On 2/12/13 1:15 PM, "David F. Skoll" <d...@roaringpenguin.com> wrote:
> On Tue, 12 Feb 2013 14:14:46 -0500
> "David F. Skoll" <d...@roaringpenguin.com> wrote:
>
>> header RELAY_NOT_US X-Relay-Countries =~
>> /\b(?:[A-TW-Z][A-Z]|[A-Z][A-RT-Z])\b/
>
> Emm... should be
>
> header RELAY_NOT_US X-Relay-Countries =~ /\b(?:[A-TV-Z][A-Z]|[A-Z][A-RT-Z])\b/
Quite right, and quite simple. Thanks!
>
> PS: Beware of penalizing other countries too much. My mail originates
> from Canada and the PostgreSQL mailing list is (or used to be?) hosted
> in Panama. Furthermore, by far the lion's share of spam originates from
> the US.
Yes, of course. But some mail just isn't likely to originate overseas. For
example, we have been getting a lot of phishes pretending to be FedEX
non-delivery notices. FedEX is based in the US, so if I see "FedEX" and
RELAY_NOT_US, and a couple of other spam signs, I can more safely conclude
it is spam....