You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/06/05 08:57:24 UTC
svn commit: r1489724 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Wed Jun 5 06:57:23 2013
New Revision: 1489724
URL: http://svn.apache.org/r1489724
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1489724&r1=1489723&r2=1489724&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Wed Jun 5 06:57:23 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 20130642
+## khop-sc-neighbors.cf v 20130652
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -74,7 +74,7 @@ score KHOP_SC_CIDR16 1.0 0.2 1.0 0.2
# crap, still empty 20100410 bad scrape, script failed to populate rule
# crap, still empty 20110227 this is due to safety net exclusions -> 1 .2 1 .2
-header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b222\.252(?:\.[012]?\d{1,2}){2}\b)/
+header KHOP_SC_TOP_CIDR16 Received =~ /___ FAILED TO POPULATE ___/
describe KHOP_SC_TOP_CIDR16 Relay CIDR /16 leads SpamCop in worst /16s
tflags KHOP_SC_TOP_CIDR16 nopublish
score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0.4
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.(?:128\.2|84\.13)|1\.54\.54)|73\.192\.144|12\.90\.197|03\.30\.72|99\.83\.93)|72\.(?:42\.224|55\.188)|89\.207\.129|66\.96\.213|5\.39\.220)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.(?:128\.2|84\.13)|1\.54\.54)|7(?:3\.192\.144|4\.36\.167)|8(?:0\.211\.17|4\.82\.2)9|03\.(?:30\.72|9\.158)|99\.83\.93)|222\.174\.155|89\.207\.129|5\.39\.220)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:7(?:8\.172\.152|4\.36\.167)|12\.9(?:7\.3[6789]|0\.90)|51\.84\.131|20\.84\.13|84\.82\.29)|2(?:08\.(?:71\.172|82\.114)|10\.21\.225)|6(?:6\.199\.224|5\.60\.15)|80\.36\.130)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:3\.132\.241|0\.21\.225|7\.198\.3)|08\.(?:71\.172|82\.114))|1(?:12\.9(?:7\.3[6789]|0\.90)|51\.84\.131|20\.84\.13)|6(?:6\.199\.224|5\.60\.15)|80\.36\.130)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:0\.(?:45\.(?:1(?:36\.181|40\.89)|244\.54)|1(?:65\.125\.152|89\.168\.171))|2\.(?:216\.(?:(?:102\.9|8\.15)8|45\.114)|90\.90\.(?:2[012]|5[01]|4\d))|9\.(?:1(?:9(?:7\.181\.120|2\.252\.1)|84\.214\.18)|201\.16\.211)|5\.(?:88\.247\.131|22\.80\.197|90\.96\.85)|6\.1(?:18\.180\.183|26\.87\.245)|8\.(?:114\.77\.116|97\.196\.163)|1\.184\.185\.243|4\.42\.123\.48|7\.20\.3\.231)|8(?:4\.82\.(?:1(?:5(?:9\.237|4\.51)|20\.235|09\.14)|29\.3[34])|8\.(?:127\.230\.28|64\.184\.136|252\.0\.237)|3\.10(?:1\.(?:220|38)\.202|6\.116\.109)|0\.2(?:25\.131\.176|11\.179\.30))|7(?:3\.(?:44\.144\.14[89]|192\.144\.105|212\.250\.230)|8\.(?:1(?:48\.210\.173|51\.86\.1)|211\.46\.186)|4\.36\.167\.116|7\.1\.223\.73)|2(?:1\.(?:1(?:34\.238\.129|81\.251\.188|57\.3\.252)|78\.180\.19)|2\.(?:165\.225\.177|49\.119\.188)|0\.50\.86\.3)|9(?:5\.1(?:38\.195\.125|91\.184\.82)|9\.(?:255\.11\.29|83\.93\.18)|4\.106\.16\.6)|0(?:3\.9\.15(?:7\.181|8\.165|6\.89)|8\.61\.55\.16[79]|6
\.240\.56\.98)|33\.242\.115\.44|51\.84\.131\.107|\.209\.163\.3)|2(?:1(?:8\.(?:1(?:5(?:3\.247\.68|8\.3\.1)|06\.182\.6)|2(?:34\.108\.13|49\.161\.34))|3\.(?:1(?:71\.39\.154|32\.241\.7|86\.39\.43)|230\.128\.226|81\.164\.57)|1\.(?:2(?:06\.133\.94|22\.53\.83)|147\.211\.16)|0\.(?:5(?:1\.44\.199|6\.23\.100)|245\.89\.69)|2\.(?:(?:26\.134\.11|48\.65\.5)4|6\.152\.211)|6\.153\.136\.125|9\.68\.209\.240|7\.198\.3\.238)|0(?:8\.(?:82\.114\.(?:5[13579]|4[4567]|23)|71\.172\.(?:8[4679]|9[1234])|113\.254\.39)|0\.(?:1(?:68\.191\.134|42\.133\.21)|7(?:2\.11\.132|9\.27\.60)|94\.77\.1)|2\.1(?:42\.203\.19|58\.39\.250)|3\.(?:255\.15\.146|155\.102\.2)|1\.(?:22\.7\.225|45\.114\.3))|2(?:0\.(?:130\.231\.172|94\.235\.200)|2\.(?:174\.155\.19|236\.16\.14))|4\.127\.201\.172)|6(?:6\.(?:199\.224\.(?:2[012345]|1[5679])|96\.213\.13[48]|84\.49\.9)|1\.(?:1(?:64\.42\.158|10\.156\.4)|219\.62\.36|98\.77\.169)|4\.(?:120\.1(?:70\.138|81\.94)|71\.130\.190)|(?:2\.13\.171\.4|5\.60\.15\.18)6|3\.141\.227\.24[35]|8\.115\.192\
