>...
>I want to be able to assign spam-scores based on the country/countries
>hosting the web-server (or servers) mentioned in the body of an e-mail
>(if there are any links in the mail).
>
>I want to assign a spam-score of say 4.0, if the a mail contains a URI
>that resolves to a server in China, so a message like this would be flagged:
>...
>To do what I want, Spamassassin needs to parse the body for http://
>URIs, resolve the hostname(s), look-up the IP address(es) in the
>blackholes list and assign a spam-score if any.
>
>The question is: Does this work? And how?
>
>Thanks!
>
>-Markus
>
uridnsbl URIBL_CN_BLKHOLE cn.blackholes.us, A
body URIBL_CN_BLKHOLE eval:check_uridnsbl('URIBL_CN_BLKHOLE')
describe URIBL_CN_BLKHOLE Contains an URI in cn.blackholes.us.
tflags URIBL_CN_BLKHOLE net
score URIBL_CN_BLKHOLE 4.0
Add this to your site-local rules (not that I recommend such a high
score for any country, but it is what was requested). cn.blackholes.us will
not catch everything, but is will catch a lot of what you are asking for.
BTW. Your example should already be hitting the URI rule for Spamhaus.
Paul Shupak
[EMAIL PROTECTED]
