You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/04/03 08:57:19 UTC
svn commit: r1463839 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Wed Apr 3 06:57:18 2013
New Revision: 1463839
URL: http://svn.apache.org/r1463839
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1463839&r1=1463838&r2=1463839&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Wed Apr 3 06:57:18 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 20130422
+## khop-sc-neighbors.cf v 20130432
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:\.158\.188|0\.84\.13)|12\.90\.197|78\.33\.170|95\.94\.11)|2(?:18\.194\.91|23\.4\.233)|61\.1(?:38\.104|75\.223)|89\.218\.224)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:15\.88\.247|2\.158\.188|78\.33\.170|03\.9\.156|44\.76\.31)|89\.218\.(?:224|68)|218\.194\.91|66\.199\.228|37\.59\.146|5\.39\.25)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.(?:128\.2|84\.13)|5\.60\.156)|(?:76\.53\.1|83\.221\.)12|03\.9\.156|12\.97\.24|44\.76\.31)|2(?:1(?:0\.(?:21\.225|51\.44)|7\.23\.2)|22\.174\.163)|8(?:0\.36\.130|9\.218\.68))\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.(?:128\.2|84\.13)|5\.60\.156)|83\.221\.12|12\.97\.24)|2(?:1(?:0\.(?:21\.225|51\.44)|2\.48\.65|7\.23\.2)|22\.174\.163)|61\.138\.104|78\.138\.106|80\.36\.130)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:21(?:6\.181\.110|7\.161\.58)|133\.201\.70)|4\.(?:1(?:13\.221\.66|41\.253\.14)|207\.113\.55)|9\.(?:1(?:80\.26\.110|93\.93\.25)|36\.138\.131)|6\.(?:112\.66\.102|255\.164\.18|90\.162\.116)|3\.(?:108\.201\.189|31\.42\.30)|5\.(?:88\.119\.132|22\.80\.197)|8\.2(?:44\.182\.94|6\.204\.182)|1\.68\.104\.133)|9(?:5\.(?:1(?:(?:28\.253\.15|91\.184\.8)2|3(?:8\.195\.125|\.200\.218))|9(?:4\.11\.1[79]|8\.81\.3))|0\.(?:202\.116\.101|82\.89\.156)|3\.2(?:00\.126\.14|55\.143\.62)|4\.213\.122\.34|9\.255\.11\.29)|2(?:1\.(?:1(?:81\.2(?:37\.251|51\.188)|2\.167\.95)|22\.(?:127\.17|34\.166)|66\.95\.156)|4\.(?:42\.124\.136|67\.69\.52)|\.158\.188\.(?:155|46)|0\.132\.132\.119|3\.30\.174\.61|5\.7\.221\.146)|7(?:8\.(?:3(?:2\.223\.8|3\.38\.17)8|207\.158\.230|49\.170\.57|91\.254\.66|151\.86\.1)|3\.2(?:00\.90\.19|45\.31\.13)6|6\.53\.112\.2(?:2[78]|3[12])|4\.137\.168\.212|7\.21\.1\.34)|8(?:0\.2(?:11\.1(?:91\.25|79\.3)0|25\.131\.176)|8\.(?:127\.230\
