You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2010/05/11 08:57:57 UTC
svn commit: r943021 - in /spamassassin/trunk/rulesrc/sandbox/khopesh:
20_khop_sc_bug_6114.cf 20_spamdb_subjects.cf
Author: khopesh
Date: Tue May 11 06:57:56 2010
New Revision: 943021
URL: http://svn.apache.org/viewvc?rev=943021&view=rev
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
spamassassin/trunk/rulesrc/sandbox/khopesh/20_spamdb_subjects.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=943021&r1=943020&r2=943021&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Tue May 11 06:57:56 2010
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201005102
+## khop-sc-neighbors.cf v 201005112
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -21,7 +21,7 @@
# http://spamcop.net/w3m?action=map;mask=4294967295;net=0;sort=56
# Due to the massive block size, this rule only examines the last untrusted
-header __KHOP_SC_CIDR8 X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b(?:1(?:22|89)|41|95)(?:\.[012]?\d{1,2}){3}\b) /
+header __KHOP_SC_CIDR8 X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b(?:18[89]|41|95)(?:\.[012]?\d{1,2}){3}\b) /
# and gets cleaned up a bit
meta KHOP_SC_CIDR8 __KHOP_SC_CIDR8 && !(__VIA_ML||__freemail_safe||__RCVD_IN_DNSWL||RCVD_IN_HOSTKARMA_WL)
describe KHOP_SC_CIDR8 Relay CIDR /8 is among worst in SpamCop
@@ -39,7 +39,7 @@ score KHOP_SC_CIDR8 0.2 0.1 0.3 0.2
# 12.0753/0.0359 0.997 20100409 solo=12.1265/0.0412@0.997
# 12.1449/0.0139 0.999 20100410 net, solo=12.1966/0.0197@0.998, ->.2 .1 .3 .2
-header __KHOP_SC_TOP_CIDR8 X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b(?:1(?:17|88|90)|59)(?:\.[012]?\d{1,2}){3}\b) /
+header __KHOP_SC_TOP_CIDR8 X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b(?:1(?:17|22|90)|59)(?:\.[012]?\d{1,2}){3}\b) /
meta KHOP_SC_TOP_CIDR8 __KHOP_SC_TOP_CIDR8 && !(__VIA_ML||__freemail_safe||__RCVD_IN_DNSWL||RCVD_IN_HOSTKARMA_WL)
describe KHOP_SC_TOP_CIDR8 Relay CIDR /8 leads SpamCop in worst /8s
tflags KHOP_SC_TOP_CIDR8 nopublish
@@ -57,7 +57,7 @@ score KHOP_SC_TOP_CIDR8 0.9 0.1 0.9 0.
# 11.6286/0.0475 0.996 20100410 net, solo=11.7224/0.6900@0.944, ->LE as above
# http://www.spamcop.net/w3m?action=map;net=bmaxcnt;mask=16777215;sort=spamcnt
-header KHOP_SC_CIDR16 Received =~ /(?-xism:\b(?:1(?:1(?:0\.139|5\.240)|22\.163)|59\.9[45]|95\.133)(?:\.[012]?\d{1,2}){2}\b)/
+header KHOP_SC_CIDR16 Received =~ /(?-xism:\b(?:1(?:1(?:0\.139|5\.240)|86\.87)|59\.9[24]|94\.179)(?:\.[012]?\d{1,2}){2}\b)/
describe KHOP_SC_CIDR16 Relay CIDR /16 is among worst in SpamCop
tflags KHOP_SC_CIDR16 nopublish
score KHOP_SC_CIDR16 1.6 0.5 1.6 0.5
@@ -72,7 +72,7 @@ score KHOP_SC_CIDR16 1.6 0.5 1.6 0.5
# 0 /0 0 20100409 (wha!?)
# crap, still empty 20100410 bad scrape, script failed to populate rule
-header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b(?:1(?:(?:17\.19|83\.8)7|2(?:2\.168|3\.27))|41\.(?:2(?:49|51)|141)|(?:89\.12|59\.9)2)(?:\.[012]?\d{1,2}){2}\b)/
+header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b(?:1(?:2(?:2\.16[38]|3\.27)|(?:17\.19|83\.8)7)|41\.(?:2(?:49|51)|141)|89\.122)(?:\.[012]?\d{1,2}){2}\b)/
describe KHOP_SC_TOP_CIDR16 Relay CIDR /16 leads SpamCop in worst /16s
tflags KHOP_SC_TOP_CIDR16 nopublish
score KHOP_SC_TOP_CIDR16 2.0 0.5 2.0 0.5
