You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/04/06 08:57:20 UTC
svn commit: r1465204 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Sat Apr 6 06:57:19 2013
New Revision: 1465204
URL: http://svn.apache.org/r1465204
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1465204&r1=1465203&r2=1465204&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Sat Apr 6 06:57:19 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 20130452
+## khop-sc-neighbors.cf v 20130462
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:7(?:5\.45\.168|8\.33\.170)|03\.9\.15[67]|21\.54\.54)|2(?:1(?:8\.194\.91|0\.51\.44)|22\.174\.163|06\.71\.51)|46\.105\.131|61\.138\.104|5\.39\.216)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:0(?:3\.(?:9\.15[67]|20\.75)|6\.241\.3)|2(?:0\.128\.2|1\.54\.54)|75\.45\.168)|2(?:1(?:0\.51\.44|2\.48\.65)|22\.174\.163|06\.71\.51)|78\.138\.101|5\.39\.216)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.(?:128\.2|84\.13)|5\.60\.156)|83\.221\.12|12\.97\.24)|21(?:(?:0\.21\.22|2\.48\.6)5|7\.23\.2)|7(?:8\.138\.106|2\.42\.224)|(?:80\.36\.13|5\.39\.22)0|66\.199\.228)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:5\.60\.156|0\.84\.13)|83\.221\.1[23]|03\.20\.75|12\.97\.24)|21(?:7\.2(?:00\.184|3\.2)|0\.21\.225)|7(?:8\.138\.106|2\.42\.224)|(?:80\.36\.13|5\.39\.22)0|66\.199\.228)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:5\.(?:88\.(?:119\.132|247\.131)|22\.80\.197|78\.226\.96|90\.96\.85)|2\.(?:21(?:6\.181\.110|7\.161\.58)|164\.62\.8)|6\.(?:112\.66\.102|255\.164\.18|90\.162\.116)|9\.(?:19(?:2\.252\.1|3\.93\.25)|36\.138\.131)|8\.(?:129\.166\.86|26\.204\.182)|4\.1(?:13\.221\.66|41\.253\.14)|1\.68\.104\.133|3\.31\.42\.30)|9(?:5\.(?:1(?:(?:28\.253\.15|91\.184\.8)2|3(?:8\.195\.125|\.200\.218))|94\.11\.18)|3\.2(?:55\.143\.6[23]|00\.126\.14)|0\.(?:202\.116\.101|82\.89\.156)|9\.(?:46\.117\.226|255\.11\.29)|6\.46\.2\.228)|7(?:8\.(?:2(?:07\.158\.230|13\.33\.95)|3(?:2\.223\.8|3\.38\.17)8|49\.170\.57|151\.86\.1)|(?:3\.2(?:00\.90\.19|45\.31\.13)|6\.53\.233\.7)6|4\.137\.168\.212|7\.21\.1\.34)|8(?:8\.(?:127\.230\.28|252\.0\.237)|7\.(?:28\.204\.57|32\.52\.161)|0\.211\.1(?:91\.25|79\.3)0|3\.221\.12\.233|6\.202\.120\.49|9\.75\.63\.114)|2(?:1\.(?:22\.(?:127\.17|34\.166)|12\.167\.95|66\.95\.156)|\.158\.188\.(?:155|46)|0\.132\.132\.119|3\.30\.174\.61)|0(?:
