You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/07/03 08:57:14 UTC
svn commit: r1499228 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Wed Jul 3 06:57:14 2013
New Revision: 1499228
URL: http://svn.apache.org/r1499228
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1499228&r1=1499227&r2=1499228&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Wed Jul 3 06:57:14 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 20130722
+## khop-sc-neighbors.cf v 20130732
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -20,7 +20,7 @@
# http://spamcop.net/w3m?action=map;mask=4294967295;net=0;sort=56
# Due to the massive block size, this rule only examines the last untrusted
-header __KHOP_SC_CIDR8 X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b(?:1(?:17|86)|9[35])(?:\.[012]?\d{1,2}){3}\b) /
+header __KHOP_SC_CIDR8 X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b(?:9[35]|117|2)(?:\.[012]?\d{1,2}){3}\b) /
# and gets cleaned up a bit
meta KHOP_SC_CIDR8 __KHOP_SC_CIDR8 && !(__VIA_ML||__freemail_safe||__RCVD_IN_DNSWL||RCVD_IN_HOSTKARMA_WL)
describe KHOP_SC_CIDR8 Relay CIDR /8 is among worst in SpamCop
@@ -39,7 +39,7 @@ score KHOP_SC_CIDR8 0.3 0.1 0.3 0.1
# 12.1449/0.0139 0.999 20100410 net, solo=12.1966/0.0197@0.998, ->.2 .1 .3 .2
# 10.3554/0.0112 0.999 20110227@510k solo=10.3717/0.0119@0.999, ->.3 .1 .3 .1
-header __KHOP_SC_TOP_CIDR8 X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b(?:1(?:78|90)|37|2)(?:\.[012]?\d{1,2}){3}\b) /
+header __KHOP_SC_TOP_CIDR8 X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b(?:1(?:78|86|90)|37)(?:\.[012]?\d{1,2}){3}\b) /
meta KHOP_SC_TOP_CIDR8 __KHOP_SC_TOP_CIDR8 && !(__VIA_ML||__freemail_safe||__RCVD_IN_DNSWL||RCVD_IN_HOSTKARMA_WL)
describe KHOP_SC_TOP_CIDR8 Relay CIDR /8 leads SpamCop in worst /8s
tflags KHOP_SC_TOP_CIDR8 nopublish
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:4\.45\.(?:30|73)|8\.166\.248)|9(?:2\.198\.102|8\.15\.97)|83\.98\.23)|2(?:13\.230\.128|4\.127\.201)|96\.254\.22|65\.60\.15)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:4\.45\.(?:30|73)|8\.166\.248|3\.130\.70)|(?:92\.198\.10|58\.255\.)2|0(?:1\.101\.152|3\.9\.158))|213\.230\.128|96\.254\.22)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:7(?:4\.36\.16[04]|7\.1\.223)|03\.9\.158|12\.97\.24)|208\.(?:71\.172|82\.114)|46\.32\.23[23]|37\.122\.208)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:7(?:4\.36\.16[04]|7\.1\.223)|1(?:6\.58\.163|2\.97\.24))|2(?:08\.(?:71\.172|82\.114)|4\.127\.201)|46\.32\.23[34]|37\.122\.208)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:8\.(?:1(?:6(?:6\.2(?:4(?:8\.(?:226|64)|7\.137)|3(?:9\.228|4\.24)|09\.127)|8\.1(?:09\.193|12\.64))|29\.166\.86)|69\.(?:35\.147|55\.193)|97\.196\.163)|4\.(?:4(?:5\.(?:(?:12\.15|4\.3)4|237\.70|31\.129)|7\.159\.150)|207\.113\.55)|2\.(?:21(?:6\.181\.110|7\.228\.234)|78\.6\.1(?:31|88)|97\.24\.192)|5\.(?:88\.(?:119\.132|247\.131)|115\.81\.138|79\.205\.84)|1\.(?:2(?:55\.121\.234|40\.111\.32)|13\.47\.157)|3\.1(?:30\.70\.113|62\.97\.50)|0\.45\.1(?:36\.181|40\.89))|8(?:4\.(?:22\.1(?:1\.[45]|77\.50|0\.51)|107\.58\.135|82\.235\.212)|3\.(?:(?:81\.152\.22|98\.23\.15)8|101\.38\.202)|6\.(?:146\.152\.226|237\.39\.147|84\.207\.201)|8\.(?:127\.230\.28|252\.0\.237|95\.48\.216)|9\.(?:169\.20\.202|39\.35\.168)|7\.(?:120\.127\.27|4\.80\.188)|0\.211\.1(?:62\.254|79\.30))|9(?:9\.(?:30\.137\.13[89]|255\.11\.29)|5\.(?:138\.195\.125|29\.81\.30)|4\.(?:213\.122\.34|106\.16\.6)|8\.(?:15\.97\.43|24\.177\.2)|2\.198\.102\.(?:35|44)|3\.200\.126\.14|0\.85\.209\.
