Chris,

 

Are you sure you want to use the Hostname of es.countries.nerd.dk? We use zz.countries.nerd.dk with the associated Lookup Value of the country we want to weigh, and then mark "ENABLED" next to the REQUIRED LOOKUP VALUE field. 

 

If you use es.countries.nerd.dk as the Hostname you wouldn't use a Lookup Value other than 127.0.0.1. When using zz.countries.nerd.dk as the Hostname you would then use 127.0.2.212 for the Lookup Value to determine if it originates from ES (Spain).

ah!  I see clearly now.  You've answered my confusion.

 

I have all 200+ entries (one for each country) to see how things are flowing and to build a model of which countries are contributing to my spam dealing headache.

 

However, if I would use the "zz" hostname would I also require adding a ton of country specific Lookup Values? 

I'm sure using "zz" is more efficient.

 

I think you've set my confusion straight.  I appreciate the reply!

Thanks!