On Mon, Apr 24, 2006 at 07:41:15PM +0200, Andrzej Adam Filip wrote:
> Igor Chudov <[EMAIL PROTECTED]> writes:
>
> > I use Spamassassin 3.1.1, and specified the following in my local.cf:
> >
> > loadplugin Mail::SpamAssassin::Plugin::RelayCountry
> > add_header all Relay-Country _RELAYCOUNTRY_
> >
> > When I run spamassassin from command line, it does set the
> > Spam-Relay-Country header, BUT its value is always
> > empty.
> >
> > I do have IP::Country::Fast and I did run spamassassin -D, without
> > noticing anything interesting.
> >
> > I want to delete all email from certain countries, any help will be
> > appreciated.
>
> Could you post topmost Received: headers form sample "message from
> internet"?
>
> One possible explanation would be masking IP of the "true relay"
> e.g. by email gateway to internal mail server transfer.
>
Sure, here is the sample spam:
*From [EMAIL PROTECTED] Mon Apr 24 09:23:43 2006
Return-Path: <[EMAIL PROTECTED]>
X-Spam-Checker-Version: SpamAssassin 3.1.1 (2006-03-10) on
manifold.algebra.com
X-Spam-Level:
X-Spam-Status: No, score=0.8 required=3.0 tests=INFO_TLD,UNPARSEABLE_RELAY
autolearn=disabled version=3.1.1
Received: from ak74.algebra.com (ak74.algebra.com [65.182.171.162])
by manifold.algebra.com (8.13.6/8.13.6) with ESMTP id k3OENhEZ002505
for <[EMAIL PROTECTED]>; Mon, 24 Apr 2006 09:23:43 -0500
Received: from a38198.upc-a.chello.nl (a38198.upc-a.chello.nl [62.163.38.198])
by ak74.algebra.com (8.13.6/8.13.1) with SMTP id k3OENUFQ005425
for <[EMAIL PROTECTED]>; Mon, 24 Apr 2006 09:23:37 -0500
Received: from mail.netelligent.ca
by a38198.upc-a.chello.nl (8.9.3/8.9.3) with ESMTP id CZ7TBbscc5oV
for <[EMAIL PROTECTED]>; Mon, 24 Apr 2006 17:30:47 -0700
Received: from ([EMAIL PROTECTED])
by mail.netelligent.ca with Microsoft SMTPSVC(5.0.2195.5329)
for <[EMAIL PROTECTED]>; Mon, 24 Apr 2006 17:30:47 -0700
Date: Mon, 24 Apr 2006 17:30:47 -0700
From: Ramon Chu <[EMAIL PROTECTED]>
Reply-To: Ramon Chu <[EMAIL PROTECTED]>
Message-ID: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: Hardcoore incesst Content!
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Status: RO
Content-Length: 69
Lines: 4
hardccore family banging!
http://wifiplayarea.info/bxfamilynig.htm
