In addition to the standard country names which show up in the X-Country-Chain: header I also see entries like "[Arin Unlisted]". I can use the country codes to check against the specific country names, e.g.
COUNTRIES 5 CONTAINS kr
but is there any way to add points for any of the other entries I might see in the header, e.g. "[Arin Unlisted]"?
My first question: Do you have the most recent all_list.dat file (from http://www.declude.com/179/all_list.dat)? That will minimize the chances of getting the "[Arin Unlisted]".
Assuming that you do have the latest all_list.dat file, the following may be used for filters, in cases where the country is not known:
*1 Multi-Regional
*2 Europe
*3 North America
*4 Central/South America
*5 Pacific Rim
*A ARIN Unlisted
*B Public Data Network
*E RIPE Unlisted
*I Private IP
*L Loopback
*M Multicast
*P APNIC Unlisted
*R IANA Reserved
*U UnknownSo you could use "COUNTRIES 5 CONTAINS *A" to add 5 points to the weight of E-mails coming from an IP that shows up as "ARIN Unlisted".
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
