You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2012/09/29 08:57:33 UTC
svn commit: r1391761 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Sat Sep 29 06:57:33 2012
New Revision: 1391761
URL: http://svn.apache.org/viewvc?rev=1391761&view=rev
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1391761&r1=1391760&r2=1391761&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Sat Sep 29 06:57:33 2012
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201209282
+## khop-sc-neighbors.cf v 201209292
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -74,7 +74,7 @@ score KHOP_SC_CIDR16 1.0 0.2 1.0 0.2
# crap, still empty 20100410 bad scrape, script failed to populate rule
# crap, still empty 20110227 this is due to safety net exclusions -> 1 .2 1 .2
-header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b(?:1(?:22\.17[68]|90\.51)|(?:84\.11|46\.)1|59\.90)(?:\.[012]?\d{1,2}){2}\b)/
+header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b(?:1(?:22\.176|90\.51)|(?:84\.11|46\.)1|59\.90)(?:\.[012]?\d{1,2}){2}\b)/
describe KHOP_SC_TOP_CIDR16 Relay CIDR /16 leads SpamCop in worst /16s
tflags KHOP_SC_TOP_CIDR16 nopublish
score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0.4
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:5\.82\.24|7\.19\.25)4|2(?:2\.201\.18|1\.54\.54)|82\.218\.66)|9(?:5\.(?:65\.29|87\.93)|8\.139\.91)|2(?:01\.160\.35|12\.156\.84)|8(?:6\.111\.144|4\.90\.97))\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:(?:2\.201\.1|3\.99\.5)8|1\.54\.54)|1(?:5\.82\.24|7\.19\.25)4|09\.236\.87|82\.218\.66)|9(?:4\.156\.107|8\.139\.91|5\.65\.29)|31\.171\.128|86\.111\.144)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:8(?:(?:6\.123\.13|9\.202\.12)3|8\.(?:13\.39|9\.41)|4\.173\.25)|1(?:2\.215\.4[45]|1\.224\.250)|76\.57\.119)|7(?:2\.42\.186|5\.65\.38)|94\.156\.107|31\.210\.98)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:8(?:(?:6\.123\.13|9\.202\.12)3|8\.(?:13\.39|9\.41)|4\.173\.25)|1(?:2\.215\.4[45]|1\.224\.250)|76\.57\.119)|7(?:2\.42\.186|5\.65\.38)|2\.112\.195|31\.210\.98)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:8(?:9\.(?:2(?:0(?:2\.123\.18|3\.30\.71)|14\.134\.239)|1(?:01\.129\.237|95\.110\.132)|33\.100\.67)|6\.(?:1(?:82\.217\.112|14\.246\.73|59\.77\.216|93\.223\.34)|82\.123\.48)|7\.(?:1(?:0(?:4\.114\.23|5\.35\.126)|20\.9\.50)|6\.253\.234|242\.16\.3)|1\.(?:50\.(?:125\.87|7\.241)|28\.210\.67)|3\.(?:107\.243\.148|83\.171\.155)|4\.17(?:3\.25\.15[89]|2\.210\.6)|2\.21(?:3\.195\.98|8\.66\.101)|8\.(?:13\.39\.226|9\.41\.10)|0\.231\.123\.196)|1(?:2\.(?:2(?:1(?:6\.(?:184\.114|56\.12)|8\.255\.163)|21\.124\.234)|1(?:59\.165\.50|84\.54\.176))|5\.(?:8(?:2\.2(?:36\.87|44\.49)|6\.48\.94)|1(?:38\.126\.70|18\.5\.5)|66\.85\.110)|7\.(?:19\.2(?:47\.66|54\.62)|6\.133\.92|3\.4\.60)|4\.2(?:9\.10(?:3\.50|9\.71)|00\.44\.211)|1\.224\.250\.(?:2(?:15|46)|13[14])|8\.(?:82\.28\.117|97\.37\.194)|3\.16(?:0\.196\.1|1\.80\.2)07|9\.252\.166\.2)|9(?:0\.(?:1(?:9(?:5\.241\.212|1\.210\.76)|(?:8\.177\.13|58\.39\.8)2|07\.139\.10)|2(?:19\.15(?:2\.33|3\.84)|50\.22\.106|37\
.9\.1)|41\.137\.166|85\.12\.45)|5\.(?:88\.139\.7|26\.76\.9)8|3\.138\.240\.195)|2(?:4\.(?:1(?:53\.227\.244|23\.201\.61)|49\.40\.114|83\.49\.6)|2\.(?:1(?:83\.204\.52|54\.28\.98)|3\.187\.212)|1\.(?:165\.40\.206|242\.57\.35|6\.213\.219)|3\.(?:176\.3\.41|99\.58\.3))|7(?:8\.1(?:50\.(?:32|93)\.99|43\.0\.67)|6\.(?:57\.119\.232|33\.10\.249)|7\.34\.162\.129)|0(?:9\.(?:236\.87\.52|70\.71\.173|86\.175\.68)|1\.99\.10\.39|3\.3\.220\.67)|4(?:6\.251\.244\.165|1\.237\.101\.60)|\.252\.229\.4)|2(?:0(?:1\.(?:1(?:20\.37\.27|60\.35\.10)|64\.231\.130)|2\.(?:29\.(?:187\.131|237\.14)|162\.220\.187)|0\.(?:121\.226\.37|32\.122\.254|87\.104\.58)|3\.191\.175\.51|7\.232\.28\.234|9\.195\.112\.88)|1(?:2\.(?:1(?:74\.(?:243\.174|85\.220)|56\.84\.218)|244\.255\.15)|9\.(?:241\.187\.43|70\.1\.211)|1\.107\.139\.225|3\.35\.230\.113|0\.168\.50\.16|6\.58\.122\.51|8\.4\.40\.194)|\.(?:11(?:6\.105\.242|2\.195\.83)|232\.247\.126)|7\.(?:2\.1(?:54\.165|33\.34)|145\.96\.25)|22\.124\.(?:210\.131|194\.75)|4\.173\.49\.166)|8
(?:8\.(?:(?:10(?:0\.107\.21|1\.53\.24)|255\.159\.9)8|80\.154\.167)|9\.(?:7(?:(?:6\.224\.12|8\.201\.)2|7\.108\.38)|115\.192\.152)|4\.(?:111\.96\.198|78\.143\.125|51\.15\.34|90\.97\.17)|2\.(?:160\.(?:219\.249|125\.25)|228\.152\.14)|(?:1\.190\.145\.21|7\.206\.79\.20)1|5\.(?:193\.255\.3|70\.48\.51)|6\.111\.144\.204|0\.77\.134\.103|3\.241\.1\.79)|9(?:4\.(?:1(?:5(?:3\.88\.177|6\.107\.1)|89\.142\.252)|42\.112\.252|73\.212\.124)|1\.(?:1(?:02\.161\.133|46\.203\.75|25\.94\.11)|232\.193\.150)|2\.2(?:47\.232\.232|33\.38\.241|9\.113\.164)|5\.(?:(?:0\.152\.21|65\.29\.17)8|87\.93\.65)|8\.244\.107\.194)|7(?:9\.(?:1(?:23\.234\.60|89\.106\.74)|38\.239\.183)|7\.(?:(?:52\.181\.24|73\.88\.2)6|45\.49\.122)|8\.(?:189\.158\.162|93\.119\.41|29\.4\.78)|2\.(?:253\.189\.219|42\.186\.137)|5\.(?:187\.246\.88|65\.38\.80))|6(?:1\.(?:247\.58\.191|36\.103\.3|5\.192\.4)|8\.1(?:67\.44\.82|87\.4\.83)|2\.42\.11\.248)|4(?:1\.2(?:21\.185\.202|03\.92\.114)|2\.60\.186\.120|6\.119\.182\.25|9\.205\.144\.59)|5(?:(?:9\.