.28|252\.0\.237)|7\.(?:32\.52\.161|111\.3\.22)|5\.2(?:0\.52\.118|\.12\.77)|3\.221\.12\.233|9\.75\.63\.114)|0(?:9\.(?:195\.54\.231|236\.220\.98)|8\.178\.59\.34|1\.44\.3\.50)|4(?:4\.76\.31\.172|\.63\.74\.204))|2(?:1(?:7\.(?:2(?:1(?:9\.1(?:23\.59|32\.15)|8\.43\.130)|3\.(?:2\.1(?:3[37]|02|29|61)|8\.118))|12\.113\.67)|3\.(?:2(?:30\.128\.226|51\.186\.229|21\.9\.13)|1(?:71\.39\.154|86\.39\.43)|81\.164\.57|0\.89\.6)|0\.(?:1(?:17\.6\.152|3\.210\.84|68\.50\.16)|51\.44\.(?:199|48)|245\.89\.69|32\.34\.115)|9\.(?:2(?:23\.252\.150|19\.114\.74)|143\.3\.210)|2\.(?:(?:241\.16\.2|49\.70\.)48|144\.254\.122)|1\.1(?:11\.174\.98|47\.211\.16)|8\.1(?:94\.91\.238|6\.210\.10)|6\.153\.136\.125)|0(?:2\.(?:1(?:42\.203\.19|58\.39\.250)|29\.216\.236|71\.136\.200|44\.53\.64|91\.25\.41)|0\.(?:2(?:47\.100\.178|06\.14\.26)|7(?:2\.11\.132|9\.27\.60)|142\.133\.21)|1\.(?:1(?:95\.239\.27|8\.93\.170)|65\.114\.212|45\.114\.3)|3\.(?:155\.102\.2|249\.75\.17)|8\.115\.2(?:22\.116|44\.54))|2(?:2\.(?:1(?:74\.(?:54\.164|1
63\.2)|22\.79\.121)|255\.27\.140)|1\.(?:2(?:07\.220\.140|14\.208\.226)|143\.51\.201)|3\.4\.233\.16[245]|0\.225\.253\.12)|\.183\.155\.2)|6(?:1\.(?:1(?:3(?:3\.125\.162|8\.104\.30|6\.68\.76)|6(?:6\.55\.153|3\.37\.76)|75\.223\.1(?:34|42))|(?:55\.156\.21|80\.254\.22)0)|6\.(?:199\.227\.115|240\.232\.54|84\.50\.133)|0\.(?:173\.11\.121|2\.227\.123)|2\.146\.28\.212)|8(?:9\.218\.(?:68\.(?:146|74|90)|224\.(?:35|58)|94\.166)|(?:0\.36\.130\.13|1\.15\.172\.14)5|3\.(?:111\.92\.120|3\.103\.227)|5\.2(?:14\.157\.75|02\.5\.110)|7\.(?:103\.197\.9|98\.226\.3)3|8\.204\.187\.90|2\.207\.51\.92)|9(?:5\.(?:51\.156\.218|159\.105\.2|48\.24\.10)|1\.(?:144\.153\.211|221\.176\.163)|4\.23\.(?:100\.24|2\.185)|3\.159\.160\.164)|4(?:2\.121\.(?:1(?:1(?:7\.236|8\.123)|05\.138)|81\.212)|6\.(?:99\.253\.158|48\.191\.71)|1\.1(?:85\.21\.186|37\.24\.4))|7(?:4\.(?:1(?:22\.227\.124|17\.56\.229)|9\.203\.186)|5\.127\.15\.143|9\.125\.72\.141)|5(?:9\.(?:11\.237\.151|34\.57\.88|60\.7\.146)|\.39\.49\.149)|3(?:1\.210\.47\.230
|7\.59\.62\.186))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:21(?:6\.181\.110|7\.161\.58)|1(?:33\.201\.70|64\.62\.8))|9\.(?:1(?:9(?:2\.252\.1|3\.93\.25)|80\.26\.110)|36\.138\.131)|4\.(?:1(?:13\.221\.66|41\.253\.14)|207\.113\.55)|8\.(?:2(?:44\.182\.94|6\.204\.182)|129\.166\.86)|6\.(?:112\.66\.102|255\.164\.18|90\.162\.116)|5\.(?:88\.(?:119\.132|247\.131)|22\.80\.197)|3\.(?:108\.201\.189|31\.42\.30)|1\.68\.104\.133)|8(?:0\.2(?:11\.1(?:91\.25|79\.3)0|25\.131\.176)|7\.(?:28\.204\.57|32\.52\.161|111\.3\.22)|8\.(?:127\.230\.28|252\.0\.237)|5\.2(?:0\.52\.118|\.12\.77)|3\.221\.12\.233|9\.75\.63\.114)|2(?:1\.(?:1(?:81\.237\.251|2\.167\.95)|22\.(?:127\.17|34\.166)|66\.95\.156)|4\.(?:42\.124\.136|67\.69\.52)|\.158\.188\.(?:155|46)|0\.132\.132\.119|3\.30\.174\.61|5\.7\.221\.146)|7(?:8\.(?:2(?:07\.158\.230|13\.33\.95)|3(?:2\.223\.8|3\.38\.17)8|49\.170\.57|151\.86\.1)|(?:4\.137\.168\.21|6\.53\.112\.23)2|3\.2(?:00\.90\.19|45\.31\.13)6|7\.21\.1\.34)|9(?:5\.(?:1(?:(?:28\.253\.15|91\.184\.