11)|7(?:4\.3(?:6\.16(?:0\.157|4\.184|7\.116)|7\.167\.111)|3\.2(?:00\.90\.196|45\.31\.233)|8\.(?:163\.105\.52|20\.148\.11)|5\.197\.121\.20|7\.1\.223\.73)|2(?:3\.(?:1(?:10\.175\.202|42\.218\.89)|201\.60\.83)|1\.(?:134\.238\.12|78\.180\.1)9|2\.(?:166\.83\.7|3\.69\.5)8|0\.50\.86\.3)|0(?:3\.9\.15(?:8\.1(?:10|47)|7\.181|6\.89)|1\.101\.152\.4[567]|9\.69\.1\.125)|5(?:3\.127\.236\.15|8\.255\.2\.62)|33\.242\.115\.39|46\.255\.66\.191|\.215\.145\.134)|2(?:1(?:1\.(?:2(?:32\.(?:59\.144|154\.6)|06\.133\.94)|1(?:72\.251\.168|47\.211\.16)|54\.17\.200)|8\.(?:1(?:5(?:3\.247\.68|8\.3\.1)|45\.135\.137)|2(?:34\.108\.13|10\.8\.247))|3\.(?:1(?:71\.39\.154|32\.241\.7)|230\.128\.226|81\.164\.57)|7\.(?:2(?:00\.184\.87|3\.6\.216)|198\.3\.238)|0\.2(?:17\.122\.58|45\.89\.69)|9\.(?:255\.77\.42|90\.118\.30)|6\.241\.47\.254|2\.6\.152\.211)|0(?:2\.(?:1(?:(?:29\.216\.6|58\.39\.25)0|42\.203\.19)|71\.136\.200|53\.13\.187)|0\.(?:14(?:8\.125\.247|2\.133\.21)|7(?:2\.11\.132|9\.27\.60)|35\.151\.24)|8\.(?:71\.172\.(?:9[134]
|8[47])|82\.114\.[25][35]|113\.254\.39)|4\.174\.223\.204|1\.45\.114\.3)|2(?:2\.(?:2(?:3(?:1\.57\.10|6\.16\.1)4|53\.182\.139)|100\.14(?:0\.4|\.3))|0\.136\.(?:168\.130|228\.163))|4\.127\.201\.172)|9(?:3\.1(?:5(?:7\.148\.102|9\.191\.246)|88\.8\.67)|5\.(?:77\.109\.67|48\.24\.10|86\.4\.79)|(?:0\.83\.184\.21|6\.254\.22\.5)1|4\.189\.183\.70|1\.214\.83\.2)|6(?:1\.(?:38\.186\.117|98\.131\.141|57\.65\.125|19\.97\.69|70\.83\.58)|6\.(?:203\.32\.54|84\.49\.9)|9\.163\.166\.32|5\.60\.15\.184|7\.90\.21\.150)|7(?:(?:7\.106\.232\.17|9\.188\.87\.1)8|4\.(?:216\.223\.82|9\.203\.186)|8\.(?:97\.158\.97|29\.4\.78)|6\.74\.186\.237|2\.35\.20\.131)|8(?:(?:3\.238\.208\.5|1\.23\.106\.7)5|6\.(?:127\.71\.202|64\.171\.198)|7\.97\.218\.183|8\.190\.224\.20)|4(?:6\.(?:32\.23(?:2\.(?:18|86)|3\.226)|182\.24\.130)|1\.137\.24\.4)|3(?:7\.(?:122\.208\.(?:217|31)|206\.210\.130)|1\.210\.47\.230)|5(?:9\.1(?:25\.64\.4|5\.76\.97)|8\.150\.97\.242|\.82\.192\.73))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:8\.(?:1(?:6(?:6\.2(?:4(?:8\.(?:226|64)|7\.137)|3(?:9\.228|4\.24)|09\.127)|8\.1(?:09\.193|12\.64)|0\.164\.110)|29\.166\.86)|69\.(?:35\.147|55\.193)|97\.196\.163|46\.127\.36)|2\.(?:21(?:6\.181\.110|7\.228\.234)|97\.24\.(?:192|245)|78\.6\.1(?:31|88)|104\.189\.110)|4\.(?:4(?:5\.(?:(?:12\.15|4\.3)4|31\.129)|7\.159\.150)|207\.113\.55)|1\.(?:2(?:55\.121\.234|40\.111\.32)|13\.47\.157)|5\.(?:88\.(?:119\.132|247\.131)|79\.205\.84)|3\.1(?:30\.70\.113|62\.97\.50)|0\.45\.1(?:36\.181|40\.89)|9\.193\.80\.215)|8(?:4\.