179\.242\.22|\.55\.47\.24)2|0\.14\.163\.91|8\.182\.24\.87)|31\.(?:210\.98\.(?:8[349]|94)|171\.128\.92))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:2(?:1(?:6\.(?:184\.114|56\.12)|8\.255\.163)|21\.124\.234)|1(?:59\.165\.50|84\.54\.176))|5\.(?:8(?:2\.2(?:36\.87|44\.49)|6\.48\.94)|1(?:38\.126\.70|18\.5\.5)|66\.85\.110)|1\.(?:224\.250\.(?:2(?:15|46)|13[14])|68\.105\.22)|7\.(?:19\.2(?:47\.66|54\.62)|6\.133\.92|3\.4\.60)|4\.2(?:9\.10(?:3\.50|9\.71)|00\.44\.211)|9\.(?:46\.119\.234|252\.166\.2)|8\.(?:82\.28\.117|97\.37\.194)|3\.16(?:0\.196\.1|1\.80\.2)07)|8(?:9\.(?:2(?:0(?:2\.123\.18|3\.30\.71)|14\.134\.239)|1(?:01\.129\.237|95\.110\.132)|33\.100\.67)|7\.(?:1(?:0(?:4\.114\.23|5\.35\.126)|20\.9\.50)|6\.253\.234|242\.16\.3)|8\.(?:(?:13\.39\.22|3\.121\.3)6|9\.41\.10)|1\.(?:50\.(?:125\.87|7\.241)|28\.210\.67)|3\.(?:107\.243\.148|83\.171\.155)|4\.17(?:3\.25\.15[89]|2\.210\.6)|6\.1(?:14\.246\.73|93\.223\.34)|0\.231\.123\.196|2\.218\.66\.101)|9(?:0\.(?:1(?:9(?:5\.241\.212|1\.210\.76)|(?:8\.177\.13|58\.39\.8)2|07\.139\.10|10\.218\.41)|2(?:40\.175\.172|19\.152\.33|50\.22\.1
06|37\.9\.1)|85\.12\.45)|5\.(?:88\.139\.7|26\.76\.9)8|3\.138\.240\.195)|2(?:4\.(?:1(?:53\.227\.244|23\.201\.61)|49\.40\.114|83\.49\.6)|1\.(?:165\.40\.206|242\.57\.35|6\.213\.219)|2\.1(?:83\.204\.52|54\.28\.98)|3\.(?:176\.3\.41|99\.58\.3)|5\.182\.117\.11)|7(?:7\.(?:3(?:4\.162\.129|5\.97\.22)|81\.1\.186)|6\.(?:57\.119\.232|33\.10\.249)|8\.1(?:50\.32\.99|43\.0\.67))|0(?:9\.(?:236\.87\.(?:124|52)|197\.69\.122|86\.175\.68)|1\.99\.(?:10\.39|5\.154)|3\.3\.220\.67)|41\.237\.101\.60)|2(?:1(?:2\.(?:1(?:74\.(?:243\.174|85\.220)|56\.8(?:4\.218|5\.70))|2(?:44\.255\.15|6\.15\.171))|9\.(?:241\.187\.43|70\.1\.211)|1\.107\.139\.225|3\.35\.230\.113|0\.168\.50\.16|6\.58\.122\.51|8\.4\.40\.194)|0(?:1\.(?:1(?:41\.240\.52|20\.37\.27|60\.35\.10)|64\.231\.130)|2\.(?:29\.(?:187\.131|237\.14)|162\.220\.187)|0\.(?:121\.226\.37|32\.122\.254|87\.104\.58)|3\.191\.175\.51|7\.232\.28\.234)|2(?:2\.124\.(?:210\.131|194\.75)|1\.163\.239\.100)|\.(?:232\.247\.126|112\.195\.83)|7\.(?:145\.96\.2|2\.154\.16)5|4\.1
73\.49\.166)|8(?:9\.(?:7(?:(?:6\.224\.12|8\.201\.)2|7\.108\.38)|1(?:15\.192\.152|65\.122\.246))|4\.(?:111\.(?:88\.162|96\.198)|78\.143\.125|51\.15\.34|90\.97\.17)|8\.(?:(?:10(?:0\.107\.21|1\.53\.24)|255\.159\.9)8|80\.154\.167)|2\.(?:160\.(?:219\.249|125\.25)|228\.152\.14)|5\.(?:(?:31\.102\.1|70\.48\.5)1|193\.255\.3)|6\.111\.144\.(?:19|20)4|1\.190\.145\.211|0\.77\.134\.103)|9(?:4\.(?:15(?:6\.(?:80\.219|107\.1)|3\.88\.177)|42\.112\.252|73\.212\.124)|1\.(?:1(?:02\.161\.133|46\.203\.75)|2(?:32\.193\.150|14\.128\.25))|2\.(?:2(?:47\.232\.232|33\.38\.241)|80\.51\.225)|5\.(?:65\.29\.178|87\.93\.65)|8\.244\.107\.194)|7(?:7\.(?:(?:52\.181\.24|73\.88\.2)6|45\.49\.122)|2\.(?:253\.189\.219|42\.186\.137)|8\.(?:189\.158\.162|93\.119\.41)|9\.(?:189\.106\.74|38\.239\.183)|5\.65\.38\.80)|6(?:1\.(?:247\.58\.191|36\.103\.3|5\.192\.4)|8\.1(?:67\.44\.82|87\.4\.83)|2\.42\.11\.248)|4(?:1\.2(?:21\.185\.202|03\.92\.114)|2\.60\.186\.120|6\.119\.182\.25|9\.205\.144\.59)|5(?:(?:9\.179\.242\.22|\.55\.47\
.24)2|0\.14\.163\.91|8\.182\.24\.87)|31\.(?:210\.98\.(?:8[349]|94)|171\.128\.(?:10|9)2))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work
@@ -146,14 +146,14 @@ score KHOP_SC_TOP200 4 0 4 0 # unneces
# Spamhaus DROP, http://www.spamhaus.org/drop/
-header KHOP_SPAMHAUS_DROP X-Spam-Relays-Untrusted =~ /(?-xism: (?:by|ip)=(?:(?:1(?:9(?:9\.(?:2(?:4(?:8\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|6\.(?:21[35]|137)|5\.138)|6\.(?:1(?:2[01234567]|[01]\d)|9[6789])|00\.(?:6[456789]|9[012345]|[78]\d)|30\.(?:6[456789]|10[0123]|[789]\d)|54\.(?:3[23456789]|4[01234567])|12\.(?:1(?:1[01]|0\d)|9[6789]))|1(?:9(?:6\.(?:2(?:2[0123]|[01]\d)|19[23456789])|8\.1(?:8[01234589]|[67]\d|9[01]))|6(?:5\.(?:3[23456789]|6[0123]|[45]\d)|6\.20[0123])|85\.(?:19[23456789]|20[01234567])|20\.163)|8(?:4\.(?:6[456789]|9[012345]|[78]\d)|8\.(?:3[23456789]|5[01]|4\d)|9\.(?:1[6789]|3[01]|2\d))|3(?:4\.1(?:[345678]\d|2[89]|9[01])|3\.145)|46\.(?:3[23456789]|6[0123]|[45]\d)|71\.(?:19[23456789]|20[01234567])|5\.15[23]|60\.102)|8\.(?:1(?:8(?:1\.(?:6[456789]|9[012345]|[78]\d)|3\.(?:3[23456789]|6[0123]|[45]\d)|6\.25)|51\.(?:1(?:2[01234567]|5[2345]|[01]\d)|6[456789]|[789]\d)|3\.(?:[023456789]|1[012345]?)|62\.2(?:2[0123]|0[89]|1\d))|2(?:0(?:5\.(?:6[456789]|9[012345]|
[78]\d)|\.(?:1[6789]|3[01]|2\d)|4\.[01234567])|3\.(?:3[23456789]|4[01234567]))|4(?:5\.(?:3[23456789]|4[01234567])|8\.(?:1[6789]|3[01]|2\d))|96\.2(?:2[456789]|3\d)|57\.(?:6[456789]|7\d))|2\.(?:2(?:2(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|9\.(?:3[23456789]|6[0123]|[45]\d))|19\.(?:2(?:1[012345]|0\d)|1[23456789]\d)|6\.25)|1(?:71\.(?:6[456789]|9[012345]|[78]\d)|12\.1(?:1[23456789]|2[01234567])|01\.2(?:0[01234567]|4\d)|60\.44|97\.87)|43\.1(?:5[3456789]|7[56789]|8[01234]|60)|31\.21[23]|67\.16|86\.85)|3\.(?:1(?:0(?:5\.(?:1(?:[24]1|[58]4)|2(?:07|45))|4\.(?:1(?:10|53|76|2)|[39]4|41)|6\.3[2345]|7\.1[6789])|6(?:\.(?:100|213)|9\.25[01])|1(?:0\.136|1\.235)|4(?:2\.244|8\.47)|78\.172)|2(?:0(?:1\.19[23]|0\.167)|2(?:7\.24[01]|8\.145)|3(?:8\.[0123]|\.126)|7\.2(?:3[23]|4[67])|43\.166)|4(?:3\.134|6\.211|1\.38)|0\.(?:14[67]|212))|5\.(?:1(?:4(?:9\.(?:88|90)|\.11[23])|9(?:1\.10[23]|0\.157)|8(?:4\.8[67]|2\.57)|14\.[89]|62\.[67])|2(?:2(?:6\.(?:197|220)|5\.17[6789])|3(?:4\.159|8\.242)|8\.1
