[TriLUG] Spamassassin to filter non-US

[Brian Phelps]

It looks like this doesn't check foreign IP's, which is the real
problem.  Often its a .com, but the IP is in another country.

On Wed, Oct 1, 2008 at 11:36 AM, Amnon <amnon at deltaforce.net> wrote:
> From the days when we used spamassassin, in the local.cf file:
>
> #
> header   FROM_FOREIGN_DOMAINS   From =~
> /\@.*\.(?:at|au|be|br|cc|ch|cl|cn|cz|de|dk|fr|fi|hu|it|jp|kr|lv|mn|nl|no|nz|pl|ro|ru|se|sh|tr|tw|tv|za)\>/i
> describe FROM_FOREIGN_DOMAINS   Domain is foreign address
> score    FROM_FOREIGN_DOMAINS   1.0
> #
> header   FROM_FOREIGN_DOMAIN5   From =~ /\@.*\.(?:ru)\>/i
> describe FROM_FOREIGN_DOMAIN5   ru Domain is foreign address
> score    FROM_FOREIGN_DOMAIN5   3.0
> #
>
> Add your own countries.
>
>
>
>
>
>
> ----- Original Message -----
> From: "Jason Watts" <jsnonzzr at gmail.com>
> To: "Triangle Linux Users Group General Discussion" <trilug at trilug.org>
> Sent: Wednesday, October 01, 2008 11:11 AM
> Subject: Re: [TriLUG] Spamassassin to filter non-US
>
>
>> if you block all from everyone except arin.net (and I have no idea who the
>> UK falls under)  I believe you would get them all (please verify what I am
>> saying because I am not 100% on it).  but thats going to be an IP based
>> sollution that could be done at your FW as well.
>>
>> I wish I could suggest more, but I dont know spamassassin to really make
>> much more of a suggestion.
>>
>> On Wed, Oct 1, 2008 at 10:40 AM, Brian Phelps <brphelps at ieee.org> wrote:
>>
>>> I know all the risks and problems this will cause, I really need a way
>>> to do this though.  Management insists.
>>>
>>> On Wed, Oct 1, 2008 at 10:36 AM, Jason Watts <jsnonzzr at gmail.com> wrote:
>>> > Isnt there a fear of blocking large companies like MessageLabs and
>>> > FrontBridge that use Data centers around the world and produce alot of
>>> valid
>>> > emails?
>>> >
>>> >
>>> >
>>> >
>>> > On Wed, Oct 1, 2008 at 10:31 AM, Brian Phelps <brphelps at ieee.org> wrote:
>>> >
>>> >> I have spamassassin installed on my mail server and I would like to
>>> >> filter out all mail received from non-US/UK email addresses.
>>> >> Is there a way to configure spamassassin to do this?
>>> >>
>>> >> Thanks
>>> >> --
>>> >> TriLUG mailing list        :
>>> http://www.trilug.org/mailman/listinfo/trilug
>>> >> TriLUG FAQ  : http://www.trilug.org/wiki/Frequently_Asked_Questions
>>> >>
>>> > --
>>> > TriLUG mailing list        :
>>> http://www.trilug.org/mailman/listinfo/trilug
>>> > TriLUG FAQ  : http://www.trilug.org/wiki/Frequently_Asked_Questions
>>> --
>>>  TriLUG mailing list        :
>>> http://www.trilug.org/mailman/listinfo/trilug
>>> TriLUG FAQ  : http://www.trilug.org/wiki/Frequently_Asked_Questions
>>>
>> --
>> TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
>> TriLUG FAQ  : http://www.trilug.org/wiki/Frequently_Asked_Questions
>>
>> !DSPAM:48e3933366861806111524!
>>
>>
>
>
> --
> TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
> TriLUG FAQ  : http://www.trilug.org/wiki/Frequently_Asked_Questions
>



-- 
Brian Phelps
System Design Engineer
Custom Light and Sound
919-286-0011
http://customlightandsound.com