Benny Pedersen wrote:
URICOUNTRY scores on spams that URIs hosted in a given country rather than spam that came from that country. Obviously this isn't suitable for large installations but can be very useful for individuals or small organizations that know they don't have any contact with (for example) China, Korea, India, Russia and so don't expect to receive email referencing websites in those countries.header URICOUNTRY_GB eval:check_uricountry('URICOUNTRY_GB')what if a spammer sends mails from another ip outside GB ? imho such rules only changes the problem, not solving it :(
You're right however that it only changes the problem. Many spammers moved their websites offshore to spam-friendly countries because they were harder to track down and prosecute. Encouraging them to bring the servers back home helps bring them back into local jurisdiction and hopefully increases accountability. Is this flawed logic? Maybe. However uricountry has certainly caught a lot of spam at my site with pretty much no false positives. Obviously YMMV.
Derek