[01]|\.21[23]|46\.200)|9(?:3\.(?:18[45]|20[89])|5\.15[15])|8(?:8\.(?:19[01]|22[67])|5\.204)|5(?:4\.17[01]|\.161)|7(?:8\.10|4\.8)[89]|43\.128)|4\.(?:1(?:1(?:0\.16[0123]|6\.14[67])|4(?:6\.20[4567]|0\.229)|\.(?:22[01]|184)|26\.(?:193|251)|65\.[45])|2(?:8\.4[4567]|42\.[23]|9\.185)|6(?:0\.2(?:05|42)|3\.14[4567])|5(?:4\.15[6789]|0\.116)|0\.221|44\.4)|6\.32\.2(?:1[6789]|2[0123]))|5(?:7\.2(?:3(?:2\.(?:1(?:[3456789]|2[01234567]?|[01]\d?)?|(?:[01]?\d?\d|2[0-4]\d|25[0-5])|[23456789]\d?|0)|1\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|26\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|(?:(?:1\.1|9\.2)23|0\.1(?:26|41)|2\.147|5\.190)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|7(?:6\.(?:1(?:07\.7[23456789]|12\.8[01234567])|47\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|98\.(?:5[6789]|6[0123]))|8\.(?:159\.1(?:7[6789]|9[01]|8\d)|218\.1(?:4[0123]|2[89]|3\d))|0\.(?:1(?:06|13|20)|67)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1\.25\.190)|4(?:(?:8\.(?:1(?:05|78)|248)|(?:0\.17|7\.5)0|3\.(?:135|49))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.192\.(?:[06789]|
[125]\d?|3[01]?|4[89]?)|1\.136\.(?:1[67]|2[27])|6\.185\.2(?:18|54))|6(?:7\.(?:2(?:8\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|24\.(?:[0456789]|[12]\d?|3[01]?))|97\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|2\.125\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|2(?:(?:1\.4|9\.7)6\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|8\.1(?:68|99)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2\.202\.(?:1(?:2[01234567]|[01]\d)|9[6789]))|1(?:0\.(?:44\.1(?:4[0123]|2[89]|3\d)|232\.1(?:7[012345]|6\d))|6\.19(?:9\.1(?:[345]\d|2[89])|7\.15[23456789])|3\.20\.1(?:[678]\d|9[01]))|3(?:4\.(?:1(?:27|72)|2(?:09|3)|33)|2\.(?:145|232)|0\.2(?:01|22)|6\.228|9\.167|8\.43)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0(?:3\.(?:10\.(?:6[89]|7[01])|246\.7[2345])|9\.94\.2(?:2[0123]|0[89]|1\d))|8(?:8\.2(?:47\.(?:135|230)|11\.2[45])|6\.190\.2(?:2[456789]|3[01])))|9(?:1\.(?:2(?:1(?:2\.(?:1(?:07|23|35|98)|2(?:01|20)|4[15]|65)|3\.(?:1(?:7[45]|21|57)|2(?:17|9)|9[34]|72)|7\.(?:1(?:62|78)|2(?:00|49))|1\.(?:6[4567]|8[89]|9[01])|6\.(?:1(?:22|90|1)|7?3)|0\.17[2345])|0(?:0\
.(?:1(?:6[4567]|7[6789])|2(?:4[012389]|5[01]))|9\.(?:1(?:8[346]|4)|(?:[45]|23)8|63)|1\.(?:(?:12)?[4567]|23[6789])|4\.4[01234567]|8\.(?:162|228)|3\.9[2345])|3(?:7\.(?:9[123]|249)|0\.1(?:4[37]|11)|8\.(?:18[01]|82)|9\.(?:15|24)|6\.12[01]|5\.2)|2(?:9\.(?:15[6789]|4[67]|248)|8\.(?:132|39)|0\.(?:62|90)|3\.77)|4(?:0\.16|3\.11)5)|19(?:6\.2(?:1[6789]|3[2345])|3\.1(?:9[2345]|1[01])|5\.(?:25[45]|1[01])|4\.(?:[01]|21[45])|8\.1(?:09|27)|7\.9[6789]))|4\.(?:1(?:5(?:4\.1(?:[345678]\d|2[89]|9[01])|8\.2(?:5[012345]|4\d))|3[01]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|6(?:3\.(?:1(?:4[679]|5[01])|24[0134567])|0\.12[123]|1\.247)|232\.2(?:5[012345]|4[89]))|3\.1(?:20\.(?:3[23456789]|6[0123]|[45]\d)|7(?:5\.2(?:5[012345]|4\d)|4\.164)|68\.(?:2[012345]|1[89])|88\.16[01234567])|5\.(?:21(?:[67]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|5\.14[0123])|64\.(?:3[789]|1[13]|9[89]))|2\.249\.(?:[0789]|[12345]\d?|6[0123]?))|6(?:4\.(?:1(?:12\.(?:1(?:[012345678]\d?|9[01]?)?|[23456789]\d?|0)|5\.(?:[023456789]|1[012345]?))|44\.(?:[
01]?\d?\d|2[0-4]\d|25[0-5])|28\.1(?:7[6789]|9[01]|8\d))|7\.21(?:0\.(?:[023456789]|1[012345]?)|[18]\.2(?:2[0123]|0[89]|1\d)|3\.1(?:4[0123]|2[89]|3\d))|2\.1(?:22\.(?:3[23456789]|7[23])|82\.15[23456789])|8\.232\.(?:1(?:1[01]|0\d)|9[6789])|6\.231\.(?:6[456789]|7\d))|8(?:5\.(?:2(?:02\.(?:1(?:9[23456789]|7[012345]|6\d)|20[01234567])|55\.1(?:1[23456789]|2[01234567]))|12(?:0\.9[45]|1\.39))|4\.22\.(?:1(?:2[01234567]|[01]\d)|9[6789])|8\.135\.(?:1[6789]|3[01]|2\d)|9\.(?:114\.97?|45\.14)|6\.55\.(?:21[01]|140)|1\.22\.15[23])|7(?:9\.1(?:10\.(?:1(?:[678]\d?|9[01]?)|6[0123]|[25]\d|3[01]|4[89])|74\.(?:[0456789]|[12]\d?|3[01]?))|2\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|13\.(?:1[6789]|3[01]|2\d))|8\.31\.1(?:8[456789]|9[01]))|3(?:1\.(?:1(?:3(?:1\.2(?:5[012345]|4[89])|5\.[01234567])|(?:4\.10|1\.4)3|84\.242)|42\.1(?:[345]\d|2[89])|222\.20[01234567])|7\.(?:148\.2(?:1[6789]|2[0123])|230\.212|9\.58))|5(?:8\.83\.(?:[89]|1[01])|\.34\.242))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2(?:(?:0(?:4\.(?:1(?:0(
?:6\.(?:1(?:[3456789]\d|2[89])|2(?:2[0123]|[01]\d))|7\.208)|87\.(?:2(?:[01234]\d|5[01234])|1(?:5[56789]|[6789]\d))|4(?:7\.2(?:5[012345]|4\d)|\.[01234567])|55\.1(?:4[0123]|2[89]|3\d)|94\.1(?:8[456789]|9[01])|26\.24[45]|30\.167)|2(?:36\.(?:[0456789]|[12]\d?|3[01]?)|25\.(?:159|210))|44\.(?:2(?:0[01234567]|2[456789]|3\d)|19[23456789])|5(?:7\.(?:1[6789]|3[01]|2\d)|2\.255)|89\.224)|5\.(?:1(?:4(?:4\.(?:[023456789]|1(?:[012345]|7[6789]|9[01]|8\d)?)|2\.10[4567])|7(?:5\.1(?:[678]\d|9[01])|2\.24[4567])|37\.(?:[023456789]|1[012345]?)|89\.7[123]|59\.180)|2(?:03\.(?:[0456789]|2(?:[016789]|2[456789]?|5[012345]?|[34]\d?)?|3[01]?|1\d?)|3(?:3\.2(?:2[456789]|3\d)|5\.(?:6[456789]|7\d)|6\.189)|14\.1(?:[345]\d|2[89])))|9\.(?:1(?:4(?:8\.(?:6[456789]|9[012345]|[78]\d)|5\.(?:[0456789]|[12]\d?|3[01]?))|82\.(?:6[456789]|9[012345]|[78]\d)|98\.1(?:7[6789]|9[01]|8\d))|95\.(?:2(?:2[0123]|[01]\d)|19[23456789])|205\.(?:19[23456789]|2[0123]\d)|51\.(?:3[23456789]|4[01234567]))|6\.(?:2(?:0(?:3\.(?:1(?:2[012345
