I guess it depends on exactly what text it is searching for. In looking at my log files (set to Debug), I see that when it is checking the COUNTRIES filter I created, it displays a message like "Checking countries: *A ." Is it actually looking for an asterisk followed by an A? Here are some "non-countries" and the corresponding text displayed in the log file:
[ARIN Unlisted] *A [RIPE Unlisted] *E [IANA Reserved] *R [Unknown] *U Does this mean we should be using a line like COUNTRIES 0 CONTAINS *A Is that asterisk a literal or will it act as a wildcard? Is anyone using this in a country filter? -------- Original Message -------- > From: Nick Hayer <[EMAIL PROTECTED]> > Sent: Friday, September 16, 2005 12:36 PM > To: [email protected] > Subject: [Declude.JunkMail] ROUTING and COUNTRIES > > Help from the guru's please... > > Wouldn't [shouldn't] this email fail the ROUTING test? > > X-Country-Chain: UNITED STATES->[IANA Reserved]->UNITED STATES->destination > X-Note: SMTP Sender: [EMAIL PROTECTED] > X-Note: Sent from: [Revdns: [No Reverse DNS]] [RemoteHostDomain: > lgvsoft.at] [RemoteIP: 58.142.35.136] [SenderHost: lgvsoft.at] > X-Note: Spam [v:2.0.6.16] tests: IP4R.SORBS.DYNAMIC [0], > EXTERNAL.CIP.OnlyIp [2], TEST.DYNHELO [5], TEST.REVDNS [0], FILTER.DYNA > [5], FILTER.COMBO.DYNHELO.CIP [3] > > Also - is there a way to determine that this email came from/through a > foreign [to the US] source? > This email did not trigger on a foreign filter file that contains: > COUNTRIES 0 CONTAINS IANA Reserved > > Same file has these than never trigger it seems either > COUNTRIES 0 CONTAINS ARIN Unlisted > COUNTRIES 0 CONTAINS RIPE Unlisted > > Thanks! > > -Nick > --- --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