@@ -89,7 +89,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.5 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:7\.118\.8[23]|3\.233\.64)|04\.45\.100)|1(?:(?:96\.12\.24|21\.54\.3)2|10\.45\.144)|7(?:6\.73\.(?:31|2)|8\.138\.170)|(?:41\.140\.25|61\.97\.3)2|8(?:0\.65\.16|3\.149\.3)|59\.97\.168|93\.186\.96)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:9(?:3\.108\.38|6\.12\.242)|1(?:0\.45\.144|3\.22\.69)|21\.54\.32)|2(?:1(?:7\.118\.8[23]|3\.233\.64)|0(?:1\.220\.232|9\.239\.47))|7(?:6\.73\.(?:31|2)|8\.138\.170)|41\.(?:140\.25|214\.1)2|59\.97\.168|93\.186\.96|83\.149\.3)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 2.5 0.6 2.5 0.6
@@ -106,7 +106,7 @@ score KHOP_SC_CIDR24 2.5 0.6 2.5 0.6
# 0.2960/0 1.000 20100409
# 0.2905/0 1.000 20100410 net
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:2(?:0(?:2\.(?:70\.5[489]|152\.243)|3\.151\.232|9\.239\.47)|1(?:1\.247\.239|7\.118\.90|3\.87\.76))|1(?:1(?:1\.224\.250|5\.147\.237)|96\.12\.2(?:4[345]|3[36])|87\.45\.193|24\.40\.16)|8(?:5\.26\.(?:23[234]|16[45])|3\.149\.(?:21|3)|1\.192\.211|9\.232\.105|2\.178\.69)|7(?:4\.208\.166|8\.138\.171|9\.106\.109|2\.21\.7)|41\.(?:2(?:54\.[01]|48\.40)|140\.251)|9(?:5\.129\.166|1\.203\.67)|61\.19\.(?:66|71))\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:2(?:0(?:2\.(?:70\.5[489]|152\.243)|3\.151\.232|4\.45\.100)|1(?:1\.247\.239|7\.118\.90|3\.87\.76))|1(?:1(?:5\.147\.2(?:29|37)|1\.224\.250)|96\.12\.2(?:4[345]|3[36])|74\.123\.208|87\.45\.193)|8(?:5\.26\.(?:23[234]|16[45])|3\.149\.(?:21|3)|1\.192\.211|9\.232\.105|2\.178\.69)|7(?:4\.208\.166|8\.138\.171|9\.106\.109|2\.21\.7)|9(?:5\.129\.166|1\.203\.67)|41\.(?:254\.[01]|140\.251)|61\.19\.(?:66|71))\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.6 2.7 0.6
@@ -123,7 +123,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.6 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:2(?:5\.(?:1(?:31\.174\.229|28\.6\.253)|2(?:0\.82\.197|46\.217\.2)|7\.192\.146)|2\.(?:2(?:52\.2(?:(?:46\.23|34\.7)4|05\.109)|01\.153\.229)|34\.215\.210)|1\.(?:1(?:27\.183\.70|30\.61\.68)|7\.140\.139)|3\.1(?:40\.193\.203|95\.174\.57)|4\.(?:40\.16\.209|138\.22\.2)|8\.134\.5(?:3\.168|7\.75))|9(?:0\.(?:1(?:4(?:9\.229\.141|4\.74\.94)|83\.60\.253)|34\.154\.204|26\.67\.230|4\.48\.11)|5\.(?:1(?:61\.(?:8\.1|9\.2)|89\.46\.253)|2(?:28\.137\.196|02\.81\.154))|3\.(?:1(?:08\.38\.2(?:28|30)|98\.8\.211)|251\.95\.104)|4\.(?:187\.148\.40|204\.203\.16)|6\.12\.228\.253)|1(?:5\.(?:9(?:3\.202\.16[345]|5\.25\.4[23])|161\.148\.148|68\.15\.83)|4\.(?:198\.185\.91|41\.200\.137|39\.27\.142)|1\.224\.250\.1(?:3[01234]|29)|0\.45\.144\.227)|8(?:7\.(?:(?:85\.135\.19|13\.72\.21)0|45\.193\.223|67\.184\.108)|8\.(?:72\.241\.1(?:58|65)|161\.251\.87)|9\.20\.199\.130|6\.24\.21\.3)|7(?:4\.123\.2(?:08\.178|6\.99)|3\.161\.201\.157))|2(?:0(?:1\.(?:1(?:16\.140\.246|3
\.254\.135|44\.130\.21)|2(?:20\.232\.61|32\.107\.46))|0\.(?:1(?:11\.161\.194|09\.201\.51)|74\.220\.30|80\.140\.61)|4\.(?:45\.(?:100\.2[0245]2|66\.251)|10\.139\.160)|9\.(?:2(?:39\.47\.205|54\.56\.106)|94\.196\.170)|3\.(?:151\.232\.191|252\.181\.197)|8\.69\.59\.174)|1(?:1\.(?:1(?:9(?:(?:1\.174\.14|5\.171\.25)1|9\.79\.198)|7(?:9\.124\.160|2\.21\.59)|89\.234\.33)|2(?:47\.239\.239|02\.2\.62))|6\.(?:155\.(?:39\.(?:29|30)|25\.2)|218\.184\.109)|7\.(?:64\.100\.66|76\.2\.129)|9\.70\.7(?:7\.144|8\.163)|0\.213\.115\.5)|2(?:2\.(?:2(?:37\.162\.200|52\.223\.2)|124\.1(?:56\.231|78\.158))|0\.(?:(?:255\.134\.10|82\.69\.2)3|149\.56\.68)|1\.143\.46\.33))|6(?:1\.(?:(?:97\.32\.10|19\.71\.7)4|7\.2(?:30\.226|41\.70)|218\.121\.202|50\.240\.58)|2\.(?:1(?:0(?:0\.102\.254|3\.171\.28)|93\.216\.(?:47|58))|251\.130\.235)|4\.(?:1(?:6(?:4\.228\.206|5\.253\.230)|20\.25\.125)|244\.130\.98)|9\.1(?:67\.162\.(?:11[12]|227)|51\.79\.238)|5\.(?:39\.182\.16[589]|60\.19\.138)|7\.(?:115\.179\.198|217\.50\.44)|0\.251\.