67]|[01]\d)|6[456789]|[789]\d)|1\.(?:6[0123]|4[89]|5\d)|9\.(?:9[012345]|8\d))|2(?:7\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|4\.1(?:[678]\d|9[01])))|81\.(?:[0456789]|[12]\d?|3[01]?)|197\.(?:17[567]|2[89]))|7\.(?:18(?:3\.(?:2(?:2[0123]|[01]\d)|19[23456789])|9\.(?:[0456789]|[12]\d?|3[01]?))|22\.(?:2(?:5[012345]|[01234]\d)|19[23456789])|32\.1(?:[345]\d|2[89]))|0\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|22\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|105\.(?:3[23456789]|4[01234567])|3\.1(?:4[0123]|2[89]|3\d))|8\.(?:8(?:1\.1(?:3[6789]|4[0123])|5\.3[23456789])|9(?:3\.1(?:4[456789]|5[01])|0\.[01234567]))|1\.7(?:1\.(?:[023456789]|1[012345]?)|\.2(?:2[0123]|0[89]|1\d))|3\.3(?:1\.8[89]|4\.7[01])|2\.61\.108)|1(?:6\.(?:212\.(?:2(?:2[0123]|[01]\d)|19[23456789])|151\.(?:19[23456789]|20[01234567]))|3\.109\.(?:2(?:2[0123]|0[89]|1\d)|6[456789]|9[6789]|7\d)))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|[68]\.0\.0\.0)|09\.0\.0\.(?:[0456789]|[12]\d?|3[01]?))\b)/
+header KHOP_SPAMHAUS_DROP X-Spam-Relays-Untrusted =~ /(?-xism: (?:by|ip)=(?:(?:1(?:9(?:9\.(?:2(?:4(?:8\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|6\.(?:21[35]|137)|5\.138)|6\.(?:1(?:2[01234567]|[01]\d)|9[6789])|00\.(?:6[456789]|9[012345]|[78]\d)|30\.(?:6[456789]|10[0123]|[789]\d)|54\.(?:3[23456789]|4[01234567])|12\.(?:1(?:1[01]|0\d)|9[6789]))|1(?:9(?:6\.(?:2(?:2[0123]|[01]\d)|19[23456789])|8\.1(?:8[01234589]|[67]\d|9[01]))|6(?:5\.(?:3[23456789]|6[0123]|[45]\d)|6\.20[0123])|85\.(?:19[23456789]|20[01234567])|20\.163)|8(?:4\.(?:6[456789]|9[012345]|[78]\d)|8\.(?:3[23456789]|5[01]|4\d)|9\.(?:1[6789]|3[01]|2\d))|3(?:4\.1(?:[345678]\d|2[89]|9[01])|3\.145)|46\.(?:3[23456789]|6[0123]|[45]\d)|71\.(?:19[23456789]|20[01234567])|5\.15[23]|60\.102)|8\.(?:1(?:8(?:1\.(?:6[456789]|9[012345]|[78]\d)|3\.(?:3[23456789]|6[0123]|[45]\d)|6\.25)|51\.(?:1(?:2[01234567]|5[2345]|[01]\d)|6[456789]|[789]\d)|3\.(?:[023456789]|1[012345]?)|62\.2(?:2[0123]|0[89]|1\d))|2(?:0(?:5\.(?:6[456789]|9[012345]|
[78]\d)|\.(?:1[6789]|3[01]|2\d)|4\.[01234567])|3\.(?:3[23456789]|4[01234567]))|4(?:5\.(?:3[23456789]|4[01234567])|8\.(?:1[6789]|3[01]|2\d))|96\.2(?:2[456789]|3\d)|57\.(?:6[456789]|7\d))|2\.(?:2(?:2(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|9\.(?:3[23456789]|6[0123]|[45]\d))|19\.(?:2(?:1[012345]|0\d)|1[23456789]\d)|6\.25)|1(?:71\.(?:6[456789]|9[012345]|[78]\d)|12\.1(?:1[23456789]|2[01234567])|01\.2(?:0[01234567]|4\d)|60\.44|97\.87)|43\.1(?:5[3456789]|7[56789]|8[01234]|60)|31\.21[23]|67\.16|86\.85)|3\.(?:1(?:0(?:5\.(?:1(?:[24]1|[58]4)|2(?:07|45))|4\.(?:1(?:10|53|76|2)|[39]4|41)|6\.3[2345]|7\.1[6789])|6(?:\.(?:100|213)|9\.25[01])|1(?:0\.136|1\.235)|4(?:2\.244|8\.47)|78\.172)|2(?:0(?:1\.19[23]|0\.167)|2(?:7\.24[01]|8\.145)|3(?:8\.[0123]|\.126)|7\.2(?:3[23]|4[67])|43\.166)|4(?:3\.134|6\.211|1\.38)|0\.(?:14[67]|212))|5\.(?:1(?:4(?:9\.(?:88|90)|\.11[23])|9(?:1\.10[23]|0\.157)|8(?:4\.8[67]|2\.57)|14\.[89]|62\.[67])|2(?:2(?:6\.(?:197|220)|5\.17[6789])|3(?:4\.159|8\.242)|8\.1
[01]|\.21[23]|46\.200)|9(?:3\.(?:18[45]|20[89])|5\.15[15])|8(?:8\.(?:19[01]|22[67])|5\.204)|5(?:4\.17[01]|\.161)|7(?:8\.10|4\.8)[89]|43\.128)|4\.(?:1(?:1(?:0\.16[0123]|6\.14[67])|4(?:6\.20[4567]|0\.229)|\.(?:22[01]|184)|26\.(?:193|251)|65\.[45])|2(?:8\.4[4567]|42\.[23]|9\.185)|6(?:0\.2(?:05|42)|3\.14[4567])|5(?:4\.15[6789]|0\.116)|0\.221|44\.4)|6\.32\.2(?:1[6789]|2[0123]))|5(?:7\.2(?:3(?:2\.(?:1(?:[3456789]|2[01234567]?|[01]\d?)?|(?:[01]?\d?\d|2[0-4]\d|25[0-5])|[23456789]\d?|0)|1\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|26\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|(?:(?:1\.1|9\.2)23|0\.1(?:26|41)|2\.147|5\.190)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|7(?:6\.(?:1(?:07\.7[23456789]|12\.8[01234567])|47\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|98\.(?:5[6789]|6[0123]))|8\.(?:159\.1(?:7[6789]|9[01]|8\d)|218\.1(?:4[0123]|2[89]|3\d))|0\.(?:1(?:06|13|20)|67)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1\.25\.190)|4(?:(?:8\.(?:1(?:05|78)|248)|(?:0\.17|7\.5)0|3\.(?:135|49))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.192\.(?:[06789]|
[125]\d?|3[01]?|4[89]?)|1\.136\.(?:1[67]|2[27])|6\.185\.2(?:18|54))|6(?:7\.(?:2(?:8\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|24\.(?:[0456789]|[12]\d?|3[01]?))|97\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|2\.125\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|2(?:(?:1\.4|9\.7)6\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|8\.1(?:68|99)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2\.202\.(?:1(?:2[01234567]|[01]\d)|9[6789]))|1(?:0\.(?:44\.1(?:4[0123]|2[89]|3\d)|232\.1(?:7[012345]|6\d))|6\.19(?:9\.1(?:[345]\d|2[89])|7\.15[23456789])|3\.20\.1(?:[678]\d|9[01]))|3(?:4\.(?:1(?:27|72)|2(?:09|3)|33)|2\.(?:145|232)|0\.2(?:01|22)|6\.228|9\.167|8\.43)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0(?:3\.(?:10\.(?:6[89]|7[01])|246\.7[2345])|9\.94\.2(?:2[0123]|0[89]|1\d))|8(?:8\.2(?:47\.(?:135|230)|11\.2[45])|6\.190\.2(?:2[456789]|3[01])))|9(?:1\.(?:2(?:1(?:2\.(?:1(?:07|23|35|98)|2(?:01|20)|4[15]|65)|3\.(?:1(?:7[45]|21|57)|2(?:17|9)|9[34]|72)|7\.(?:1(?:62|78)|2(?:00|49))|1\.(?:6[4567]|8[89]|9[01])|6\.(?:1(?:22|90|1)|7?3)|0\.17[2345])|0(?:0\
.(?:1(?:6[4567]|7[6789])|2(?:4[012389]|5[01]))|9\.(?:1(?:8[346]|4)|(?:[45]|23)8|63)|1\.(?:(?:12)?[4567]|23[6789])|4\.4[01234567]|8\.(?:162|228)|3\.9[2345])|3(?:7\.(?:9[123]|249)|0\.1(?:4[37]|11)|8\.(?:18[01]|82)|9\.(?:15|24)|6\.12[01]|5\.2)|2(?:9\.(?:15[6789]|4[67]|248)|8\.(?:132|39)|0\.(?:62|90)|3\.77)|4(?:0\.16|3\.11)5)|19(?:6\.2(?:1[6789]|3[2345])|3\.1(?:9[2345]|1[01])|5\.(?:25[45]|1[01])|4\.(?:[01]|21[45])|8\.1(?:09|27)|7\.9[6789]))|4\.(?:1(?:5(?:4\.1(?:[345678]\d|2[89]|9[01])|8\.2(?:5[012345]|4\d))|3[01]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|6(?:3\.(?:1(?:4[679]|5[01])|24[0134567])|0\.12[123]|1\.247)|232\.2(?:5[012345]|4[89]))|3\.1(?:20\.(?:3[23456789]|6[0123]|[45]\d)|7(?:5\.2(?:5[012345]|4\d)|4\.164)|68\.(?:2[012345]|1[89])|88\.16[01234567])|5\.(?:21(?:[67]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|5\.14[0123])|64\.(?:3[789]|1[13]|9[89]))|2\.249\.(?:[0789]|[12345]\d?|6[0123]?))|6(?:4\.(?:1(?:12\.(?:1(?:[012345678]\d?|9[01]?)?|[23456789]\d?|0)|5\.(?:[023456789]|1[012345]?))|44\.(?:[
