On Tuesday 27 September 2016 at 12:19:23, Thomas Barth wrote: > Am 27.09.2016 um 11:29 schrieb Antony Stone: > > > Where's the actual SA processing happening, though? Is it possible the > > plugin may be responding to the 127.0.0.1 or 192.168.178.156 addresses > > (which certainly aren't DE, AT, CH or NL)? > > Seems to be the problem.
> This rule should make it easier > header RELAYCOUNTRY_BAD X-Relay-Countries !~ /(DE|AT|CH|NL)/ > > Before I wrote > header RELAYCOUNTRY_BAD X-Relay-Countries =~ /(CN|VN|BH|CO|RU|UA|IN|BR|JP)/ > > https://www.spamhaus.org/statistics/countries/ > > Ok, then I have to use a long country list again. Well, could you keep the short list, but then add another rule based on "private / local addresses" (such as RFC1918 and 127.0.0.0/8 etc), which cancels out the points added for "not a trusted country"? That way you can effectively say "I trust these four countries, or these special addresses, but nothing else". That's the same as "I mistrust anything except these four countries, but I do trust these special addresses". Antony. -- "640 kilobytes (of RAM) should be enough for anybody." - Bill Gates Please reply to the list; please *don't* CC me.