51\.28)|7(?:6\.(?:7(?:3\.(?:2\.1(?:3[89]|4[12])|31\.(?:19[456]|61)|42\.131)|6\.104\.242)|1(?:03\.160\.7|2\.194\.4)4)|7\.(?:2(?:(?:07\.48\.1|2\.162\.9)9|51\.49\.237)|73\.139\.2)|8\.(?:2(?:35\.1\.175|44\.32\.99)|155\.58\.66)|9\.(?:187\.150\.122|29\.55\.144)|2\.(?:51\.44\.23[45]|21\.7\.77)|4\.(?:208\.166\.151|92\.90\.58)|0\.36\.106\.227)|8(?:0\.(?:9(?:3\.125\.186|2\.96\.112)|53\.32\.122|65\.16\.71)|2\.1(?:14\.(?:90\.246|70\.54|80\.93)|40\.91\.41)|3\.(?:1(?:01\.72\.196|6\.167\.14)|240\.139\.195)|1\.2(?:03\.166\.155|1\.115\.38)|7\.1(?:05\.164\.242|17\.3\.97)|8\.42\.117\.185|6\.26\.217\.78|5\.154\.6\.71)|9(?:1\.(?:2(?:14\.128\.2[04]|05\.131\.3)|121\.80\.46)|(?:4\.212\.(?:0\.23|16\.6)|7\.66\.79\.8)1|3\.91\.196\.(?:132|99)|8\.224\.242\.240|5\.155\.47\.217)|41\.(?:2(?:04\.170\.114|15\.18\.110)|190\.239\.178)|5(?:9\.1(?:26\.187\.31|8\.64\.3)|8\.27\.132\.51))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:9(?:0\.(?:1(?:4(?:9\.229\.141|4\.74\.94)|83\.60\.253)|(?:34\.154\.20|90\.187\.3)4|26\.(?:67\.230|97\.26))|5\.(?:1(?:61\.(?:8\.1|9\.2)|89\.46\.253)|228\.137\.196)|3\.(?:1(?:08\.38\.2(?:28|30)|98\.8\.211)|251\.95\.104)|4\.(?:1(?:22\.150\.161|87\.148\.40)|204\.203\.16)|6\.(?:12\.228\.253|28\.56\.147|40\.10\.246))|2(?:2\.(?:2(?:52\.2(?:(?:46\.23|34\.7)4|05\.109)|01\.153\.229)|183\.99\.114)|5\.(?:2(?:0\.82\.197|46\.217\.2)|128\.6\.253|7\.192\.146)|1\.(?:1(?:27\.183\.70|30\.61\.68)|7\.140\.139)|3\.1(?:40\.193\.203|95\.174\.57)|4\.40\.16\.209|8\.134\.57\.75)|1(?:5\.(?:9(?:3\.202\.16[345]|5\.25\.4[23])|161\.148\.148|68\.15\.83)|4\.(?:198\.185\.91|41\.200\.137|39\.27\.142)|1\.224\.250\.1(?:3[01234]|29)|0\.45\.144\.227|8\.161\.246\.85)|8(?:7\.(?:(?:85\.135\.19|13\.72\.21)0|45\.193\.223|67\.184\.108)|8\.(?:72\.241\.1(?:58|65)|161\.251\.87)|6\.24\.(?:1[69]|2[13])\.3|9\.20\.199\.130)|7(?:4\.123\.2(?:08\.178|6\.99)|3\.161\.201\.157))|2
(?:0(?:1\.(?:1(?:16\.140\.246|3\.254\.135|44\.130\.21|0\.176\.43)|220\.232\.61)|4\.(?:45\.(?:100\.2(?:[0245]2|14)|66\.251)|10\.139\.160)|3\.(?:1(?:51\.232\.191|99\.72\.228)|252\.181\.197)|9\.(?:2(?:39\.47\.205|54\.56\.106)|94\.196\.170)|0\.(?:(?:109\.201\.5|80\.140\.6)1|74\.220\.30)|8\.69\.59\.174)|1(?:1\.(?:1(?:9(?:1\.174\.141|9\.79\.198)|79\.124\.160|89\.234\.33)|2(?:47\.239\.239|02\.2\.62))|7\.(?:64\.100\.66|76\.2\.129|26\.6\.64)|6\.155\.(?:39\.(?:29|30)|25\.2)|0\.213\.115\.5)|2(?:2\.(?:2(?:37\.162\.200|52\.223\.2)|124\.1(?:56\.231|78\.158))|0\.(?:(?:255\.134\.10|82\.69\.2)3|149\.56\.68)|1\.143\.46\.33)|4\.115\.198\.27)|6(?:1\.(?:(?:97\.32\.10|19\.71\.7)4|7\.2(?:30\.226|41\.70)|218\.121\.202|50\.240\.58)|4\.(?:1(?:6(?:4\.228\.206|5\.253\.230)|20\.25\.125)|244\.130\.98)|2\.1(?:00\.102\.254|63\.240\.135|93\.216\.47)|9\.1(?:67\.162\.(?:11[12]|227)|51\.79\.238)|5\.(?:39\.182\.16[589]|60\.19\.138)|7\.(?:115\.179\.198|217\.50\.44)|0\.251\.51\.28)|8(?:2\.1(?:14\.(?:9(?:0\.246|2\
.194)|7(?:9\.163|0\.54)|65\.246|80\.93)|(?:40\.91\.4|69\.73\.1)1)|0\.(?:(?:179\.212\.15|65\.16\.7)1|9(?:3\.125\.186|2\.96\.112)|53\.32\.122)|3\.(?:1(?:01\.72\.196|6\.167\.14)|240\.139\.195)|1\.2(?:03\.166\.155|1\.115\.38)|7\.1(?:05\.164\.242|17\.3\.97)|8\.42\.117\.185|6\.26\.217\.78)|7(?:6\.(?:7(?:3\.(?:2\.1(?:3[89]|4[12])|31\.(?:19[456]|61)|42\.131)|6\.104\.242)|12\.194\.44)|7\.(?:2(?:51\.49\.237|2\.162\.99)|73\.139\.2)|8\.(?:2(?:35\.1\.175|44\.32\.99)|155\.58\.66)|2\.(?:51\.44\.23[45]|21\.7\.77)|4\.(?:208\.166\.151|92\.90\.58)|9\.187\.150\.122|0\.36\.106\.227)|9(?:1\.(?:2(?:14\.128\.2[04]|05\.131\.3)|121\.80\.46)|4\.21(?:2\.(?:0\.23|16\.6)1|5\.2\.170)|3\.91\.196\.(?:132|99)|5\.155\.47\.217|7\.66\.79\.81)|5(?:9\.1(?:26\.187\.31|8\.64\.3)|8\.27\.132\.51)|41\.(?:190\.239\.178|204\.170\.114))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work
