From: Mike Grau <m.g...@kcc.state.ks.us> Date: Tue, 12 Feb 2013 14:18:33 -0600 > Hmm.... I would do something like this (untested): > > header RELAY_NOT_US X-Relay-Countries =~ /\b(?!US)[A-Z]{2}\b/ I've had to use, IIRC. X-Relay-Countries =~ /\b(?!US|XX)([A-Z]{2})\b/
XX means unknown, mostly due to stale database. You can update the IP::Country database. See: http://wiki.apache.org/spamassassin/RelayCountryPlugin -jeff