.7)|8(?:(?:1\.(?:15\.172\.14|23\.106\.7)|0\.36\.130\.13)5|3\.(?:18\.234\.202|238\.208\.55|3\.103\.227)|7\.(?:106\.242\.230|236\.232\.231)|9\.207\.1(?:29\.(?:39|74)|30\.34)|4\.235\.57\.122|5\.214\.90\.114)|7(?:2\.(?:42\.224\.(?:2[124]|1[79])|35\.20\.131|55\.188\.73)|8\.1(?:00\.65\.226|36\.93\.251)|4\.9\.203\.186)|5(?:\.(?:39\.220\.2(?:[24]8|34)|159\.229\.244)|9\.1(?:5\.76\.97|0\.7\.16)|8\.211\.138\.27)|4(?:1\.(?:137\.24\.4|65\.74\.66)|6\.32\.23(?:4\.168|3\.22))|(?:37\.(?:206\.210\.13|122\.208\.9)|95\.48\.24\.1)0)\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:216\.(?:(?:102\.9|8\.15)8|45\.114)|90\.90\.(?:[25][01]|4\d)|168\.218\.86)|9\.(?:1(?:84\.214\.18|93\.93\.25)|201\.16\.211)|5\.(?:88\.247\.131|22\.80\.197|90\.96\.85)|0\.(?:165\.125\.152|45\.244\.54)|8\.(?:114\.77\.116|97\.196\.163)|6\.112\.66\.102|7\.20\.3\.231)|8(?:4\.82\.(?:1(?:5(?:9\.237|4\.51)|20\.235|09\.14)|29\.3[34])|8\.(?:127\.230\.28|64\.184\.136|252\.0\.237)|0\.2(?:25\.131\.176|11\.179\.30)|3\.10(?:1\.220\.202|6\.116\.109)|1\.65\.236\.250)|7(?:3\.(?:2(?:12\.250\.230|08\.16\.51)|44\.(?:144\.14[89]|244\.20)|192\.144\.105)|8\.(?:1(?:48\.210\.173|51\.86\.1)|20\.148\.11)|4\.36\.167\.116|7\.1\.223\.73)|9(?:5\.1(?:38\.195\.125|91\.184\.82)|0\.(?:203\.96\.98|82\.89\.156)|9\.(?:255\.11\.29|83\.93\.18)|3\.193\.68\.2|4\.106\.16\.6)|0(?:3\.9\.15(?:7\.181|8\.165|6\.89)|9\.(?:236\.87\.176|75\.166\.29)|8\.61\.55\.16[79])|2(?:1\.(?:134\.238\.129|22\.127\.17)|2\.49\.119\.188|0\.28\.8\.194)|5(?:1\.84\.131\.107|8\.255\.2\
.64)|33\.242\.115\.44|\.209\.163\.3)|2(?:1(?:1\.(?:1(?:4(?:0\.125\.197|7\.211\.16)|76\.61\.112)|2(?:06\.133\.94|22\.53\.83))|3\.(?:2(?:30\.128\.226|51\.186\.229)|1(?:71\.39\.154|32\.241\.7)|81\.164\.57)|8\.(?:1(?:5(?:3\.247\.68|8\.3\.1)|06\.182\.6)|2(?:34\.108\.13|49\.161\.34))|0\.(?:5(?:1\.44\.199|6\.23\.100)|13\.210\.82|245\.89\.69|93\.48\.211)|2\.(?:2(?:51\.120\.212|6\.134\.114)|6\.152\.211|48\.65\.54)|9\.(?:68\.209\.240|139\.38\.49)|6\.153\.136\.125|7\.198\.3\.238)|0(?:8\.(?:82\.114\.(?:5[13579]|4[457])|71\.172\.(?:9[1234]|8[479])|113\.254\.39)|0\.(?:(?:142\.133\.2|94\.77\.)1|7(?:2\.11\.132|9\.27\.60))|2\.(?:1(?:42\.203\.19|58\.39\.250)|71\.136\.200)|3\.(?:(?:93\.108\.14|155\.102\.)2|255\.15\.146)|1\.(?:22\.7\.225|45\.114\.3)|9\.190\.73\.155)|2(?:2\.(?:174\.155\.19|236\.16\.14)|0\.94\.235\.200)|4\.127\.201\.172)|6(?:6\.(?:199\.224\.(?:2[0134568]|1[57])|96\.213\.13[48]|84\.49\.9)|1\.(?:1(?:(?:05\.174|10\.156)\.4|64\.42\.158)|219\.62\.36)|4\.(?:120\.(?:170\.13|225\.15)8|71
\.130\.190)|(?:2\.13\.171\.4|5\.60\.15\.18)6|3\.141\.227\.24[35]|8\.115\.192\.7)|8(?:(?:1\.(?:15\.172\.14|23\.106\.7)|0\.(?:36\.130\.13|70\.2\.18))5|3\.(?:1(?:11\.92\.120|8\.234\.202)|238\.208\.55|3\.103\.227)|9\.207\.1(?:29\.(?:39|74)|30\.34)|2\.2(?:21\.102\.245|07\.51\.92)|7\.106\.242\.230|4\.235\.57\.122)|7(?:2\.(?:42\.224\.(?:1[79]|21)|35\.20\.131|55\.188\.73)|(?:8\.100\.65\.22|4\.9\.203\.18)6|9\.106\.9\.24)|5(?:\.(?:39\.220\.2(?:[24]8|34)|159\.229\.244)|8\.211\.138\.27|9\.10\.7\.16)|9(?:2\.(?:253\.123\.95|51\.109\.182)|5\.48\.24\.10)|4(?:1\.(?:137\.24\.4|65\.74\.66)|6\.32\.234\.168)|37\.(?:206\.210\.13|122\.208\.9)0)\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work