9\.(?:195\.54\.231|236\.220\.98)|3\.9\.157\.181|6\.186\.18\.17|1\.44\.3\.50)|4(?:\.(?:139\.191\.193|63\.74\.204)|4\.76\.31\.172|9\.255\.3\.158)|30\.193\.121\.162|\.226\.83\.81)|2(?:1(?:3\.(?:2(?:30\.128\.226|51\.186\.229|21\.9\.13)|1(?:71\.39\.154|86\.39\.43)|81\.164\.57|0\.89\.6)|0\.(?:1(?:18\.26\.227|3\.210\.84|68\.50\.16)|(?:245\.89\.6|51\.44\.19)9|91\.133\.143)|7\.(?:2(?:19\.1(?:23\.59|32\.15)|3\.2\.1(?:29|33|61)|00\.184\.87)|12\.113\.67)|8\.(?:1(?:(?:53\.247\.6|94\.91\.23)8|45\.71\.192)|5(?:0\.1\.146|6\.32\.11))|1\.(?:1(?:15\.127\.32|47\.211\.16)|58\.255\.121|222\.53\.83)|9\.(?:223\.252\.15|143\.3\.21)0|2\.4(?:8\.65\.34|9\.70\.48)|6\.153\.136\.125)|0(?:0\.(?:7(?:2\.11\.132|9\.27\.60)|247\.100\.178|142\.133\.21)|2\.(?:1(?:42\.203\.19|58\.39\.250)|71\.136\.200)|1\.(?:195\.239\.27|22\.7\.225|45\.114\.3)|8\.115\.2(?:22\.116|44\.54)|3\.155\.102\.2|4\.13\.169\.37|6\.71\.51\.153)|2(?:1\.(?:2(?:07\.220\.140|14\.208\.226)|1(?:43\.51\.201|76\.65\.10))|2\.(?:255\.27\.140|174\.163\
.2))|\.183\.155\.2)|6(?:1\.(?:1(?:3(?:3\.125\.162|8\.104\.30|6\.68\.76)|75\.223\.142|66\.55\.153)|(?:55\.156\.21|80\.254\.22)0)|6\.(?:199\.22(?:8\.(?:19[678]|20[012])|7\.11[57])|240\.232\.54|84\.50\.133)|0\.173\.11\.121)|9(?:1\.(?:1(?:44\.153\.211|21\.184\.12)|221\.176\.163)|4\.(?:23\.(?:100\.24|2\.185)|83\.91\.53)|5\.(?:51\.156\.218|48\.24\.10)|3\.159\.160\.164)|8(?:9\.218\.(?:224\.(?:35|58)|94\.166|68\.90)|(?:0\.36\.130\.13|1\.15\.172\.14)5|2\.207\.51\.92|3\.3\.103\.227|5\.202\.5\.110|7\.98\.226\.33)|7(?:8\.138\.10(?:6\.(?:3[0289]|5[25]|44)|1\.7)|4\.(?:122\.227\.124|9\.203\.186)|2\.42\.224\.(?:[58]|1[02])|5\.127\.15\.143|9\.125\.72\.141)|5(?:\.39\.(?:2(?:20\.2(?:26|32)|16\.50)|49\.149)|9\.(?:11\.237\.151|34\.57\.88|60\.7\.146))|4(?:6\.(?:99\.253\.158|137\.18\.7)|2\.121\.1(?:05\.138|17\.236)|1\.137\.24\.4)|3(?:7\.59\.(?:146\.2[125]|231\.22|36\.217|62\.186)|1\.210\.47\.230))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:6\.(?:112\.66\.102|255\.164\.18|90\.162\.116)|9\.(?:19(?:2\.252\.1|3\.93\.25)|36\.138\.131)|2\.(?:216\.181\.110|164\.62\.8)|4\.1(?:13\.221\.66|41\.253\.14)|5\.(?:88\.247\.131|90\.96\.85)|1\.68\.104\.133|8\.129\.166\.86|3\.31\.42\.30)|9(?:5\.(?:1(?:(?:28\.253\.15|91\.184\.8)2|3(?:8\.195\.125|\.200\.218))|94\.11\.18)|3\.2(?:55\.143\.6[23]|00\.126\.14)|0\.(?:202\.116\.101|82\.89\.156)|9\.(?:46\.117\.226|255\.11\.29)|6\.46\.2\.228)|7(?:8\.