@@ -140,7 +140,7 @@ score KHOP_SC_TOP200 4 0 4 0 # unneces
# PSBL-neighbors: any /24 with 73+ (2/7, 29%) IPs in the PSBL (not SpamCop),
# as obtained from rsync://psbl-mirror.surriel.com::psbl/psbl.txt
-header KHOP_PSBL_CIDR24 X-Spam-Relays-Untrusted =~ /(?-xism:\b(?:1(?:1(?:7\.(?:2(?:0(?:0\.(?:1(?:4[45678]|6[0123]?|7[6789]?|8[01]?|9[23]?|2[89]|[03]0)?|2(?:4[012345]|2[4567]|0[89]|10)|7[01234]|3[2345]|9[6789]|[56]\d|4[89]|81|0)|5\.(?:[02]|1(?:[678]|0[012]|4[456]|2[89]|3[01])|6[4567]|9[6789]|3[234]|4[89]|5[02])|4\.(?:[03]|1(?:1[235689]|6[012357]|44)?|2(?:2[4567])?|9[06789]|8\d)|6\.(?:[026789]|3[23456789]?|4[012389]?|1[6789]?|5[0123]?)|1\.(?:6[45678]|8[124]|4[89]|5[01]|9[79]|101)|3\.[0123]|2\.130|7\.48)|4(?:1\.(?:[09]|1(?:[59][23]|7[678]?|2[28]|3[67]|4[45]|04?|12)?|2(?:1[6789]|4[014]?|3[236]|2[48]|5[23]|00)?|8[0128]?|5[67]|6[45])|2\.(?:[08]|1(?:4[01489]|0?8|1?2|32?|9?6|7)|2(?:04|8)|4[01]?|6[089]|7[234]|56?)))|1(?:9(?:9\.(?:[036]|1(?:1[23456789]|9[2345678]?|4[456789]|6[0123]?|8[0124]?|2[0149]|7[689]?|0[01])?|2(?:[236]|4[012345]|0?0)?|8[0123456]?|5[0123]?|4[89]?|9[69])|8\.(?:1(?:6[01245678]|4[456789]|5[01234]|7[06]|9[26])|2(?:0[289]|2[467]|1[01])?|8[012345789]|3[23456]|4[89]|5[
01]|9?0)|6\.(?:1(?:3[01234678]|6[01234]|7[6789]|2[89]|8[12])?|2(?:1[0123467]|2[456789]|3[01247]|0[89])|65|96|7)|7\.(?:[03]|1(?:[79]|1[23578]|6[236]?|20)?|2(?:4\d|08|50|2)?|5[012345678]|6[456789]|9[6789]|4[89]?)|4\.(?:1(?:92)?|9[678]|2)|5\.(?:[69]8|100)|3\.161)|\.23[23]))|3\.(?:16(?:7\.(?:1(?:7[689]|8[012]|1[15]|4[48]|[35]1|28)?|2(?:0[89])?|3[234]|8[04]|97|0)|8\.(?:[05]|1(?:[46][012]|1[234]|76)?|2(?:28)?|6[45]?|84|98)|2\.(?:(?:10|8)0|[67][47]|9[67])|6\.(?:[023579]|1[03]?|4?6)|9\.1(?:8[123]|07))|22\.(?:[89]|10))|6\.7(?:1\.(?:[09]|1(?:[136789]|4[489]?|50?)|2(?:[35678]|0?9|12?|22)|5[234567]?|4[01349]|3[349]?|7[05]?|6[01]|80?)|4\.(?:1(?:0[47]|12|20)|69|95)|2\.(?:133|248))|9\.(?:15(?:5\.(?:[03678]|1[012347]|21)|3\.15)|48\.19[23456789])|8\.(?:68\.(?:2(?:4[89]|5[23])|1(?:9[26]|66))|71\.(?:[89]|10))|5\.1(?:47\.(?:2(?:3[0127]|0[123]|29)|192)|86\.6[4567])|4\.(?:143\.160|79\.139)|1\.125\.21[34])|2(?:2\.1(?:6(?:8\.(?:[458]|1(?:[023459]|7[012345789]?|8[025689]?|6\d?|13?)|2(?:[6789]|5[0123
45]?|[01234]\d?)|7[013456789]?|9[6789]?|6[89]?|3[01])|1\.(?:1(?:9[268]?|2?1|37?|5)|5[267]|6[789]|8[12]|245|34|96)|9\.(?:5[012]|7[79]|[29]4|68?|32|45|86)|2\.(?:2(?:[13]|23?|5?4)|102|40|87)|3\.(?:1(?:8[45]?|7)|2[367])|4\.80)|7(?:2\.1(?:1[346789]|2[014567])|8\.1(?:5[15]|48)|3\.(?:110|67)))|3\.(?:1(?:8\.(?:1(?:9[56789]|52)|24[01])|9\.1(?:6[134579]|1[89]|7[15])|7(?:\.2(?:4[1248]|50)|2\.49)|6\.(?:(?:22)?0|1[13]|4))|2(?:7\.(?:2(?:[45]|0[89]|1\d)|9[02347]|8\d|35)|8\.(?:14[0123]|28)|2\.(?:48|54)))|0\.6(?:1\.(?:[036789]|1[01278]?|2[13]?)|0\.(?:[23]|1(?:3[034]|29|1))|2\.16[26]|3\.[1367]))|8(?:3\.(?:8(?:7\.(?:2(?:[37]|1[789]|2[05])|1(?:15|8))|0\.13[245])|177\.125)|8\.(?:48\.(?:1(?:19|45)|9[56]|48|57|63)|50\.(?:2[26]|[34]6)|135\.2)|2\.48\.20[12]|9\.124\.31)|7(?:8\.12(?:2\.(?:1(?:8[45]|9[23])|6[01]|84|96)|3\.(?:2[456]|4[02]|32|0)|5\.(?:16|49|0))|5\.107\.1)|9(?:6\.(?:20(?:6\.(?:70|83)|2\.222|1\.65)|12\.2(?:4[2345]|3[36]))|4\.230\.1(?:46|54))|09\.197\.84|40\.127\.27)|5(?:9\.(?:9(?:9\.(?:1(?
