Sorry for posting a followup so late, but I found the following tidy
solution in an external procedure to junkfilter that I call after the
white-list:

You have to get the reversed IP number and from there the following
eliminates .tr, .cn and .tw, and finally .hk

# Next 4 lines check and report on zz.countries.nerd.dk
NSLOOKUP=`/usr/sbin/nslookup 2>&1 ${REVERSED}.zz.countries.nerd.dk.`
:0fh
*$ NSLOOKUP ?? 127\.0\.3\.24
| formail -A "X-Reject: IP $IPEXTERNAL is in NERD-TR Relays."

# Next 4 lines check and report on zz.countries.nerd.dk
:0fh
*$ NSLOOKUP ?? 127\.0\.0\.15[68]
| formail -A "X-Reject: IP $IPEXTERNAL is in NERD-CN or NERD-TW Relays."

# Next 4 lines check and report on zz.countries.nerd.dk
:0fh
*$ NSLOOKUP ?? 127\.0\.1\.88
| formail -A "X-Reject: IP $IPEXTERNAL is in NERD-HK Relays."

Happy New Year 2004,

--Ralph

Ralph P. Sobek, PhD Disclaimer: The above ruminations are my own.
Ralph.Sobek @ irit.fr http://www.sobek.org/
sobek @ irit.fr Wi-Fi: http://www.irit.fr/~Ralph.Sobek/wifi
Ph:(+33)[0]561556356 FAX:(+33)[0]561556847 http://www.irit.fr/~Ralph.Sobek/
===============================================================================
Impeach George W. Bush for squandering US resources for his own priv. business!
SPAMMERS Beware: http://www.irit.fr/~Ralph.Sobek/welcome.shtml#Mail-Warning


>>>>> "AEW" == Albert E Whale <aewhale@...> writes:

AEW> I've been asked to junk all messages from .ru (or even .cn, .tw ....).
AEW> Can this be implemented in the domains/general file with a rebuild?
AEW> What does it need to look like? Will a simple entry like

AEW> .ru

AEW> work? Or is there something more explicit that I need?

AEW> --
AEW> Albert E. Whale - http://www.abs-comptech.com/aewhale.html
AEW> ----------------------------------------------------------------------
AEW> ABS Computer Technology, Inc. - ESM, Computer & Networking Specialists
AEW> Sr. Network, OpenView and Systems Consultant



AEW> junkfilter, http://junkfilter.zer0.org/ -- End spam, filter it

AEW> Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/