Scott, Thanks for your quick response as always. In the below I think the URL you meant was http://www.declude.com/release/179/all_list.dat.
Thanks, Much! Dan Geiser [EMAIL PROTECTED] ----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, April 09, 2004 11:59 AM Subject: Re: [Declude.JunkMail] Using COUNTRIES to Add Points for [ARIN Unlisted] > > >In addition to the standard country names which show up in the > >X-Country-Chain: header I also see entries like "[Arin Unlisted]". I can > >use the country codes to check against the specific country names, e.g. > > > >COUNTRIES 5 CONTAINS kr > > > >but is there any way to add points for any of the other entries I might > >see in the header, e.g. "[Arin Unlisted]"? > > My first question: Do you have the most recent all_list.dat file (from > http://www.declude.com/179/all_list.dat)? That will minimize the chances > of getting the "[Arin Unlisted]". > > Assuming that you do have the latest all_list.dat file, the following may > be used for filters, in cases where the country is not known: > > *1 Multi-Regional > *2 Europe > *3 North America > *4 Central/South America > *5 Pacific Rim > *A ARIN Unlisted > *B Public Data Network > *E RIPE Unlisted > *I Private IP > *L Loopback > *M Multicast > *P APNIC Unlisted > *R IANA Reserved > *U Unknown > > So you could use "COUNTRIES 5 CONTAINS *A" to add 5 points to the weight of > E-mails coming from an IP that shows up as "ARIN Unlisted". > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers > since 2000. > Declude Virus: Ultra reliable virus detection and the leader in mailserver > vulnerability detection. > Find out what you've been missing: Ask for a free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > ----------------------------------------------------------------------- > Sign up for virus-free and spam-free e-mail with Nexus Technology Group > http://www.nexustechgroup.com/mailscan > > ----------------------------------------------------------------------- Sign up for virus-free and spam-free e-mail with Nexus Technology Group http://www.nexustechgroup.com/mailscan --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