:3[0123]|6[012]?|8[456]|2[89]|5[23]|76?|44|92)|2(?:[45678]|0[089]|1[01])|5[678]|6[456]|4[08]|7[23]|32)|5\.(?:[058]|1(?:[06][012345679]|7[012345678]|1[14]|2[89]|30|5)|3[1234789]?|9[6789]?|6[4568]|2[36]?|47?|70?)|4\.(?:1(?:3[01345]|0[2357]|1[2345]|2[89]|4[13]|7[78]|89)|2(?:4[0467]|0[89]|10)|4[0123]|7[34]|9[89])|8\.(?:1(?:3[0126]|6[018]|2[89]|9[23]|44|52|76)|(?:20)?0|8)|3\.(?:[025679]|1(?:2[89]|3[01]|15?|02)?|3[23459]?|4[01]?)|7\.2(?:1[067]|0[89]|2[45]|48)|2\.2(?:4[012567]|51))|1(?:7(?:7\.(?:[56789]|1(?:[15]|9[3456789]|6[123456]|[04]2?|7[24]|3?2)|2(?:27)?|[34]3)|8\.(?:4[27]|6[13]|36|51))|64\.(?:[03489]|2(?:0[45])?|1[012345]?)|80\.(?:1(?:4[468]|3[27]|5[08])|220)))|8\.1(?:8(?:6\.(?:21[6789]|12)|7\.(?:3[67]|64|8))|0\.1(?:70|2)))|41\.(?:2(?:0(?:2\.(?:19[567]|20[13]|86)|3\.2(?:2[467]|31)|9\.(?:7[236]|112)|7\.29)|4(?:8\.(?:11[2345789]|4[01236]|5[2345])|9\.(?:5[02349]|4[68]|6[01]))|1(?:8\.2(?:3[2347]|4[69]|29)|6\.97)|54\.[0123]|23\.201)|1(?:40\.(?:1(?:[2345]|6[14]|07?|13?)|7[23456789]
|2(?:26|51)|6[012567]|9[0123]?|5[78]|8\d?)|89\.(?:193|47)))|2(?:1(?:3\.(?:1(?:3(?:2\.255|6\.121)|08\.172)|87\.76)|2\.(?:(?:23\.10|49\.7)4|60\.73)|7\.(?:8\.2(?:25|36)|118\.90)|0\.89\.(?:36|50|63))|22\.25(?:3\.(?:[03]|1(?:78)?|2[57])|2\.1(?:4[01]|8[27]|58|79)|4\.(?:7[27]|218))|0(?:2\.(?:1(?:24\.8[89]|52\.243|79\.89)|70\.5[489])|3\.1(?:71\.19[67]|15\.94)))|8(?:5\.26\.(?:1(?:6[45]|8[36])|2(?:3[2345]|41))|2\.(?:1(?:32\.248|78\.69)|209\.218)|1\.192\.(?:1(?:86|99)|211)|3\.149\.(?:2[18]|4[45]|3)|9\.2(?:04\.153|32\.105)|7\.252\.243|4\.36\.154)|9(?:3\.8(?:5\.1(?:9[26]|12|0)|4\.248)|1\.20(?:2\.146|3\.67)|2\.39\.(?:7[017]|65)|4\.79\.(?:6[56]|98)|5\.215\.8[01])|7(?:8\.(?:93\.(?:1(?:7[567]|5[01]|64)|22[2467]|6[789]|70)|138\.17[01])|7\.64\.1(?:1[789]?|2[01]?|0)|9\.143\.100)|6(?:2\.(?:61\.164|24\.99)|1\.19\.6[567]))\.[012]?\d{1,2}\b)/
+header KHOP_PSBL_CIDR24 X-Spam-Relays-Untrusted =~ /(?-xism:\b(?:1(?:1(?:7\.(?:2(?:0(?:0\.(?:1(?:4[45678]|7[6789]?|6[012]?|8[01]?|9[23]?|2[89]|[03]0)?|2(?:4[012345]|2[4567]?|0[89]|10)|7[012345]|3[2345]|9[6789]|[56]\d|4[89]|81|0)|5\.(?:[02]|1(?:[678]|4[4567]|0[012]|2[89]|3[01])|6[4567]|9[6789]|3[234]|5[012]|4[89])|4\.(?:[03]|1(?:1[23456789]|6[012357]|[02]1|44)?|2(?:2[4567])?|9[0136789]|8\d|65)|6\.(?:[026789]|3[23456789]?|4[012389]?|1[6789]?|5[0123]?)|1\.(?:1(?:01|16)|6[456789]|8[124]|4[89]|5[01]|9[79])|3\.[0123]|2\.130|7\.48)|4(?:1\.(?:1(?:[59][23]|7[678]?|2[28]|3[67]|4[45]|04?|12|60)?|2(?:1[6789]|3[236]|4[014]|2[48]|5[23]|00)?|8[0128]?|5[67]|6[45]|96?|0)|2\.(?:[08]|1(?:4[01489]|1?2|32?|80?|9?6|08|7)|2(?:04|8)|4[014]?|7[0234]|6[089]|56?))|\.2)|1(?:9(?:9\.(?:[036]|1(?:1[23456789]|9[234678]?|4[456789]|2[01349]|8[0124]?|6[012]?|7[689]?|0[01])?|2(?:4[012345]|00|2)?|8[01234568]?|5[0125]?|4[89]?|9[679])|8\.(?:1(?:6[012345678]|4[456789]|5[012346]|7[06]|9[26]|28|31)|2(?:0[289]|2[467
]|1[01])?|3[23456]|4[89]|5[05]|8\d|9?0)|7\.(?:[03]|1(?:[79]|1[2345678]|6[2368]|2[02])?|2(?:08?|4\d|50|2)?|5[012345678]?|6[456789]|9[6789]|4[89]?)|6\.(?:1(?:3[01234678]|6[01234]|7[6789]|2[89]|81)?|2(?:1[012346]|2[456789]|3[01247]|0[89])|65|96|7)|4\.(?:1(?:92)?|9[678]|2)|5\.(?:9[89]|68)|3\.163)|\.23[23]))|3\.(?:16(?:7\.(?:1(?:7[689]|8[012]|1[15]|[35]1|28|44)?|2(?:45)?|3[234]|8[04]|0)|8\.(?:[0257]|1(?:1[234]|4[012]|6[02]|76)?|6[45]?|84|98)|2\.(?:(?:10|8)0|[67][47]|9[67])|6\.(?:[023578]|10?|4?6)|9\.(?:18[0123]|6))|22\.(?:6?9|10|8))|6\.7(?:1\.(?:[09]|1(?:[1236789]|4[489]?|50?)|2(?:[35678]|0?9|12?)?|5[23456]?|4[02349]|3[39]?|6[01]|75?|80?)|4\.(?:1(?:0[47]|12|20)|69|95)|2\.248)|9\.(?:15(?:5\.(?:[0368]|1[012347]|21)|3\.15)|48\.19[23456789])|8\.(?:68\.(?:2(?:4[89]|5[23])|1(?:9[26]|66))|71\.(?:[89]|10))|5\.1(?:47\.(?:2(?:3[0127]|0[123]|29)|192)|86\.6[4567])|4\.(?:143\.160|79\.139)|1\.125\.21[34])|2(?:2\.1(?:6(?:8\.(?:[458]|1(?:[23459]|7[012345789]?|8[01235689]?|6\d?|02?|13?)|2(?:[6789
