header RELAYCOUNTRY_IT X-Relay-Countries =~ /IT/ header RELAYCOUNTRY_BAD X-Relay-Countries =~ /^(US|CN|RU|UA|JP|HK|UK|DE|BR|IN)/
in some cases I have both results in the spam report, I suppose that is because plugin evals all ip address end not lastexterlal, is it correct ? is there a way to check only lastexternal ? any suggestion ? then there is a problem adding the header, I never found it in my header how is possible that the rule find it ?
