Byteplant Forum

Home » CleanMail Support » CleanMail SpamAssassin Filter » No more China mail please!
No more China mail please! [message #501] Tue, 27 December 2005 18:20 Go to previous message
Messages: 23
Registered: March 2005
Junior Member
I am wondering how the following message got through. I am trying to use the zz-nerd database to filter e-mail from China. The following is the headers in the mail as stored from the Mail storage filter: (between the ************)
Received: from by ([] running VPOP3) with SMTP for ; Mon, 26 Dec 2005 13:25:36 -0600
X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on
X-Spam-Level: *****
X-Spam-Status: No, score=5.6 required=6.0 tests=BAYES_99,DATE_IN_PAST_12_24 autolearn=no version=3.1.0
Received: from ([]) by ([], envelope-sender=) with No Spam Today! Service V2.3.3.3 100 Recipients for; Mon, 26 Dec 2005 13:25:22 -0600
Date: Mon, 26 Dec 2005 07:31:28 +0200
Reply-To: "lenita reyes"
From: "lenita reyes"
User-Agent: Rodriquezmail v9.8
MIME-Version: 1.0
To: "Katelyn Reed"
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-NoSpamToday-FileID: SpamCheck_0002D8B5.msg
Subject: {Mon-Incoming} Abolish all that you owe without sending an other
X-Monitor-Recipient: john.doe

The filter rule looks like this:
header NERD_DK eval:check_rbl('nerd', '')
tflags NERD_DK net
score NERD_DK 0.1

header NERD_CHINA eval:check_rbl_sub('nerd', '')
tflags NERD_CHINA net
score NERD_CHINA 3.0

I've seen a few messages that have been filtered by but most are not. I am assuming this one should because if I look up the "Received from" IP address above ( using it says it's from China.
Am I using the filter correctly?
Read Message
Read Message
Previous Topic: Learning spam error
Next Topic: Trusted Networks
Goto Forum:

Current Time: Tue Jul 25 18:53:08 CEST 2017