You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/09/30 08:57:48 UTC
svn commit: r1527463 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Mon Sep 30 06:57:48 2013
New Revision: 1527463
URL: http://svn.apache.org/r1527463
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1527463&r1=1527462&r2=1527463&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Mon Sep 30 06:57:48 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201309292
+## khop-sc-neighbors.cf v 201309302
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -81,7 +81,7 @@ score KHOP_SC_CIDR16 0.4 0.1 0.4 0.1
# crap, still empty 20130629@465k net
# crap, still empty 20130705@376k net. lowering for low vol -> .4 .1 .4 .1
-header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b89\.121(?:\.[012]?\d{1,2}){2}\b)/
+header KHOP_SC_TOP_CIDR16 Received =~ /___ FAILED TO POPULATE ___/
describe KHOP_SC_TOP_CIDR16 Relay CIDR /16 leads SpamCop in worst /16s
tflags KHOP_SC_TOP_CIDR16 nopublish
score KHOP_SC_TOP_CIDR16 0.6 0.2 0.7 0.3
@@ -101,7 +101,7 @@ score KHOP_SC_TOP_CIDR16 0.6 0.2 0.7 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:0(?:3\.30\.7[23]|1\.15\.254)|84\.(?:22\.177|82\.53)|12\.90\.222|21\.54\.54)|2(?:11\.119\.86|21\.4\.142|3\.229\.11)|58\.254\.172|75\.75\.225|85\.25\.150)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:0(?:3\.30\.7[23]|1\.15\.254)|12\.90\.222|84\.22\.177|21\.54\.54)|2(?:11\.119\.86|21\.4\.142|3\.229\.11)|(?:91\.218\.24|75\.75\.22)5|58\.254\.172|85\.25\.150)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.6 0 0.6 0
@@ -142,7 +142,7 @@ score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /___ FAILED TO POPULATE ___/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:8(?:4\.(?:22\.(?:2(?:8\.22[012]|28\.[56]2|30\.213|7\.171)|1(?:7(?:7\.5[12]|2\.145)|97\.216|1\.23))|82\.(?:53\.1(?:06|43|1)|179\.117))|0\.(?:225\.148\.206|166\.124\.90)|3\.(?:136\.128\.22|22\.156\.9)6|8\.252\.0\.237|9\.75\.63\.114)|1(?:8\.(?:1(?:30\.107\.235|75\.28\.3)|217\.180\.116|97\.196\.163)|5\.8(?:2\.242\.197|8\.119\.132)|3\.(?:21\.228\.230|0\.85\.249)|2\.184\.172\.244|6\.193\.90\.26|9\.37\.195\.59)|9(?:8\.(?:24\.1(?:7(?:4\.16[67]|5\.[234]|3\.80)|80\.91)|50\.163\.(?:19[349]|205)|44\.0\.157)|(?:5\.252\.108|4\.106\.16)\.6|9\.30\.137\.10[67]|2\.163\.193\.199|0\.107\.140\.77)|2(?:1\.(?:(?:22\.127|88\.54)\.17|78\.119\.193)|4\.(?:248\.211\.20|160\.35\.)2|5\.(?:75\.235\.127|46\.24\.62)|2\.182\.28\.245)|7(?:3\.2(?:(?:00\.90\.19|32\.161\.3)6|12\.205\.158)|8\.2(?:13\.110\.115|0\.148\.11)|7\.1(?:84\.140\.222|\.223\.73))|0(?:1\.(?:15\.(?:254\.32|114\.8)|44\.3\.50)|3\.9\.157\.12[679]|6\.187\.102\.215)|4(?:1\.(?:255\.161\.102|0\.61\.166)|
8\.223\.59\.187|\.63\.74\.204)|62\.(?:216\.3\.1[45]|105\.25\.123)|\.(?:215\.206\.24|85\.17\.8)2|38\.91\.169\.163)|2(?:0(?:6\.214\.(?:71\.(?:4[123456789]|5[012345789]|3[45678]|6[012])|67\.(?:[29]|10))|2\.(?:1(?:(?:37\.22\.20|58\.39\.25)0|18\.236\.177|42\.203\.19)|71\.136\.200)|3\.(?:23(?:9\.45\.202|8\.95\.11)|171\.233\.243)|0\.(?:7(?:2\.11\.132|9\.27\.60)|51\.45\.180)|1\.(?:195\.239\.27|221\.132\.83)|8\.84\.135\.14[78]|7\.194\.87\.105)|1(?:1\.(?:1(?:19\.86\.1(?:4[3568]|96)|74\.120\.123|47\.211\.16)|232\.92\.23)|0\.(?:183\.179\.(?:39|45)|217\.56\.2|51\.23\.91)|3\.1(?:(?:71\.39\.15|95\.77\.11)4|32\.241\.13)|6\.155\.17\.(?:[489]|1[45])|8\.151\.141\.75|9\.147\.172\.2)|2(?:1\.(?:2(?:14\.2(?:08\.226|14\.187)|04\.223\.38|34\.24\.46)|4\.142\.(?:9[01]|[45]1|67))|2\.1(?:12\.150\.58|22\.227\.10|74\.155\.19)|0\.68\.224\.45)|3\.229\.11\.26)|6(?:0\.(?:21(?:4\.223\.178|\.209\.150)|196\.58\.189)|9\.(?:198\.197\.156|64\.49\.109)|1\.14(?:3\.158\.24|1\.21\.3)4|5\.60\.15\.173|7\.90\.21\.150|8\.180\.96\.
1)|7(?:(?:2\.35\.20\.13|8\.31\.74\.21)1|4\.(?:216\.223\.8|86\.90\.24)2|5\.75\.225\.(?:10[01]|9[89]))|8(?:0\.(?:86\.88\.1(?:13|26)|73\.71\.248)|(?:3\.18\.234\.20|5\.25\.150\.16)2|2\.117\.194\.229)|9(?:3\.1(?:8(?:4\.71\.66|8\.8\.67)|59\.160\.164)|1\.218\.245\.(?:7[1245]|66)|7\.67\.218\.162)|37\.206\.210\.130|58\.213\.157\.68|41\.84\.135\.22)\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work