Re: [SPAM] RE: GeoCities Link-only spam

2005-08-22 Thread Eric A. Hall
On 8/22/2005 3:50 PM, Eric A. Hall wrote: > IP::Country use Whois lookups instead though, and UDP/DNS lookups are > going to be faster than chained TCP/Whois queries. > I'll play with the plugin and see what kind of times and load I get Some poking around, IP::Country::Fast uses a pre-built map

Re: [SPAM] RE: GeoCities Link-only spam

2005-08-22 Thread Eric A. Hall
On 8/22/2005 3:34 PM, Derek Harding wrote: > On Sun, 2005-08-21 at 20:05 -0400, Eric A. Hall wrote: > >>What's the benefit of using this instead of the uridnsbl plugin? The code >>below will look for the IP address behind a URI and then query the >>cn-kr.blackholes.us RBL to see if that addr is i

Re: [SPAM] RE: GeoCities Link-only spam

2005-08-22 Thread Derek Harding
On Sun, 2005-08-21 at 20:05 -0400, Eric A. Hall wrote: > What's the benefit of using this instead of the uridnsbl plugin? The code > below will look for the IP address behind a URI and then query the > cn-kr.blackholes.us RBL to see if that addr is in China: This one doesn't require a DNS lookup w

Re: [SPAM] RE: GeoCities Link-only spam

2005-08-21 Thread Eric A. Hall
On 8/8/2005 5:05 PM, Derek Harding wrote: >>>It allows rules such as: >>>uricountry URICOUNTRY_CN CN >>>header URICOUNTRY_CN eval:check_uricountry('URICOUNTRY_CN') >>>describeURICOUNTRY_CN Contains a URI hosted in China >>>tflags URICOUNTRY_CN net >>>score U

RE: [SPAM] RE: GeoCities Link-only spam

2005-08-08 Thread Greg Allen
just go through the time to type several of them in and test them. I am just not sure yet. :-) -Original Message- From: Derek Harding [mailto:[EMAIL PROTECTED] Sent: Monday, August 08, 2005 5:05 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Apache. Org Subject: Re: [SPAM] RE: GeoCi

Re: [SPAM] RE: GeoCities Link-only spam

2005-08-08 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 awesome! any chance you could put this on the wiki, linked from CustomPlugins? - --j. Derek Harding writes: > On Mon, 2005-08-08 at 15:53 -0500, [EMAIL PROTECTED] wrote: > > > > > > It allows rules such as: > > > uricountry URICOUNTRY_CN CN

Re: [SPAM] RE: GeoCities Link-only spam

2005-08-08 Thread Derek Harding
On Mon, 2005-08-08 at 15:53 -0500, [EMAIL PROTECTED] wrote: > > > > It allows rules such as: > > uricountry URICOUNTRY_CN CN > > header URICOUNTRY_CN eval:check_uricountry('URICOUNTRY_CN') > > describeURICOUNTRY_CN Contains a URI hosted in China > > tflags URICO