2 Questions

2005-07-13 Thread Mark Hamilton 
I have 2 questions.

1.  Does anyone know if spamassassin is going to support DKIM when Yahoo and
Cisco get it released?

2.  Is there a quick way to blacklist a country?

Some background for #2:
I have a customer who wants to filter anything coming from China or Korea
but for obvious reasons I don't want to make this a site wide type of
filter.  I have spamassassins spamd installed on 5 servers and I am using
spamc to access them over a gigabit backplane network from several mail
stores.  I use procmail to do the email backup, calling spamc, email
forwarding and dumping email to a user accessible junkmail folder if
spamassassin determines that an email is spam.  The pool of spamassassin
machines have a replicated database with each of the users preferences in
it.  We have a web site we designed for our users to log into so they can
control their own preferences that updates the database.  Is there some test
I can tell my customer to add to his preferences to filter China?  I didn't
see anything that filters based on locale.

Re: 2 Questions

2005-07-13 Thread Mark Hamilton 
 Mark Hamilton wrote:
  I have 2 questions.
 
  1.  Does anyone know if spamassassin is going to support DKIM when Yahoo
and
  Cisco get it released?
 
  2.  Is there a quick way to blacklist a country?
 

 pre-built as a RBL for your convenience:
 http://www.blackholes.us/

 Which can be made into a SA rule pretty easy if you have DNS checks
enabled:

 header RCVD_IN_CHINA_KR eval:check_rbl('countrycnkr',
 'cn-kr.blackholes.us.')
 describe RCVD_IN_CHINA_KR   Received from China or Korea
 tflags  RCVD_IN_CHINA_KRnet
 score RCVD_IN_CHINA_KR  1.0


 Note, watch for line-wraps, that's supposed to only be 4 lines of text.


Hey, that was painless and effective.
Thanks
Mark