Markus Mayer wrote:
What I would like to do now is to somewhat combine the two approaches: parse mail-bodies for URIs (just as it's done with the Geocities example), then use the IP the link resolves to with the countries blackhole-list to find out if the site is in China, Korea or any of the other well-known spammer-countries (as done in the blackhole rules above) and assign a spam-score based on that.
I wrote a plugin that checks the country of a URI. It's available at http://wiki.apache.org/spamassassin/URICountryPlugin
Derek
