUNTRY_TW_1 net
>
>
> --
> John Hardin KA7OHZ ICQ#15735746 http://www.impsec.org/~jhardin/
> jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org
> key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
> ----------------------------------------------------------------------
> -
> Look at the people at the top of both efforts. Linus Torvalds is a
> university graduate with a CS degree. Bill Gates is a university
> dropout who bragged about dumpster-diving and using other peoples'
> garbage code as the basis for his code. Maybe that has something to
> do with the difference in quality/security between Linux and
> Windows. -- anytwofiveelevenis on Y! SCOX
> ----------------------------------------------------------------------
> 11 days until SWMBO's Birthday
>
Re: is there a way to block email coming from
Posted by Robert Nicholson <ro...@elastica.com>.
In my case the rule is designed to catch UK recruiters who are always
contacting me.
This isn't the only way I trap spam obviously.
Another thing I just realized is that this only looks for URI's in
the email itself in order to determine if they reside in the UK.
Something different from RBL type solutions.
On Nov 10, 2006, at 8:54 PM, Benny Pedersen wrote:
>
> On Sat, November 11, 2006 02:31, Robert Nicholson wrote:
>
>> header URICOUNTRY_GB eval:check_uricountry('URICOUNTRY_GB')
>
> what if a spammer sends mails from another ip outside GB ?
>
> imho such rules only changes the problem, not solving it :(
>
> --
> "This message was sent using 100% recycled spam mails."
>
Re: is there a way to block email coming from
Posted by Derek Harding <de...@innovyx.com>.
Benny Pedersen wrote:
>> header URICOUNTRY_GB eval:check_uricountry('URICOUNTRY_GB')
>>
>
> what if a spammer sends mails from another ip outside GB ?
>
> imho such rules only changes the problem, not solving it :(
>
>
URICOUNTRY scores on spams that URIs hosted in a given country rather
than spam that came from that country. Obviously this isn't suitable for
large installations but can be very useful for individuals or small
organizations that know they don't have any contact with (for example)
China, Korea, India, Russia and so don't expect to receive email
referencing websites in those countries.
You're right however that it only changes the problem. Many spammers
moved their websites offshore to spam-friendly countries because they
were harder to track down and prosecute. Encouraging them to bring the
servers back home helps bring them back into local jurisdiction and
hopefully increases accountability. Is this flawed logic? Maybe. However
uricountry has certainly caught a lot of spam at my site with pretty
much no false positives. Obviously YMMV.
Derek
Re: is there a way to block email coming from
Posted by Benny Pedersen <me...@junc.org>.
On Sat, November 11, 2006 02:31, Robert Nicholson wrote:
> header URICOUNTRY_GB eval:check_uricountry('URICOUNTRY_GB')
what if a spammer sends mails from another ip outside GB ?
imho such rules only changes the problem, not solving it :(
--
"This message was sent using 100% recycled spam mails."