I've asked several times to have CIDR-IP bypassing or as alternative
solution ignore IP's from a certain country.

In the meantime I've set up the following workaround:

STEP 1)
In the global.cfg keep all IP4R-tests as they are but set the weight down to
1 or zero.

STEP 2)
Create a new filter test COMBO-IP4R-ALL (requires Declude.Pro)
At the top of the filter-file put END statements for the countries you want
to ignore for IP4R-tests. (for example "it" Italy and "de" for Germany)
Below put a TESTFAILED line for each IP4R-test and assign the weight you has
given before in the global.cfg file

============================================
COUNTRY END STARTSWITH  it
COUNTRY END STARTSWITH  de

TESTSFAILED 10 CONTAINS CBL
TESTSFAILED 10 CONTAINS DSBL
TESTSFAILED 10 CONTAINS ORDB
TESTSFAILED 15 CONTAINS SPAMCOP
TESTSFAILED 10 CONTAINS INTERSIL
....
============================================



In theory this should assign points for IP-Blacklists only if the
country-chain does not start with "Italy" or "Germany"
Looking at the logfiles shows that it's working...

... but today there are some legit messages in the hold folder with the
following X-lines in the header:


X-Spam-Tests-Failed: SORBS-SPAM, ... COMBO-IP4R-ALL, WEIGHT100 [135]
X-Country-Chain: ITALY->UNITED STATES->destination

And another one 

X-Spam-Tests-Failed: FIVETEN-FREE, ... COMBO-IP4R-ALL, WEIGHT100 [128]
X-Country-Chain: ITALY->destination


So or I haven't yet understand how country-chain is working or there must be
some error.
How it's possible that COMBO-IP4R-ALL can fail if it's starting with  the
line

COUNTRY END STARTSWITH  it

and the country-chain for the message is "ITALY->UNITED STATES->destination"
or "ITALY->destination"  ?


Markus


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to