John Wilcock wrote: > > Le 19/05/2011 04:46, John Hardin a écrit : >> Sure. Well, not a _single_ rule, but you can achieve what you want... >> >> First, write a rule that hits on all messages and assign it a positive >> score: >> >> >> meta RELAYCOUNTRY_ALL __HAS_RCVD >> describe RELAYCOUNTRY_ALL Relayed through any country >> score RELAYCOUNTRY_ALL 1.00 >> >> >> Then write a RelayCountry rule for the "trusted" countries, and assign >> it an offsetting negative score: >> >> >> header RELAYCOUNTRY_GOOD X-Relay-Countries=~/(?:US|CA|FR)/ >> describe RELAYCOUNTRY_GOOD Relayed through trusted country >> score RELAYCOUNTRY_GOOD -1.00 > > That could be simplified: > > header __RELAYCOUNTRY_GOOD X-Relay-Countries=~/(?:US|CA|FR)/ > meta RELAYCOUNTRY_NOTGOOD __HAS_RCVD && !RELAYCOUNTRY_GOOD > > [except of course that you might find some legit French senders, for > example, relaying via servers elsewhere in Europe, so the list of "good" > countries might need to be a bit longer than you initially think] > > John. > > -- > -- Over 4000 webcams from ski resorts around the world - www.snoweye.com > -- Translate your technical documents and web pages - www.tradoc.fr > >
John & John, Thanks so much for the answer. I will try this in the next few days. One quick question though: 1) What does the ?: do in =~/(?:US|CA|FR)/ Thanks so much for the help, Rap -- View this message in context: http://old.nabble.com/RelayCountry-Plugin-tp31652314p31660533.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.