]|5[012345]?|[01234]\d?)|7[013456789]?|9[6789]?|6[89]?|3[01])|1\.(?:1(?:9[268]|[26]?1|37?|5)|(?:24|7)5|5[267]|6[789]|8[12]|34|96)|9\.(?:3[268]|5[012]|4[58]|7[79]|8[16]|9[34]|[12]4|68?)|2\.(?:2(?:2[38]?|17?|5?4|3)|102|40|87)|3\.(?:18[45]?|2[367]|[48]3)|4\.(?:252|80))|7(?:2\.1(?:2[01234567]|1[2346789])|8\.1(?:5[157]|4[89])|3\.1(?:10|36)|7\.166|0\.31))|3\.(?:1(?:7(?:\.(?:2(?:4[124]|50)|130)|2\.49)|9\.1(?:6[134579]|7[135]|1[89])|8\.(?:19[5789]|24[01])|6\.(?:1[13]|4))|2(?:7\.(?:2(?:[45]|0[89]|1\d)|8[012356789]|9[02347]|101)|8\.(?:1(?:4[0123]|26)|28)|2\.(?:5[47]|48)))|0\.6(?:1\.(?:[036789]|1[01267]?|2[137]?)|0\.(?:[23]|1(?:3[048]|29|1))|3\.[012367]|2\.16[26]))|8(?:3\.(?:8(?:7\.(?:2(?:[37]|1[789]|20)|1(?:15|8))|0\.13[245])|177\.125)|8\.(?:48\.(?:1(?:1[39]|45)|9[35]|48|57|63)|50\.[24]6|135\.2)|2\.48\.20[12]|9\.124\.31)|7(?:8\.12(?:2\.(?:1(?:8[45]|9[23])|2(?:09|25)|6[01]|84|96)|5\.(?:1[67]|49|64|81|0)|3\.(?:2[46]|4[02]|32))|5\.107\.1)|9(?:6\.(?:2(?:0(?:6\.(?:70|83)|2\.222|1\.65)|8\.2
47)|12\.2(?:4[2345]|3[36]))|4\.230\.1(?:46|54))|09\.197\.84|40\.127\.27)|5(?:9\.(?:9(?:5\.(?:[058]|1(?:7[012345678]?|0[012345679]|1[014]|2[89]|6\d|30|81|5)|2(?:[36]|00)?|3[1234789]?|6[45689]|9[6789]?|70?|47)|9\.(?:[08]|1(?:3[0123]|6[012]?|5[234]|8[456]|2[89]|76?|44|92)|2(?:[45678]|0[89]|1[01])|5[678]|6[456]|4[08]|7[23]|32)|4\.(?:1(?:3[0123456]|0[12357]|1[23456]|4[013]|7[678]|2[89]|81)|2(?:4[02467]|0[89]|10)|4[0123]|9[89]|74)|3\.(?:[056789]|1(?:3[01]?|2[89]|15?|02|5)?|3[23459]?|2(?:46)?|4[01]?)|8\.(?:1(?:3[0126]|6[018]|2[89]|9[23]|44|52|76)|(?:20)?0|8)|7\.(?:2(?:1[067]|0[89]|2[45]|32|48)|121)|2\.2(?:4[0123567]|51))|1(?:7(?:7\.(?:[5689]|1(?:[125]|9[3456789]|6[23456]|[034]2?|7[24])|2(?:27|31)?|3[37]|79?|43)|8\.(?:5[12]|36|42))|64\.(?:[03489]|2(?:0[45])?|1[012345]?)|80\.(?:1(?:4[4568]|3[27]|5[08])|220)))|8\.1(?:8(?:6\.(?:2(?:1[6789]|21)|12)|7\.(?:3[67]|64|8))|0\.1(?:70|2)))|41\.(?:2(?:0(?:2\.(?:19[567]|20[13]|86)|3\.2(?:2[45678]|31)|9\.(?:7[26]|112)|7\.29)|4(?:8\.(?:11[2345789]|
4[01236]|5[2345])|9\.(?:5[012349]|6[01]|48))|1(?:8\.2(?:3[237]|[24]9)|6\.97)|5(?:4\.[0123]|0\.204)|23\.201)|1(?:40\.(?:1(?:[2345]|6[14]|07?|1?1)|7[23456789]|2(?:26|51)|9[012345]?|6[01267]|5[078]|8\d?)|89\.(?:193|47)))|2(?:1(?:3\.(?:1(?:3(?:2\.255|6\.121)|08\.172)|87\.76)|2\.(?:(?:23\.10|49\.7)4|60\.73)|7\.(?:8\.2(?:25|36)|118\.90)|0\.89\.(?:36|50|63))|0(?:2\.(?:1(?:24\.8[89]|52\.243|79\.89)|70\.5[489])|3\.1(?:71\.19[67]|15\.94))|22\.25(?:3\.(?:[03]|1(?:78)?|2[57]?)|2\.1(?:8[27]|58|79)|4\.77))|8(?:5\.26\.(?:1(?:6[45]|8[36])|2(?:3[2345]|41))|2\.(?:1(?:32\.248|78\.69)|209\.218)|3\.149\.(?:2[18]|4[45]|32?)|9\.2(?:04\.153|32\.105)|1\.192\.(?:199|211)|7\.252\.243|4\.36\.154)|9(?:3\.8(?:4\.2(?:4[18]|33)|5\.1(?:9[26]|12))|1\.20(?:2\.146|3\.67)|2\.39\.(?:7[017]|65)|4\.79\.(?:65|98)|5\.215\.8[01])|7(?:8\.(?:93\.(?:1(?:5[01]|7[67]|64)|22[2467]|6[789]|70)|138\.17[01])|7\.64\.1(?:1[789]?|21)|9\.143\.100)|6(?:1\.19\.6[567]|2\.61\.164))\.[012]?\d{1,2}\b)/
describe KHOP_PSBL_CIDR24 Relay's IP/24 CIDR contains many PSBL hits
tflags KHOP_PSBL_CIDR24 nopublish
score KHOP_PSBL_CIDR24 1.8 0.8 1.8 0.8
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_spamdb_subjects.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_spamdb_subjects.cf?rev=943021&r1=943020&r2=943021&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_spamdb_subjects.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_spamdb_subjects.cf Tue May 11 06:57:56 2010
@@ -1,8 +1,8 @@
# Tests of suject data from Phil Tom's SPAMDB
# (as compiled into rules by Adam Katz)
-# Last updated 2010-05-10 06:00:00
+# Last updated 2010-05-11 06:00:00
