im just wondering: can one block this 'country' because the ip's it uses are fake?

or can some of the 'n/a' ip's be real valid ip's? im' asking because i do seem to have received around 400 spams from originating country 'n/a'. Or are these mails a result of the reverse DNS lookup failure?

regards,

Marco

ok, thanks Roberto

I think i will set the block still though.. the chance that our company will receive valid emails from an unregistered country is astronomically small.. (erm or should i say microscopically )

Marco,

These countries are not "unregistered" at all. It just means that the IP hasn't been put in the GeoIP database.

For instance, www.upstreaminter.net is a new ISP in the UK. They have only just started and have been given a block of IP's from RIPE to hand out to their customers (of which I am one). When we go to google from one of these IP's, google tries to re-direct us to the relevant language page, based on the country that the IP is from. Google sends us to it's polish site because it has no idea of where we come from.

Unfortunately, it takes a while for everyone to update their geoip databases and so any mail from me will end up in the N/A list.

No ... It depends on how often you, the user, updates the GeiDB file on your server.  As postes elsewhere, the updated db can be downloaded from:

http://www.maxmind.com/download/geoip/database/GeoIP.dat.gz

Any you can script it to update automatically using any simple script or even patch command.