You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/11/05 08:57:28 UTC
svn commit: r1538897 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Tue Nov 5 07:57:28 2013
New Revision: 1538897
URL: http://svn.apache.org/r1538897
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1538897&r1=1538896&r2=1538897&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Tue Nov 5 07:57:28 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 20131142
+## khop-sc-neighbors.cf v 20131152
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -81,7 +81,7 @@ score KHOP_SC_CIDR16 0.4 0.1 0.4 0.1
# crap, still empty 20130629@465k net
# crap, still empty 20130705@376k net. lowering for low vol -> .4 .1 .4 .1
-header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b(?:2(?:22\.239|17\.8)|121\.88|89\.121)(?:\.[012]?\d{1,2}){2}\b)/
+header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b(?:2(?:22\.239|17\.8)|121\.88)(?:\.[012]?\d{1,2}){2}\b)/
describe KHOP_SC_TOP_CIDR16 Relay CIDR /16 leads SpamCop in worst /16s
tflags KHOP_SC_TOP_CIDR16 nopublish
score KHOP_SC_TOP_CIDR16 0.6 0.2 0.7 0.3
@@ -101,7 +101,7 @@ score KHOP_SC_TOP_CIDR16 0.6 0.2 0.7 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:0(?:3\.243\.50|9\.235\.54)|(?:12\.97\.2|21\.54\.5)4|84\.22\.172)|2(?:1(?:1\.119\.86|8\.92\.249|7\.8\.255)|02\.117\.120)|64\.79\.107|92\.66\.180)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:(?:(?:09\.235|21\.54)\.5|12\.97\.2)4|9(?:8\.24\.175|3\.26\.10)|73\.44\.169|84\.22\.172)|2(?:1(?:(?:6\.231\.14|0\.13\.8)0|1\.119\.86|8\.92\.249)|02\.117\.120))\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.6 0 0.6 0
@@ -122,7 +122,7 @@ score KHOP_SC_CIDR24 0.6 0 0.6 0
# 0.4428/0 1.000 20130705@376k resume scores -> .6 0 .6 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:9(?:8\.24\.174|3\.26\.10|9\.96\.83)|1(?:0\.52\.[02]|2\.97\.24)|78\.124\.11[01]|09\.169\.88|25\.60\.156|41\.0\.61)|4(?:6\.102\.186|9\.156\.191|1\.254\.5)|21(?:3\.132\.241|7\.13\.154)|5\.39\.217|64\.79\.99)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:(?:78\.124\.11|41\.0\.6)1|9(?:8\.24\.174|9\.96\.83)|1(?:2\.97\.24|0\.52\.0)|09\.169\.88|25\.60\.156)|21(?:7\.(?:13\.154|8\.255)|3\.132\.241)|4(?:6\.102\.186|9\.156\.191|1\.254\.5)|5\.39\.217|64\.79\.99)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0.5
@@ -142,7 +142,7 @@ score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:9(?:9\.(?:96\.83\.1(?:5[01245679]|3[023469]|4\d)|30\.13(?:6\.12[78]|7\.1[67]))|8\.24\.17(?:4\.16[37]|5\.[234]|3\.80)|0\.107\.140\.77|3\.26\.10\.112|5\.252\.108\.6)|1(?:2\.(?:184\.172\.244|216\.55\.162)|8\.(?:130\.107\.235|97\.196\.163)|9\.(?:201\.16\.211|37\.195\.59)|1\.223\.112\.99|5\.82\.246\.163|4\.247\.23\.66)|0(?:9\.(?:169\.88\.1(?:5[27]|48)|235\.54\.219)|3\.(?:243\.50\.6[49]|9\.157\.126)|8\.62\.240\.104|1\.44\.3\.50)|2(?:5\.(?:141\.142\.224|46\.24\.62)|2\.1(?:82\.28\.245|55\.7\.104)|1\.(?:22\.127|88\.54)\.17|4\.160\.35\.2)|8(?:4\.(?:22\.(?:1(?:72\.145|97\.216)|53\.201)|82\.179\.117)|0\.178\.56\.138|8\.252\.0\.237)|7(?:3\.2(?:12\.205\.158|00\.90\.196)|7\.20\.144\.7)|4(?:8\.223\.59\.187|1\.0\.61\.166|\.63\.74\.204))|2(?:1(?:1\.(?:1(?:19\.86\.14[47]|47\.211\.16)|23(?:3\.64\.110|0\.74\.17)|54\.17\.200)|3\.(?:1(?:(?:71\.39\.15|95\.77\.11)4|32\.241\.13)|207\.41\.34)|0\.(?:1(?:02\.30\.210|3\.80\.212)|217\.56\.2)|6\.(?:168\.137\.80