01]?\d?\d|2[0-4]\d|25[0-5])|28\.1(?:7[6789]|9[01]|8\d))|7\.21(?:0\.(?:[023456789]|1[012345]?)|[18]\.2(?:2[0123]|0[89]|1\d)|3\.1(?:4[0123]|2[89]|3\d))|2\.1(?:22\.(?:3[23456789]|7[23])|82\.15[23456789])|8\.232\.(?:1(?:1[01]|0\d)|9[6789])|6\.231\.(?:6[456789]|7\d))|8(?:5\.(?:2(?:02\.(?:1(?:9[23456789]|7[012345]|6\d)|20[01234567])|55\.1(?:1[23456789]|2[01234567]))|12(?:0\.9[45]|1\.39))|4\.22\.(?:1(?:2[01234567]|[01]\d)|9[6789])|8\.135\.(?:1[6789]|3[01]|2\d)|9\.(?:114\.97?|45\.14)|6\.55\.(?:21[01]|140)|1\.22\.15[23])|7(?:9\.1(?:10\.(?:1(?:[678]\d?|9[01]?)|6[0123]|[25]\d|3[01]|4[89])|74\.(?:[0456789]|[12]\d?|3[01]?))|2\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|13\.(?:1[6789]|3[01]|2\d))|8\.31\.1(?:8[456789]|9[01]))|3(?:1\.(?:1(?:3(?:1\.2(?:5[012345]|4[89])|5\.[01234567])|(?:4\.10|1\.4)3|84\.242)|42\.1(?:[345]\d|2[89])|222\.20[01234567])|7\.(?:148\.2(?:1[6789]|2[0123])|230\.212|9\.58))|5(?:8\.83\.(?:[89]|1[01])|\.34\.242))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2(?:(?:0(?:4\.(?:1(?:0(
?:6\.(?:1(?:[3456789]\d|2[89])|2(?:2[0123]|[01]\d))|7\.208)|87\.(?:2(?:[01234]\d|5[01234])|1(?:5[56789]|[6789]\d))|4(?:7\.2(?:5[012345]|4\d)|\.[01234567])|55\.1(?:4[0123]|2[89]|3\d)|94\.1(?:8[456789]|9[01])|26\.24[45]|30\.167)|2(?:36\.(?:[0456789]|[12]\d?|3[01]?)|25\.(?:159|210))|44\.(?:2(?:0[01234567]|2[456789]|3\d)|19[23456789])|5(?:7\.(?:1[6789]|3[01]|2\d)|2\.255)|89\.224)|5\.(?:1(?:4(?:4\.(?:[023456789]|1(?:[012345]|7[6789]|9[01]|8\d)?)|2\.10[4567])|7(?:5\.1(?:[678]\d|9[01])|2\.24[4567])|37\.(?:[023456789]|1[012345]?)|89\.7[123]|59\.180)|2(?:03\.(?:[0456789]|2(?:[016789]|2[456789]?|5[012345]?|[34]\d?)?|3[01]?|1\d?)|3(?:3\.2(?:2[456789]|3\d)|5\.(?:6[456789]|7\d)|6\.189)|14\.1(?:[345]\d|2[89])))|9\.(?:1(?:4(?:8\.(?:6[456789]|9[012345]|[78]\d)|5\.(?:[0456789]|[12]\d?|3[01]?))|82\.(?:6[456789]|9[012345]|[78]\d)|98\.1(?:7[6789]|9[01]|8\d))|95\.(?:2(?:2[0123]|[01]\d)|19[23456789])|205\.(?:19[23456789]|2[0123]\d)|51\.(?:3[23456789]|4[01234567]))|6\.(?:2(?:0(?:3\.(?:1(?:2[012345
67]|[01]\d)|6[456789]|[789]\d)|1\.(?:6[0123]|4[89]|5\d)|9\.(?:9[012345]|8\d))|2(?:7\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|4\.1(?:[678]\d|9[01])))|81\.(?:[0456789]|[12]\d?|3[01]?)|197\.(?:17[567]|2[89]))|7\.(?:18(?:3\.(?:2(?:2[0123]|[01]\d)|19[23456789])|9\.(?:[0456789]|[12]\d?|3[01]?))|22\.(?:2(?:5[012345]|[01234]\d)|19[23456789])|32\.1(?:[345]\d|2[89]))|0\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|22\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|105\.(?:3[23456789]|4[01234567])|3\.1(?:4[0123]|2[89]|3\d))|8\.(?:8(?:1\.1(?:3[6789]|4[0123])|5\.3[23456789])|9(?:3\.1(?:4[456789]|5[01])|0\.[01234567]))|1\.7(?:1\.(?:[023456789]|1[012345]?)|\.2(?:2[0123]|0[89]|1\d))|3\.3(?:1\.8[89]|4\.7[01])|2\.61\.108)|1(?:6\.(?:212\.(?:2(?:2[0123]|[01]\d)|19[23456789])|151\.(?:19[23456789]|20[01234567]))|3\.109\.(?:2(?:2[0123]|0[89]|1\d)|6[456789]|9[6789]|7\d)))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|[79]\.0\.0\.0)|09\.0\.0\.(?:[023456789]|1[012345]?))\b)/
describe KHOP_SPAMHAUS_DROP Relay listed in Spamhaus Don't Route Or Peer List
tflags KHOP_SPAMHAUS_DROP nopublish
score KHOP_SPAMHAUS_DROP 1 0.2 1 0.2
# spam/ham s/o corpus
# 0.0349/0.0029 0.924 20110227@510k
-header KHOP_SPAMHAUS_DROP_LE X-Spam-Relays-External =~ /^[^]]*(?-xism: (?:by|ip)=(?:(?:1(?:9(?:9\.(?:2(?:4(?:8\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|6\.(?:21[35]|137)|5\.138)|6\.(?:1(?:2[01234567]|[01]\d)|9[6789])|00\.(?:6[456789]|9[012345]|[78]\d)|30\.(?:6[456789]|10[0123]|[789]\d)|54\.(?:3[23456789]|4[01234567])|12\.(?:1(?:1[01]|0\d)|9[6789]))|1(?:9(?:6\.(?:2(?:2[0123]|[01]\d)|19[23456789])|8\.1(?:8[01234589]|[67]\d|9[01]))|6(?:5\.(?:3[23456789]|6[0123]|[45]\d)|6\.20[0123])|85\.(?:19[23456789]|20[01234567])|20\.163)|8(?:4\.(?:6[456789]|9[012345]|[78]\d)|8\.(?:3[23456789]|5[01]|4\d)|9\.(?:1[6789]|3[01]|2\d))|3(?:4\.1(?:[345678]\d|2[89]|9[01])|3\.145)|46\.(?:3[23456789]|6[0123]|[45]\d)|71\.(?:19[23456789]|20[01234567])|5\.15[23]|60\.102)|8\.(?:1(?:8(?:1\.(?:6[456789]|9[012345]|[78]\d)|3\.(?:3[23456789]|6[0123]|[45]\d)|6\.25)|51\.(?:1(?:2[01234567]|5[2345]|[01]\d)|6[456789]|[789]\d)|3\.(?:[023456789]|1[012345]?)|62\.2(?:2[0123]|0[89]|1\d))|2(?:0(?:5\.(?:6[456789]|9[
012345]|[78]\d)|\.(?:1[6789]|3[01]|2\d)|4\.[01234567])|3\.(?:3[23456789]|4[01234567]))|4(?:5\.(?:3[23456789]|4[01234567])|8\.(?:1[6789]|3[01]|2\d))|96\.2(?:2[456789]|3\d)|57\.(?:6[456789]|7\d))|2\.(?:2(?:2(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|9\.(?:3[23456789]|6[0123]|[45]\d))|19\.(?:2(?:1[012345]|0\d)|1[23456789]\d)|6\.25)|1(?:71\.(?:6[456789]|9[012345]|[78]\d)|12\.1(?:1[23456789]|2[01234567])|01\.2(?:0[01234567]|4\d)|60\.44|97\.87)|43\.1(?:5[3456789]|7[56789]|8[01234]|60)|31\.21[23]|67\.16|86\.85)|3\.(?:1(?:0(?:5\.(?:1(?:[24]1|[58]4)|2(?:07|45))|4\.(?:1(?:10|53|76|2)|[39]4|41)|6\.3[2345]|7\.1[6789])|6(?:\.(?:100|213)|9\.25[01])|1(?:0\.136|1\.235)|4(?:2\.244|8\.47)|78\.172)|2(?:0(?:1\.19[23]|0\.167)|2(?:7\.24[01]|8\.145)|3(?:8\.[0123]|\.126)|7\.2(?:3[23]|4[67])|43\.166)|4(?:3\.134|6\.211|1\.38)|0\.(?:14[67]|212))|5\.(?:1(?:4(?:9\.(?:88|90)|\.11[23])|9(?:1\.10[23]|0\.157)|8(?:4\.8[67]|2\.57)|14\.[89]|62\.[67])|2(?:2(?:6\.(?:197|220)|5\.17[6789])|3(?:4\.159|8\.2
