RelayCountry plugin does the work for you. You configure it to score certain relay countries (looked up by ip extracted from headers, not DNS domain of the sender) and it just does so. I've used it for few years and it works very well. (Since I don't expect any traffic at all from i.e. Vietnam, I give it 5 points. Countries my users do mail but not very often I score with 2 points).
-- Sent from my Android phone with K-9 Mail. Please excuse my brevity. joea <j...@j4computers.com> wrote: I find some SPAM slips through un marked, mostly from certain country codes (in the senders email address/domain). I was thinking of a regex to taste and paste (say add 5 to SPAM score), but don't really want to reinvent a wheel. Or run over my own toes. I did find a plug in or two, but these seem to rely on checking the IP of sender or relay. Since my mail collects at a mail provider, I fetch(mail) it and pass it on to a box running spamassassin, they might not work un-hacked, in any case. Direction?