(?:22\.1(?:1\.[45]|77\.50|0\.51)|107\.58\.135|82\.235\.212)|3\.(?:(?:81\.152\.22|98\.23\.15)8|101\.38\.202)|8\.(?:127\.230\.28|252\.0\.237|95\.48\.216)|7\.(?:120\.127\.27|4\.80\.188)|0\.211\.162\.254|6\.84\.207\.201|9\.169\.20\.202)|9(?:9\.(?:30\.137\.13[89]|255\.11\.29)|5\.(?:138\.195\.125|29\.81\.30)|0\.(?:121\.12\.59|85\.209\.11)|4\.(?:213\.122\.34|106\.16\.6)|8\.(?:15\.97\.43|24\.177\.2)|2\.198\.102\.(?:35|53)|3\.200\.126\.1
4)|2(?:1\.(?:1(?:5(?:9\.11\.164|7\.3\.252)|34\.238\.129)|78\.180\.19)|3\.(?:1(?:10\.175\.202|42\.218\.89)|201\.60\.83)|2\.(?:49\.119\.18|166\.83\.7|3\.69\.5)8|0\.50\.86\.3)|7(?:4\.3(?:6\.16(?:0\.157|4\.184)|7\.167\.111)|3\.2(?:00\.90\.196|45\.31\.233)|8\.163\.105\.52|7\.1\.223\.73)|0(?:3\.9\.15(?:8\.1(?:10|47)|7\.181|6\.89)|1\.101\.152\.4[567]|9\.69\.1\.125)|5(?:3\.127\.236\.15|8\.255\.2\.62)|\.2(?:15\.145\.134|26\.84\.27)|33\.242\.115\.39|46\.255\.66\.191)|2(?:1(?:1\.(?:1(?:7(?:2\.251\.168|4\.120\.123)|47\.211\.16)|232\.(?:59\.144|154\.6))|8\.(?:1(?:5(?:3\.247\.68|8\.3\.1)|45\.135\.137)|2(?:34\.108\.13|10\.8\.247))|3\.(?:1(?:71\.39\.154|32\.241\.7)|230\.128\.226|81\.164\.57)|7\.(?:2(?:00\.184\.87|3\.6\.216)|198\.3\.238)|9\.(?:144\.245\.59|255\.77\.42|90\.118\.30)|0\.2(?:17\.122\.58|45\.89\.69)|6\.241\.47\.254|2\.6\.152\.211)|0(?:2\.(?:1(?:(?:29\.216\.6|58\.39\.25)0|42\.203\.19)|71\.136\.200|53\.13\.187)|0\.(?:14(?:8\.125\.247|2\.133\.21)|7(?:2\.11\.132|9\.27\.60)|35\.151\.24)|8\.(?
:71\.172\.(?:9[134]|8[47])|82\.114\.[25][35]|113\.254\.39)|4\.174\.223\.204|6\.217\.105\.67|1\.45\.114\.3|3\.69\.52\.61)|2(?:2\.(?:2(?:3(?:1\.57\.10|6\.16\.1)4|53\.182\.139)|100\.14\.3)|0\.136\.(?:168\.130|228\.163))|4\.127\.201\.172)|9(?:3\.1(?:5(?:7\.148\.102|9\.191\.246)|88\.8\.67)|5\.(?:77\.109\.67|48\.24\.10|86\.4\.79)|(?:0\.83\.184\.21|6\.254\.22\.5)1|4\.189\.183\.70|1\.214\.83\.2)|8(?:(?:3\.238\.208\.5|1\.23\.106\.7)5|6\.(?:127\.71\.202|64\.171\.198)|7\.(?:126\.71\.178|97\.218\.183)|8\.(?:190\.224\.20|45\.238\.205))|6(?:1\.(?:38\.186\.117|98\.131\.141|57\.65\.125|19\.97\.69)|6\.(?:203\.32\.54|84\.49\.9)|9\.163\.166\.32|5\.60\.15\.184|7\.90\.21\.150)|7(?:(?:7\.106\.232\.17|9\.188\.87\.1)8|8\.(?:97\.158\.97|29\.4\.78)|4\.216\.223\.82|6\.74\.186\.237|2\.35\.20\.131)|4(?:6\.(?:32\.23(?:3\.226|2\.18|4\.33)|182\.24\.130)|1\.137\.24\.4)|3(?:7\.(?:122\.208\.(?:217|31)|206\.210\.130)|1\.210\.47\.230)|59\.1(?:25\.64\.4|5\.76\.97))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work