42)|8\.1[01]|\.21[23]|46\.200)|9(?:3\.(?:18[45]|20[89])|5\.15[15])|8(?:8\.(?:19[01]|22[67])|5\.204)|5(?:4\.17[01]|\.161)|7(?:8\.10|4\.8)[89]|43\.128)|4\.(?:1(?:1(?:0\.16[0123]|6\.14[67])|4(?:6\.20[4567]|0\.229)|\.(?:22[01]|184)|26\.(?:193|251)|65\.[45])|2(?:8\.4[4567]|42\.[23]|9\.185)|6(?:0\.2(?:05|42)|3\.14[4567])|5(?:4\.15[6789]|0\.116)|0\.221|44\.4)|6\.32\.2(?:1[6789]|2[0123]))|5(?:7\.2(?:3(?:2\.(?:1(?:[3456789]|2[01234567]?|[01]\d?)?|(?:[01]?\d?\d|2[0-4]\d|25[0-5])|[23456789]\d?|0)|1\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|26\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|(?:(?:1\.1|9\.2)23|0\.1(?:26|41)|2\.147|5\.190)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|7(?:6\.(?:1(?:07\.7[23456789]|12\.8[01234567])|47\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|98\.(?:5[6789]|6[0123]))|8\.(?:159\.1(?:7[6789]|9[01]|8\d)|218\.1(?:4[0123]|2[89]|3\d))|0\.(?:1(?:06|13|20)|67)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1\.25\.190)|4(?:(?:8\.(?:1(?:05|78)|248)|(?:0\.17|7\.5)0|3\.(?:135|49))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.192\.(?:
[06789]|[125]\d?|3[01]?|4[89]?)|1\.136\.(?:1[67]|2[27])|6\.185\.2(?:18|54))|6(?:7\.(?:2(?:8\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|24\.(?:[0456789]|[12]\d?|3[01]?))|97\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|2\.125\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|2(?:(?:1\.4|9\.7)6\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|8\.1(?:68|99)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2\.202\.(?:1(?:2[01234567]|[01]\d)|9[6789]))|1(?:0\.(?:44\.1(?:4[0123]|2[89]|3\d)|232\.1(?:7[012345]|6\d))|6\.19(?:9\.1(?:[345]\d|2[89])|7\.15[23456789])|3\.20\.1(?:[678]\d|9[01]))|3(?:4\.(?:1(?:27|72)|2(?:09|3)|33)|2\.(?:145|232)|0\.2(?:01|22)|6\.228|9\.167|8\.43)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0(?:3\.(?:10\.(?:6[89]|7[01])|246\.7[2345])|9\.94\.2(?:2[0123]|0[89]|1\d))|8(?:8\.2(?:47\.(?:135|230)|11\.2[45])|6\.190\.2(?:2[456789]|3[01])))|9(?:1\.(?:2(?:1(?:2\.(?:1(?:07|23|35|98)|2(?:01|20)|4[15]|65)|3\.(?:1(?:7[45]|21|57)|2(?:17|9)|9[34]|72)|7\.(?:1(?:62|78)|2(?:00|49))|1\.(?:6[4567]|8[89]|9[01])|6\.(?:1(?:22|90|1)|7?3)|0\.17[2345]
)|0(?:0\.(?:1(?:6[4567]|7[6789])|2(?:4[012389]|5[01]))|9\.(?:1(?:8[346]|4)|(?:[45]|23)8|63)|1\.(?:(?:12)?[4567]|23[6789])|4\.4[01234567]|8\.(?:162|228)|3\.9[2345])|3(?:7\.(?:9[123]|249)|0\.1(?:4[37]|11)|8\.(?:18[01]|82)|9\.(?:15|24)|6\.12[01]|5\.2)|2(?:9\.(?:15[6789]|4[67]|248)|8\.(?:132|39)|0\.(?:62|90)|3\.77)|4(?:0\.16|3\.11)5)|19(?:6\.2(?:1[6789]|3[2345])|3\.1(?:9[2345]|1[01])|5\.(?:25[45]|1[01])|4\.(?:[01]|21[45])|8\.1(?:09|27)|7\.9[6789]))|4\.(?:1(?:5(?:4\.1(?:[345678]\d|2[89]|9[01])|8\.2(?:5[012345]|4\d))|3[01]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|6(?:3\.(?:1(?:4[679]|5[01])|24[0134567])|0\.12[123]|1\.247)|232\.2(?:5[012345]|4[89]))|3\.1(?:20\.(?:3[23456789]|6[0123]|[45]\d)|7(?:5\.2(?:5[012345]|4\d)|4\.164)|68\.(?:2[012345]|1[89])|88\.16[01234567])|5\.(?:21(?:[67]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|5\.14[0123])|64\.(?:3[789]|1[13]|9[89]))|2\.249\.(?:[0789]|[12345]\d?|6[0123]?))|6(?:4\.(?:1(?:12\.(?:1(?:[012345678]\d?|9[01]?)?|[23456789]\d?|0)|5\.(?:[023456789]|1[012345]?))|
44\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|28\.1(?:7[6789]|9[01]|8\d))|7\.21(?:0\.(?:[023456789]|1[012345]?)|[18]\.2(?:2[0123]|0[89]|1\d)|3\.1(?:4[0123]|2[89]|3\d))|2\.1(?:22\.(?:3[23456789]|7[23])|82\.15[23456789])|8\.232\.(?:1(?:1[01]|0\d)|9[6789])|6\.231\.(?:6[456789]|7\d))|8(?:5\.(?:2(?:02\.(?:1(?:9[23456789]|7[012345]|6\d)|20[01234567])|55\.1(?:1[23456789]|2[01234567]))|12(?:0\.9[45]|1\.39))|4\.22\.(?:1(?:2[01234567]|[01]\d)|9[6789])|8\.135\.(?:1[6789]|3[01]|2\d)|9\.(?:114\.97?|45\.14)|6\.55\.(?:21[01]|140)|1\.22\.15[23])|7(?:9\.1(?:10\.(?:1(?:[678]\d?|9[01]?)|6[0123]|[25]\d|3[01]|4[89])|74\.(?:[0456789]|[12]\d?|3[01]?))|2\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|13\.(?:1[6789]|3[01]|2\d))|8\.31\.1(?:8[456789]|9[01]))|3(?:1\.(?:1(?:3(?:1\.2(?:5[012345]|4[89])|5\.[01234567])|(?:4\.10|1\.4)3|84\.242)|42\.1(?:[345]\d|2[89])|222\.20[01234567])|7\.(?:148\.2(?:1[6789]|2[0123])|230\.212|9\.58))|5(?:8\.83\.(?:[89]|1[01])|\.34\.242))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2(?:(?:0(?:4\.(
?:1(?:0(?:6\.(?:1(?:[3456789]\d|2[89])|2(?:2[0123]|[01]\d))|7\.208)|87\.(?:2(?:[01234]\d|5[01234])|1(?:5[56789]|[6789]\d))|4(?:7\.2(?:5[012345]|4\d)|\.[01234567])|55\.1(?:4[0123]|2[89]|3\d)|94\.1(?:8[456789]|9[01])|26\.24[45]|30\.167)|2(?:36\.(?:[0456789]|[12]\d?|3[01]?)|25\.(?:159|210))|44\.(?:2(?:0[01234567]|2[456789]|3\d)|19[23456789])|5(?:7\.(?:1[6789]|3[01]|2\d)|2\.255)|89\.224)|5\.(?:1(?:4(?:4\.(?:[023456789]|1(?:[012345]|7[6789]|9[01]|8\d)?)|2\.10[4567])|7(?:5\.1(?:[678]\d|9[01])|2\.24[4567])|37\.(?:[023456789]|1[012345]?)|89\.7[123]|59\.180)|2(?:03\.(?:[0456789]|2(?:[016789]|2[456789]?|5[012345]?|[34]\d?)?|3[01]?|1\d?)|3(?:3\.2(?:2[456789]|3\d)|5\.(?:6[456789]|7\d)|6\.189)|14\.1(?:[345]\d|2[89])))|9\.(?:1(?:4(?:8\.(?:6[456789]|9[012345]|[78]\d)|5\.(?:[0456789]|[12]\d?|3[01]?))|82\.(?:6[456789]|9[012345]|[78]\d)|98\.1(?:7[6789]|9[01]|8\d))|95\.(?:2(?:2[0123]|[01]\d)|19[23456789])|205\.(?:19[23456789]|2[0123]\d)|51\.(?:3[23456789]|4[01234567]))|6\.(?:2(?:0(?:3\.(?:1(?:
2[01234567]|[01]\d)|6[456789]|[789]\d)|1\.(?:6[0123]|4[89]|5\d)|9\.(?:9[012345]|8\d))|2(?:7\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|4\.1(?:[678]\d|9[01])))|81\.(?:[0456789]|[12]\d?|3[01]?)|197\.(?:17[567]|2[89]))|7\.(?:18(?:3\.(?:2(?:2[0123]|[01]\d)|19[23456789])|9\.(?:[0456789]|[12]\d?|3[01]?))|22\.(?:2(?:5[012345]|[01234]\d)|19[23456789])|32\.1(?:[345]\d|2[89]))|0\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|22\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|105\.(?:3[23456789]|4[01234567])|3\.1(?:4[0123]|2[89]|3\d))|8\.(?:8(?:1\.1(?:3[6789]|4[0123])|5\.3[23456789])|9(?:3\.1(?:4[456789]|5[01])|0\.[01234567]))|1\.7(?:1\.(?:[023456789]|1[012345]?)|\.2(?:2[0123]|0[89]|1\d))|3\.3(?:1\.8[89]|4\.7[01])|2\.61\.108)|1(?:6\.(?:212\.(?:2(?:2[0123]|[01]\d)|19[23456789])|151\.(?:19[23456789]|20[01234567]))|3\.109\.(?:2(?:2[0123]|0[89]|1\d)|6[456789]|9[6789]|7\d)))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|[68]\.0\.0\.0)|09\.0\.0\.(?:[0456789]|[12]\d?|3[01]?))\b)/
+header KHOP_SPAMHAUS_DROP_LE X-Spam-Relays-External =~ /^[^]]*(?-xism: (?:by|ip)=(?:(?:1(?:9(?:9\.(?:2(?:4(?:8\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|6\.(?:21[35]|137)|5\.138)|6\.(?:1(?:2[01234567]|[01]\d)|9[6789])|00\.(?:6[456789]|9[012345]|[78]\d)|30\.(?:6[456789]|10[0123]|[789]\d)|54\.(?:3[23456789]|4[01234567])|12\.(?:1(?:1[01]|0\d)|9[6789]))|1(?:9(?:6\.(?:2(?:2[0123]|[01]\d)|19[23456789])|8\.1(?:8[01234589]|[67]\d|9[01]))|6(?:5\.(?:3[23456789]|6[0123]|[45]\d)|6\.20[0123])|85\.(?:19[23456789]|20[01234567])|20\.163)|8(?:4\.(?:6[456789]|9[012345]|[78]\d)|8\.(?:3[23456789]|5[01]|4\d)|9\.(?:1[6789]|3[01]|2\d))|3(?:4\.1(?:[345678]\d|2[89]|9[01])|3\.145)|46\.(?:3[23456789]|6[0123]|[45]\d)|71\.(?:19[23456789]|20[01234567])|5\.15[23]|60\.102)|8\.(?:1(?:8(?:1\.(?:6[456789]|9[012345]|[78]\d)|3\.(?:3[23456789]|6[0123]|[45]\d)|6\.25)|51\.(?:1(?:2[01234567]|5[2345]|[01]\d)|6[456789]|[789]\d)|3\.(?:[023456789]|1[012345]?)|62\.2(?:2[0123]|0[89]|1\d))|2(?:0(?:5\.(?:6[456789]|9[
012345]|[78]\d)|\.(?:1[6789]|3[01]|2\d)|4\.[01234567])|3\.(?:3[23456789]|4[01234567]))|4(?:5\.(?:3[23456789]|4[01234567])|8\.(?:1[6789]|3[01]|2\d))|96\.2(?:2[456789]|3\d)|57\.(?:6[456789]|7\d))|2\.(?:2(?:2(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|9\.(?:3[23456789]|6[0123]|[45]\d))|19\.(?:2(?:1[012345]|0\d)|1[23456789]\d)|6\.25)|1(?:71\.(?:6[456789]|9[012345]|[78]\d)|12\.1(?:1[23456789]|2[01234567])|01\.2(?:0[01234567]|4\d)|60\.44|97\.87)|43\.1(?:5[3456789]|7[56789]|8[01234]|60)|31\.21[23]|67\.16|86\.85)|3\.(?:1(?:0(?:5\.(?:1(?:[24]1|[58]4)|2(?:07|45))|4\.(?:1(?:10|53|76|2)|[39]4|41)|6\.3[2345]|7\.1[6789])|6(?:\.(?:100|213)|9\.25[01])|1(?:0\.136|1\.235)|4(?:2\.244|8\.47)|78\.172)|2(?:0(?:1\.19[23]|0\.167)|2(?:7\.24[01]|8\.145)|3(?:8\.[0123]|\.126)|7\.2(?:3[23]|4[67])|43\.166)|4(?:3\.134|6\.211|1\.38)|0\.(?:14[67]|212))|5\.(?:1(?:4(?:9\.(?:88|90)|\.11[23])|9(?:1\.10[23]|0\.157)|8(?:4\.8[67]|2\.57)|14\.[89]|62\.[67])|2(?:2(?:6\.(?:197|220)|5\.17[6789])|3(?:4\.159|8\.2
42)|8\.1[01]|\.21[23]|46\.200)|9(?:3\.(?:18[45]|20[89])|5\.15[15])|8(?:8\.(?:19[01]|22[67])|5\.204)|5(?:4\.17[01]|\.161)|7(?:8\.10|4\.8)[89]|43\.128)|4\.(?:1(?:1(?:0\.16[0123]|6\.14[67])|4(?:6\.20[4567]|0\.229)|\.(?:22[01]|184)|26\.(?:193|251)|65\.[45])|2(?:8\.4[4567]|42\.[23]|9\.185)|6(?:0\.2(?:05|42)|3\.14[4567])|5(?:4\.15[6789]|0\.116)|0\.221|44\.4)|6\.32\.2(?:1[6789]|2[0123]))|5(?:7\.2(?:3(?:2\.(?:1(?:[3456789]|2[01234567]?|[01]\d?)?|(?:[01]?\d?\d|2[0-4]\d|25[0-5])|[23456789]\d?|0)|1\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|26\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|(?:(?:1\.1|9\.2)23|0\.1(?:26|41)|2\.147|5\.190)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|7(?:6\.(?:1(?:07\.7[23456789]|12\.8[01234567])|47\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|98\.(?:5[6789]|6[0123]))|8\.(?:159\.1(?:7[6789]|9[01]|8\d)|218\.1(?:4[0123]|2[89]|3\d))|0\.(?:1(?:06|13|20)|67)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1\.25\.190)|4(?:(?:8\.(?:1(?:05|78)|248)|(?:0\.17|7\.5)0|3\.(?:135|49))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.192\.(?:
[06789]|[125]\d?|3[01]?|4[89]?)|1\.136\.(?:1[67]|2[27])|6\.185\.2(?:18|54))|6(?:7\.(?:2(?:8\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|24\.(?:[0456789]|[12]\d?|3[01]?))|97\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|2\.125\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|2(?:(?:1\.4|9\.7)6\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|8\.1(?:68|99)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2\.202\.(?:1(?:2[01234567]|[01]\d)|9[6789]))|1(?:0\.(?:44\.1(?:4[0123]|2[89]|3\d)|232\.1(?:7[012345]|6\d))|6\.19(?:9\.1(?:[345]\d|2[89])|7\.15[23456789])|3\.20\.1(?:[678]\d|9[01]))|3(?:4\.(?:1(?:27|72)|2(?:09|3)|33)|2\.(?:145|232)|0\.2(?:01|22)|6\.228|9\.167|8\.43)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0(?:3\.(?:10\.(?:6[89]|7[01])|246\.7[2345])|9\.94\.2(?:2[0123]|0[89]|1\d))|8(?:8\.2(?:47\.(?:135|230)|11\.2[45])|6\.190\.2(?:2[456789]|3[01])))|9(?:1\.(?:2(?:1(?:2\.(?:1(?:07|23|35|98)|2(?:01|20)|4[15]|65)|3\.(?:1(?:7[45]|21|57)|2(?:17|9)|9[34]|72)|7\.(?:1(?:62|78)|2(?:00|49))|1\.(?:6[4567]|8[89]|9[01])|6\.(?:1(?:22|90|1)|7?3)|0\.17[2345]
)|0(?:0\.(?:1(?:6[4567]|7[6789])|2(?:4[012389]|5[01]))|9\.(?:1(?:8[346]|4)|(?:[45]|23)8|63)|1\.(?:(?:12)?[4567]|23[6789])|4\.4[01234567]|8\.(?:162|228)|3\.9[2345])|3(?:7\.(?:9[123]|249)|0\.1(?:4[37]|11)|8\.(?:18[01]|82)|9\.(?:15|24)|6\.12[01]|5\.2)|2(?:9\.(?:15[6789]|4[67]|248)|8\.(?:132|39)|0\.(?:62|90)|3\.77)|4(?:0\.16|3\.11)5)|19(?:6\.2(?:1[6789]|3[2345])|3\.1(?:9[2345]|1[01])|5\.(?:25[45]|1[01])|4\.(?:[01]|21[45])|8\.1(?:09|27)|7\.9[6789]))|4\.(?:1(?:5(?:4\.1(?:[345678]\d|2[89]|9[01])|8\.2(?:5[012345]|4\d))|3[01]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|6(?:3\.(?:1(?:4[679]|5[01])|24[0134567])|0\.12[123]|1\.247)|232\.2(?:5[012345]|4[89]))|3\.1(?:20\.(?:3[23456789]|6[0123]|[45]\d)|7(?:5\.2(?:5[012345]|4\d)|4\.164)|68\.(?:2[012345]|1[89])|88\.16[01234567])|5\.(?:21(?:[67]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|5\.14[0123])|64\.(?:3[789]|1[13]|9[89]))|2\.249\.(?:[0789]|[12345]\d?|6[0123]?))|6(?:4\.(?:1(?:12\.(?:1(?:[012345678]\d?|9[01]?)?|[23456789]\d?|0)|5\.(?:[023456789]|1[012345]?))|