-header KHOP_SPAMDB_SUBJ Subject =~ m{(?-xism:^(?:(?:W(?:ant (?:to (?:act like a pornstar. Take a bluepill|last for as long as you want in bed|get rid of sexual anxiety)|great sex(?:. Get.)?)|in from benefits of hidden secret of pornstars|e can make you the IronMan in beD)|D(?:o you need (?:help (?:falling (?:in|to) sleep.|in bed)|pain killers.)|isappointed with your bad performance in bed|elivery Status Notification .Failure)|Ne(?:ed (?:Help Becoming Sexually Potent|pain killers..Get them Here)|ver have trouble keeping it hard when needed)|(?:(?:¹..ãº. ¹.º.Áõ ¹.¹æ¹. .ëÃâ¼.ºñ½º..|have a easier time making her).|for the best performance in bed).|C(?:lick Here to Boost your Confidence in Bed|ure your MaleED problem Today)|(?:Last as long as a p0rn star in|need some help in the) bed|Unbeatable Pharmacy Offers).|S(?:(?:(?:(?:ometimes we need some help|tep up your performance) in b|step up your game in B)ed|ignificantly sparkle your bed life.|ee your love tool
growing).|a(?:tify (?:your spouse(?:s bed needs easier)?|Her in Bed Tonight.)|fest and approved method of male enhancing|ve up to 70% on RxMedications)|he will give her heart to you for incredible nights|pice up your sexual senses in bed)|Re(?:: (?:Pl(?:ease. tell me success stories about V|ace order now for dissount)|We've Students from all works of life|you question review and submiy|MBA- qualification & award|Second time in you order|worldwide delivery info|Order process)|fill your life with sexual excitement.|ally nice things are waiting)|M(?:(?:en: Click Here to Boost your Confidence in Bed|ore sexual confidence. More sex. More fun|uch bigger. than you used to have it).|a(?:ke (?:love hard and strong all night.|your girl happier)|le Enhancement Reviews))|B(?:e(?:come (?:sexualy strong overnight.|King of the Bed)| beloved by her tonight|st prices to cure ED)|uy top products at Canadian Pharmacy store.|reathe a new life into your intimate life)|H(?:(?:ave (?:no problem la
sting long in bed|long strong night in BED)|i there. Enhance Sexual Performance).|ow to (?:get rid of poor intimate life|please your gf 5 times a day))|Th(?:e (?:widest collection of finest medications online|ladies love it. I know|Sexual Edge..)|is secret will change your sexual life instantly.)|Get (?:a(?:ll the medications you want online.| massive sex-confidence boost)|(?:your favorite rxmedications her|the Job fast this on)e.)|A(?:(?:(?:ll you need is a blue pill for|re you confident in) bed|maze women. Increase your sexual stamina..).|dult Bedtime Enhancer)|You(?:r (?:Sexual Partner Will Not Know Its The Same You|sexual life maybe incredible and exciting).| Have Received a Greeting Card)|(?:Ensure your potence and make love everywher|International Pharm get med cheaper onlin|10 reasons to cure ED as soon as possibl)e|g(?:ive her a great time in bed(?: from now on.)?|reat offers to spice it up in bed..|ood news for the bed)|t(?:ake control of your sexual problems.|hing
you never knew existed online|ips that are good for bed)|F(?:W: Hello . increase your confidencein bed|ed up with overpriced pharmacy costs.)|we offer the easiest way to stay (?:strong in bed|hard in bed.)|s(?:pice it up in bed..No Doc Needed|ex games in bed weak.)|a(?:dd some spices to the bed..|ncient advice for the bed)|P(?:lease your spouse more often then not|FIZER Inc)|best performance adult bed games|its time to spice up the bed)$)}