8)2|3(?:8\.195\.125|\.200\.218))|94\.11\.1[89])|3\.2(?:55\.143\.6[23]|00\.126\.14)|0\.(?:202\.116\.101|82\.89\.156)|9\.255\.11\.29)|0(?:9\.(?:195\.54\.231|236\.220\.98)|6\.186\.18\.17|8\.178\.59\.34|1\.44\.3\.50)|4(?:4\.76\.31\.172|\.63\.74\.204))|2(?:1(?:0\.(?:1(?:1(?:8\.26\.227|7\.6\.152)|3\.210\.84|68\.50\.16)|(?:245\.89\.6|51\.44\.19)9|32\.34\.115)|3\.(?:2(?:30\.128\.226|51\.186\.229|21\.9\.13)|1(?:71\.39\.154|86\.39\.43)|81\.164\.57|0\.89\.6)|7\.(?:2(?:1(?:9\.1(?:23\.59|32\.15)|8\.43\.130)|3\.(?:2\.1(?:29|33|61)|8\.118))|12\.113\.67)|2\.(?:4(?:8\.65\.34|9\.70\.48)|144\.254\.122|241\.16\.248)|9\.(?:2(?:23\.252\.150|19\.114\.74)|143\.3\.210)|8\.(?:1(?:94\.91\.238|6\.210\.10)|50\.1\.146)|1\.1(?:11\.174\.98|47\.211\.16)|6\.153\.136\.125)|0(?:2\.(?:1(?:42\.203\.19|58\.39\.250)|29\.216\.236|71\.136\.200|44\.53\.64|91\.25\.41)|0\.(?:7(?:2\.11\.132|9\.27\.60)|247\.100\.178|142\.133\.21)|1\.(?:195\.239\.27|65\.114\.212|45\.114\.3)|8\.115\.2(?:22\.116|44\.54)|3\.155\.102\.2)|2(?:
1\.(?:2(?:07\.220\.140|14\.208\.226)|1(?:43\.51\.201|76\.65\.10))|2\.(?:1(?:74\.(?:54\.164|163\.2)|22\.79\.121)|255\.27\.140)|3\.4\.233\.16[245])|\.183\.155\.2)|6(?:1\.(?:1(?:3(?:3\.125\.162|8\.104\.30|6\.68\.76)|6(?:6\.55\.153|3\.37\.76)|75\.223\.1(?:34|42))|(?:55\.156\.21|80\.254\.22)0)|6\.(?:199\.22(?:8\.(?:197|201)|7\.115)|240\.232\.54|84\.50\.133)|0\.(?:173\.11\.121|2\.227\.123))|8(?:9\.218\.(?:68\.(?:146|74|90)|224\.(?:35|58)|94\.166)|(?:0\.36\.130\.13|1\.15\.172\.14)5|3\.(?:111\.92\.120|3\.103\.227)|5\.2(?:14\.157\.75|02\.5\.110)|8\.204\.187\.90|2\.207\.51\.92)|4(?:2\.121\.(?:1(?:1(?:7\.236|8\.123)|05\.138)|81\.212)|6\.(?:99\.253\.158|48\.191\.71)|1\.1(?:85\.21\.186|37\.24\.4))|9(?:1\.(?:1(?:44\.153\.211|21\.184\.12)|221\.176\.163)|5\.(?:51\.156\.218|48\.24\.10)|3\.159\.160\.164|4\.23\.2\.185)|7(?:4\.(?:122\.227\.124|9\.203\.186)|5\.127\.15\.143|8\.138\.106\.39|9\.125\.72\.141|2\.42\.224\.8)|3(?:7\.59\.(?:146\.21|231\.22|36\.217|62\.186)|1\.210\.47\.230)|5(?:9\.(?:11\
.237\.151|34\.57\.88|60\.7\.146)|\.39\.49\.149))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work