I am trying to find documentation regarding the COUNTRY-CHAIN header which I have enabled in the GLOBAL.CFG file.
There is no documentation at this time -- it is an experimental feature. If you search the archives for COUNTRIES, you should find the details on how to set it up.
So far all I have done is just added one header in my GLOBAL.CFG file...
XINHEADER X-Country-Chain: %COUNTRYCHAIN%
The header gets stuck into each incoming message as "X-Country-Chain:" but there's never any countries listed to the right of the colon. How do I get the various countries to show up there?
You need to download the data file -- otherwise, Declude JunkMail won't know what countries the E-mail passed through (they they are based on the IP addresses, not the E-mail addresses).
I can't find anything in the documentation about COUNTRY-CHAIN or COUNTRIES which someone else referred to. What do they mean?
%COUNTRYCHAIN% is a variable, and shows the list of countries the E-mail passed through, and can be used just about anywhere a variable can be used in Declude JunkMail (such as the XINHEADER option). With the XINHEADER option above, you may see something like "X-Country-Chain: FRANCE->SWEDEN->destination." in the E-mail headers.
What purpose do they server for spam filtering with declude from a abstract standpoint?
Certain countries are more likely to send spam than others -- for example, China is getting really nasty.
However, the other thing to keep in mind is that there aren't any countries that send no legitimate mail. So, the country detection works best in a weighted system -- perhaps adding 5 points for E-mail coming from China, and 0 points for E-mail coming from your own country or countries that commonly send you legitimate E-mail.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