|231\.140\.15)|7\.(?:13\.154\.155|8\.255\.189)|2\.113\.32\.199|8\.92\.249\.162)|0(?:2\.(?:1(?:(?:30\.114\.13|29\.216\.6|72\.37\.21)0|1(?:7\.120\.8[29]|8\.236\.178)|42\.203\.19)|71\.136\.200|234\.40\.41|53\.13\.187)|0\.(?:7(?:2\.11\.132|9\.27\.60)|142\.133\.21)|3\.(?:171\.233\.243|234\.111\.248)|1\.116\.199\.34|8\.84\.135\.147)|2(?:1\.2(?:14\.2(?:08\.226|14\.187)|34\.24\.46)|2\.(?:239\.255\.70|99\.202\.239)|0\.122\.136\.155)|4\.237\.229\.37)|6(?:4\.79\.(?:99\.(?:1(?:6[01236789]|7[024])|2(?:3[789]|5[01]|4\d))|107\.13)|9\.198\.197\.156|5\.60\.15\.173|7\.90\.21\.150)|4(?:6\.102\.186\.(?:4[012345789]|3[1234679]|5[012378]|6[02]|29)|1\.(?:84\.135\.22|137\.24\.4)|9\.218\.4(?:2\.206|5\.181))|9(?:3\.1(?:8(?:4\.71\.66|8\.8\.67)|59\.160\.164)|2\.(?:66\.180\.209|45\.69\.60)|1\.191\.172\.154)|8(?:5\.1(?:85\.244\.101|7\.27\.110)|1\.30\.15(?:8\.141|6\.36)|3\.18\.234\.202|4\.95\.244\.11)|7(?:2\.(?:166\.187\.139|35\.20\.131)|7\.(?:106\.232\.178|81\.106\.6)|6\.164\.199\.71)|5(?:\.39\.217\.(?:20[023]|1
99)|9\.124\.115\.88)|37\.(?:228\.108\.152|123\.98\.115))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:9(?:9\.(?:96\.83\.1(?:4[02356789]|5[01245679]|3[023469])|30\.13(?:6\.12[78]|7\.1[67]))|8\.24\.1(?:7(?:4\.16[37]|5\.[234]|8\.131|3\.80)|80\.91)|0\.107\.140\.77|3\.26\.10\.112|5\.252\.108\.6)|1(?:2\.(?:2(?:16\.55\.162|20\.224\.59)|184\.172\.244)|8\.(?:130\.107\.235|97\.196\.163)|9\.(?:201\.16\.211|37\.195\.59)|5\.82\.2(?:46\.163|27\.28)|1\.223\.112\.99|4\.247\.23\.66)|8(?:4\.(?:22\.(?:1(?:7(?:2\.14[15]|7\.51)|97\.216)|53\.201)|82\.179\.117)|0\.178\.56\.138|2\.54\.192\.243|8\.252\.0\.237|9\.112\.88\.65)|2(?:5\.(?:141\.142\.224|65\.110\.143|46\.24\.62)|2\.1(?:82\.28\.245|55\.7\.104)|1\.(?:22\.127|88\.54)\.17|4\.160\.35\.2)|0(?:9\.(?:169\.88\.1(?:5[27]|48)|235\.54\.219)|3\.(?:243\.50\.(?:7[45]|69)|9\.157\.126)|8\.62\.240\.104|1\.44\.3\.50)|7(?:7\.(?:1\.223\.73|20\.144\.7)|3\.212\.205\.158)|4(?:8\.223\.59\.187|1\.0\.61\.166|\.63\.74\.204))|2(?:1(?:1\.(?:1(?:19\.86\.14[47]|72\.251\.168|47\.211\.16)|23(?:3\.64\.110|2\.92\.23)|54\.17\.200
)|3\.(?:1(?:(?:71\.39\.15|95\.77\.11)4|32\.241\.13)|207\.41\.34)|(?:0\.(?:13\.80\.21|217\.56\.)|8\.92\.249\.16)2|7\.(?:8\.255\.(?:189|220)|13\.154\.155)|2\.113\.32\.199|6\.231\.140\.15)|0(?:2\.(?:1(?:(?:30\.114\.13|29\.216\.6|72\.37\.21)0|1(?:7\.120\.8[29]|8\.236\.178)|42\.203\.19)|7(?:1\.136\.200|9\.52\.53)|234\.40\.41|53\.13\.187)|0\.(?:7(?:2\.11\.132|9\.27\.60)|142\.133\.21)|3\.(?:171\.233\.243|234\.111\.248)|1\.116\.199\.34|8\.84\.135\.147)|2(?:1\.2(?:14\.2(?:08\.226|14\.187)|34\.24\.46)|2\.(?:239\.255\.70|99\.202\.239)|0\.122\.136\.155)|4\.237\.229\.37)|6(?:4\.79\.(?:99\.(?:2(?:4[026789]|3[789]|5[01])|1(?:6[01236789]|7[024]))|107\.13)|9\.198\.197\.156|5\.60\.15\.173|7\.90\.21\.150)|4(?:6\.1(?:02\.186\.(?:4[012345789]|5[012378]|3[4679]|6[02])|51\.22\.240)|9\.218\.4(?:2\.206|5\.181)|1\.137\.24\.4)|7(?:7\.(?:81\.106\.(?:1[12]|6)|106\.232\.178)|2\.(?:166\.187\.139|35\.20\.131)|6\.164\.199\.71|4\.51\.36\.155)|8(?:5\.1(?:85\.244\.101|7\.27\.110)|1\.30\.15(?:8\.141|6\.36)|3\.18\.234\.
202|4\.95\.244\.11)|5(?:\.39\.217\.(?:20[023]|199)|9\.124\.115\.88)|93\.1(?:8(?:4\.71\.66|8\.8\.67)|59\.160\.164)|37\.123\.98\.115)\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work