44\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|28\.1(?:7[6789]|9[01]|8\d))|7\.21(?:0\.(?:[023456789]|1[012345]?)|[18]\.2(?:2[0123]|0[89]|1\d)|3\.1(?:4[0123]|2[89]|3\d))|2\.1(?:22\.(?:3[23456789]|7[23])|82\.15[23456789])|8\.232\.(?:1(?:1[01]|0\d)|9[6789])|6\.231\.(?:6[456789]|7\d))|8(?:5\.(?:2(?:02\.(?:1(?:9[23456789]|7[012345]|6\d)|20[01234567])|55\.1(?:1[23456789]|2[01234567]))|12(?:0\.9[45]|1\.39))|4\.22\.(?:1(?:2[01234567]|[01]\d)|9[6789])|8\.135\.(?:1[6789]|3[01]|2\d)|9\.(?:114\.97?|45\.14)|6\.55\.(?:21[01]|140)|1\.22\.15[23])|7(?:9\.1(?:10\.(?:1(?:[678]\d?|9[01]?)|6[0123]|[25]\d|3[01]|4[89])|74\.(?:[0456789]|[12]\d?|3[01]?))|2\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|13\.(?:1[6789]|3[01]|2\d))|8\.31\.1(?:8[456789]|9[01]))|3(?:1\.(?:1(?:3(?:1\.2(?:5[012345]|4[89])|5\.[01234567])|(?:4\.10|1\.4)3|84\.242)|42\.1(?:[345]\d|2[89])|222\.20[01234567])|7\.(?:148\.2(?:1[6789]|2[0123])|230\.212|9\.58))|5(?:8\.83\.(?:[89]|1[01])|\.34\.242))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2(?:(?:0(?:4\.(
?:1(?:0(?:6\.(?:1(?:[3456789]\d|2[89])|2(?:2[0123]|[01]\d))|7\.208)|87\.(?:2(?:[01234]\d|5[01234])|1(?:5[56789]|[6789]\d))|4(?:7\.2(?:5[012345]|4\d)|\.[01234567])|55\.1(?:4[0123]|2[89]|3\d)|94\.1(?:8[456789]|9[01])|26\.24[45]|30\.167)|2(?:36\.(?:[0456789]|[12]\d?|3[01]?)|25\.(?:159|210))|44\.(?:2(?:0[01234567]|2[456789]|3\d)|19[23456789])|5(?:7\.(?:1[6789]|3[01]|2\d)|2\.255)|89\.224)|5\.(?:1(?:4(?:4\.(?:[023456789]|1(?:[012345]|7[6789]|9[01]|8\d)?)|2\.10[4567])|7(?:5\.1(?:[678]\d|9[01])|2\.24[4567])|37\.(?:[023456789]|1[012345]?)|89\.7[123]|59\.180)|2(?:03\.(?:[0456789]|2(?:[016789]|2[456789]?|5[012345]?|[34]\d?)?|3[01]?|1\d?)|3(?:3\.2(?:2[456789]|3\d)|5\.(?:6[456789]|7\d)|6\.189)|14\.1(?:[345]\d|2[89])))|9\.(?:1(?:4(?:8\.(?:6[456789]|9[012345]|[78]\d)|5\.(?:[0456789]|[12]\d?|3[01]?))|82\.(?:6[456789]|9[012345]|[78]\d)|98\.1(?:7[6789]|9[01]|8\d))|95\.(?:2(?:2[0123]|[01]\d)|19[23456789])|205\.(?:19[23456789]|2[0123]\d)|51\.(?:3[23456789]|4[01234567]))|6\.(?:2(?:0(?:3\.(?:1(?:
2[01234567]|[01]\d)|6[456789]|[789]\d)|1\.(?:6[0123]|4[89]|5\d)|9\.(?:9[012345]|8\d))|2(?:7\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|4\.1(?:[678]\d|9[01])))|81\.(?:[0456789]|[12]\d?|3[01]?)|197\.(?:17[567]|2[89]))|7\.(?:18(?:3\.(?:2(?:2[0123]|[01]\d)|19[23456789])|9\.(?:[0456789]|[12]\d?|3[01]?))|22\.(?:2(?:5[012345]|[01234]\d)|19[23456789])|32\.1(?:[345]\d|2[89]))|0\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|22\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|105\.(?:3[23456789]|4[01234567])|3\.1(?:4[0123]|2[89]|3\d))|8\.(?:8(?:1\.1(?:3[6789]|4[0123])|5\.3[23456789])|9(?:3\.1(?:4[456789]|5[01])|0\.[01234567]))|1\.7(?:1\.(?:[023456789]|1[012345]?)|\.2(?:2[0123]|0[89]|1\d))|3\.3(?:1\.8[89]|4\.7[01])|2\.61\.108)|1(?:6\.(?:212\.(?:2(?:2[0123]|[01]\d)|19[23456789])|151\.(?:19[23456789]|20[01234567]))|3\.109\.(?:2(?:2[0123]|0[89]|1\d)|6[456789]|9[6789]|7\d)))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|[79]\.0\.0\.0)|09\.0\.0\.(?:[023456789]|1[012345]?))\b)/
describe KHOP_SPAMHAUS_DROP_LE Relay listed in Spamhaus Don't Route Or Peer List
tflags KHOP_SPAMHAUS_DROP_LE nopublish
score KHOP_SPAMHAUS_DROP_LE 2 0 2 0 # adds to KHOP_SPAMHAUS_DROP
@@ -163,7 +163,7 @@ score KHOP_SPAMHAUS_DROP_LE 2 0 2 0 #
# PSBL-neighbors: any /24 with 73+ (2/7, 29%) IPs in the PSBL (not SpamCop),
# as obtained from rsync://psbl-mirror.surriel.com::psbl/psbl.txt
-header KHOP_PSBL_CIDR24 X-Spam-Relays-Untrusted =~ / (?:by|ip)=(?-xism:\b(?:1(?:1(?:7\.2(?:4(?:2\.(?:2(?:52|8)|144)|1\.144)|15\.16[89])|2\.(?:215\.(?:6[345]|4[45])|79\.36)|0\.52\.[02])|2(?:3\.(?:54\.1(?:8[89]|90)|136\.106)|1\.63\.1[6789]|0\.168\.1)|9(?:8\.(?:15\.101|98\.108)|4\.27\.24[01]|0\.110\.152)|8(?:6\.12(?:3\.13[35]|\.251)|8\.132\.248)|0(?:9\.99\.(?:20[34]|194)|3\.28\.187)|3(?:0\.193\.14[57]|4\.255\.249)|\.38\.(?:16|24)|73\.237\.71)|2(?:1(?:2\.96\.6[45]|3\.143\.48|7\.76\.69)|0(?:7\.188\.179|0\.85\.23))|41\.(?:2(?:23\.162|54\.5)|190\.[23])|9(?:4\.242\.23[378]|5\.169\.240)|79\.1(?:70\.5[1235]|06\.109)|6(?:4\.58\.114|9\.22\.176)|8(?:5\.26\.241|3\.149\.3)|59\.9(?:7\.232|9\.0)|37\.110\.211)\.[012]?\d{1,2}\b)/
+header KHOP_PSBL_CIDR24 X-Spam-Relays-Untrusted =~ / (?:by|ip)=(?-xism:\b(?:1(?:1(?:7\.2(?:4(?:2\.(?:2(?:52|8)|144)|1\.144)|15\.16[89])|2\.215\.(?:6[345]|4[45])|0\.52\.[02])|0(?:9\.(?:99\.(?:20[14]|194)|102\.1(?:38|40))|3\.28\.187)|2(?:3\.(?:54\.1(?:8[89]|90)|136\.106)|1\.63\.1[6789])|9(?:8\.(?:15\.101|98\.108)|4\.27\.24[01]|0\.110\.152)|8(?:6\.12(?:3\.13[35]|\.251)|8\.132\.248)|3(?:0\.193\.14[57]|4\.255\.249)|\.38\.(?:16|24)|73\.237\.71)|2(?:0(?:6\.206\.175|7\.188\.179|0\.85\.23)|1(?:2\.96\.6[45]|7\.76\.69))|41\.(?:2(?:23\.162|54\.5)|190\.[23])|8(?:5\.26\.(?:184|241)|3\.149\.3)|9(?:4\.242\.23[378]|5\.169\.240)|79\.1(?:70\.5[12345]|06\.109)|59\.9(?:7\.232|9\.0)|37\.110\.211|64\.58\.114)\.[012]?\d{1,2}\b)/
describe KHOP_PSBL_CIDR24 Relay's IP/24 CIDR contains many PSBL hits
tflags KHOP_PSBL_CIDR24 nopublish
score KHOP_PSBL_CIDR24 2 0.6 2 0.6