+header KHOP_SPAMDB_SUBJ Subject =~ m{(?-xism:^(?:(?:A(?:shampoo 3D CAD Professional 2 (?:for Windows (?:is the best (?:alternative (?:among other programs|in CAD area)|solution for any CAD user)|will help you be productive and professional)|offers a viable alternative to the established CAD products)|re you on Medicare and Living with Diabetes|TTN:.9. 045. 000. 00.AGRIC BANK TRANSFER..|ll you need is a blue pill for bed|LL of your favorite MEDS are here)|Sa(?:ve 150 dollars when you buy Ashampoo 3D CAD Professional 2 for Windows online|tify Her in Bed Tonight)|C(?:a(?:nadian Pharmacy is worth a try|ll right now for your degree)|hoose the needed field)|User optimized interface can be understood even by a child. choose this CAD software|Àü .¹ ¾î µð µç .ð µÎ .. .É.¾È Àü ÇÑ .. ³² À. .ø ÇØ .ä|N(?:ominate for the degree you want|ew resume)|have a easier time making her..|need some help in the bed).|M(?:(?:a(?:ke (?:p(?:rofessional 3D projects and present
ations with Ashampoo 3D CAD Professional 2|lans and 3D projects using Ashampoo 3D CAD Professional 2 for Windows)|construction plans in Ashampoo 3D CAD Professional 2 for Windows easily)|sters degree with no efforts)|uch bigger. than you used to have it).|ilitary Report: The End of Big Annual Pay Raises.. General Atomics Builds Killer Electromagnetic Rail Cannon and More|y stamina increased 2 folds with Viagra)|Re(?:al(?: (?:gurus choose Ashampoo 3D CAD Professional 2 for Windows among CAD product|University diploma)s.|ize your fantasy as a sex god)|s(?:olve your erectile issues with complete privacy|ults are in)|c(?:tify your manhood issues easily|eive the desired degree.)|: Re: (?:h(?:i (?:mate|bud)|ey mate)|yo (?:mate|bud)))|W(?:(?:in from benefits of hidden secret of pornstars|ant to act like a pornstar. Take a bluepill|hat(?: (?:do you know|gives)|.s (?:new|up))).|e (?:(?:want you to benefit from free Ciali|give you free sample)s|know (?:you want the free Cialis|these p
ills work)))|You(?:r (?:c(?:redit score change notification|heapest sex drugs online)|new LGwasher - test it then keep it|erotic nights are here to stay|happiness is now free)| (?:need to take these pills to experience nirvana|Can Soon Be Certified in Medical Billing))|G(?:et (?:your (?:monthly supplies of Cialis|sexual performance up|favorite rxmed here.)|a(?:ll the medications you want online| diploma for a better job).)|ive her wonderful hours of pleasure)|B(?:rown plays final hand. TV Boult from the blue. Cole teams up with ten girls. Fabio picks his top 30|e(?: beloved by her tonigh|cause she wants i)t|achelors. Masters or Doctorate degree.)|T(?:h(?:e (?:ladies love it. I know|best Sex Pack ..)|at's the latest news)|urn your radio into your phone speaker|ry ED meds absolutely free|est Results)|Do(?:n't (?:pay anything for your pills for 15 day|forget to get your free trial)s| (?:not underestimate the value of free pills|you need help in bed.))|F(?:(?:ashionable watches
at prices that are not frightening|inally luxury items became affordable for everybody).|ree ED Pills. only pay shipping)|.(?:.ÀÚµéÀº Áß.... ÈûºüÁö. ³²¼ºÀ. ½È¾îÇÑ.Ù ..¹ß...â..ºÎÀü 100%ÇØ.á¹ý.ø.³| TPM ..GB2312.B.Kcirw.bJ.qOksvrJ6CqxuM6soaq7pLjfvLbR0H7Q3rDg..)|³²(?:ÆíÀÌ ¹ã.. Àá..ÀÚ³..ä. ¾î...Ô ÇÏÁÒ. ¹ß'.â.ºÎ.Àü .í¹Î³²¼º Çʵ..|ÀÚ. Çã..Èû.. ÁÁÀ..é µÈ.Ù. ..¹ß...â..Ä..áÁ. 50%ÇѽÃSALE)|P(?:ay shipping (?:for your erotic night|and get your trial)s|erformance is now free to try|FIZER Inc)|E(?:rectile-dysfunction pills available on free trial|nsure your potence and make love everywhere)|L(?:o(?:w Cost Business Phone Service|ve her the right way)|ast (?:36 hours|longer) for free)|''Blueberry Giant'' makes it easy to grow your own ''blueberry'' plants|Ha(?:rdness determines sexual pleasure|ve long strong night in BED.)|g(?:reat offers to spice it up in bed..|ive her a great tim
e in bed)|Quality Senior Life Insurance rates on a budget|we offer the easiest way to stay strong in bed)$)}
describe KHOP_SPAMDB_SUBJ Matches one of the SPAMDB top 100 spam subjects
tflags KHOP_SPAMDB_SUBJ nopublish # auto-generated rule