(?:2(?:07\.158\.230|13\.33\.95)|3(?:2\.223\.8|3\.38\.17)8|49\.170\.57)|(?:3\.200\.90\.19|6\.53\.233\.7)6|4\.137\.168\.212|5\.117\.144\.15|7\.21\.1\.34)|8(?:8\.(?:127\.230\.28|252\.0\.237)|7\.(?:28\.204\.57|32\.52\.161)|0\.211\.1(?:91\.25|79\.3)0|3\.221\.12\.233|6\.202\.120\.49|5\.2\.12\.77)|2(?:1\.(?:1(?:58\.198\.76|2\.167\.95)|22\.127\.17|66\.95\.156|49\.107\.2)|\.158\.188\.(?:155|46)|0\.132\.132\.119)|0(?:9\.(?:195\.54\.231|236\.220\.98)|3\.9\.157\.181|6\.241\.3\.217|1\.44\.3\.50)|4(?:
4\.76\.31\.172|\.63\.74\.204)|30\.193\.121\.162|\.226\.83\.81)|2(?:1(?:1\.(?:1(?:15\.127\.32|47\.211\.16|74\.179\.80|96\.186\.53)|2(?:0(?:6\.133\.94|2\.3\.156)|22\.53\.83)|58\.255\.121|43\.149\.60)|7\.(?:2(?:3\.2\.1(?:2[59]|3[23]|5[35]|61)|19\.1(?:23\.59|32\.15)|00\.184\.87)|12\.113\.67)|3\.(?:2(?:30\.128\.226|51\.186\.229)|1(?:71\.39\.154|86\.39\.43)|81\.164\.57|0\.89\.6)|0\.(?:1(?:18\.26\.227|3\.210\.84|68\.50\.16)|(?:245\.89\.6|51\.44\.19)9|91\.133\.143)|8\.(?:1(?:(?:53\.247\.6|94\.91\.23)8|45\.71\.192)|5(?:0\.1\.146|6\.32\.11))|9\.(?:223\.252\.15|143\.3\.21)0|2\.4(?:8\.65\.34|9\.70\.48)|6\.153\.136\.125)|0(?:0\.(?:7(?:2\.11\.132|9\.27\.60)|247\.100\.178|142\.133\.21)|2\.(?:1(?:42\.203\.19|58\.39\.250)|71\.136\.200)|1\.(?:195\.239\.27|22\.7\.225|45\.114\.3)|3\.(?:236\.93\.14|155\.102\.)2|8\.115\.2(?:22\.116|44\.54)|4\.13\.169\.37|6\.71\.51\.153)|2(?:1\.2(?:07\.220\.140|14\.208\.226)|2\.(?:255\.27\.140|174\.163\.2))|\.183\.155\.2)|6(?:1\.(?:1(?:3(?:3\.125\.162|8\.104\.30|6
\.68\.76)|75\.223\.142|66\.55\.153)|(?:55\.156\.21|80\.254\.22)0)|6\.(?:199\.22(?:8\.(?:20[01246]|19[678])|7\.11[57])|240\.232\.54|84\.50\.133)|0\.173\.11\.121)|9(?:1\.(?:1(?:44\.153\.211|21\.184\.12)|221\.176\.163)|5\.(?:51\.156\.218|48\.24\.10)|4\.(?:23\.2\.185|83\.91\.53)|3\.159\.160\.164)|8(?:9\.218\.(?:224\.(?:35|58)|94\.166|68\.90)|(?:0\.36\.130\.13|1\.15\.172\.14)5|2\.207\.51\.92|3\.3\.103\.227|5\.202\.5\.110)|7(?:8\.138\.10(?:6\.(?:3[0289]|5[25]|44)|1\.7)|4\.(?:122\.227\.124|9\.203\.186)|2\.42\.224\.(?:[58]|1[012])|9\.125\.72\.141)|4(?:6\.(?:99\.253\.158|137\.18\.7)|2\.121\.1(?:05\.138|17\.236)|9\.128\.40\.70|1\.137\.24\.4)|3(?:7\.(?:59\.(?:146\.2[125]|231\.22|36\.217|62\.186)|122\.208\.18)|1\.210\.47\.230)|5(?:9\.(?:11\.237\.151|34\.57\.88|60\.7\.146)|\.39\.2(?:20\.2(?:26|32)|16\.50)))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work