You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/05/18 08:57:15 UTC
svn commit: r1484066 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Sat May 18 06:57:15 2013
New Revision: 1484066
URL: http://svn.apache.org/r1484066
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1484066&r1=1484065&r2=1484066&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Sat May 18 06:57:15 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201305172
+## khop-sc-neighbors.cf v 201305182
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -74,7 +74,7 @@ score KHOP_SC_CIDR16 1.0 0.2 1.0 0.2
# crap, still empty 20100410 bad scrape, script failed to populate rule
# crap, still empty 20110227 this is due to safety net exclusions -> 1 .2 1 .2
-header KHOP_SC_TOP_CIDR16 Received =~ /___ FAILED TO POPULATE ___/
+header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b178\.127(?:\.[012]?\d{1,2}){2}\b)/
describe KHOP_SC_TOP_CIDR16 Relay CIDR /16 leads SpamCop in worst /16s
tflags KHOP_SC_TOP_CIDR16 nopublish
score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0.4
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.84\.13|1\.54\.54)|73\.192\.144|99\.180\.113|12\.90\.197|84\.22\.108|03\.30\.72)|58\.2(?:5(?:3\.216|4\.168)|49\.63)|6(?:4\.120\.170|1\.28\.114))\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.84\.13|1\.54\.54)|99\.180\.113|84\.82\.109|03\.30\.72)|2(?:0(?:2\.107\.224|0\.31\.105|3\.210\.83)|17\.12\.248)|61\.(?:133\.125|77\.210)|42\.121\.127)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:7(?:8\.172\.1(?:5[234]|8[36])|3\.45\.114)|1(?:2\.9(?:0\.90|7\.33)|9\.39\.19[2457])|84\.82\.(?:1(?:09|54)|29)|20\.(?:128\.2|84\.13)|03\.9\.158)|2(?:08\.82\.114|10\.21\.225)|80\.36\.130|65\.60\.15)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:7(?:8\.1(?:72\.1(?:5[24]|8[36])|51\.68)|3\.45\.114)|20\.(?:128\.2|84\.13)|12\.9(?:0\.90|7\.33)|84\.82\.154|03\.9\.158)|2(?:08\.82\.114|10\.21\.225|\.139\.178)|61\.175\.223|80\.36\.130)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:1(?:86\.46\.107|64\.62\.8)|90\.90\.1[6789]|216\.45\.114)|8\.(?:1(?:14\.77\.11|29\.166\.8)6|97\.196\.163)|4\.(?:141\.253\.134|207\.113\.55)|3\.(?:98\.254\.177|0\.85\.249)|7\.2(?:39\.144\.70|0\.3\.231)|5\.88\.(?:119\.132|247\.131)|0\.165\.125\.152|6\.207\.47\.244|9\.201\.16\.211)|9(?:5\.(?:1(?:(?:28\.253\.15|91\.184\.8)2|38\.195\.125)|29\.81\.30)|9\.(?:180\.113\.(?:1(?:0[016]|22)|98)|255\.11\.29)|0\.69\.155\.100|8\.23\.141\.115|2\.162\.24\.71)|8(?:4\.(?:82\.(?:1(?:09\.14|54\.51)|29\.3[34])|22\.108\.1(?:64|80))|8\.(?:1(?:27\.230\.28|68\.46\.53)|252\.0\.237)|3\.(?:106\.116\.109|98\.94\.67)|0\.225\.131\.176)|7(?:3\.(?:2(?:12\.250\.230|00\.90\.196)|45\.114\.(?:6[6789]|8[245])|1(?:92\.144\.105|3\.9\.9))|4\.36\.167\.116|7\.34\.246\.254)|0(?:3\.9\.15(?:6\.(?:67|89)|7\.181|8\.104)|8\.(?:174\.202\.7[45]|61\.43\.7[125])|9\.75\.166\.(?:3[013]|27)|1\.101\.155\.[89])|21\.134\.238\.129|53\.127\.232\.158|33\.242\.115\.44|\.209\.
163\.3)|2(?:1(?:0\.(?:2(?:1\.225\.2(?:3[12456789]|4[1589]|2[79]|5[02])|45\.89\.69)|5(?:1\.44\.199|6\.23\.100)|91\.133\.143|117\.6\.135)|3\.(?:2(?:30\.128\.226|51\.186\.229)|1(?:71\.39\.154|86\.39\.43)|81\.164\.57)|1\.(?:1(?:47\.211\.16|15\.68\.32)|222\.53\.83)|7\.1(?:7\.35\.146|98\.3\.238)|6\.153\.136\.125|8\.153\.247\.68|2\.6\.152\.211)|0(?:8\.(?:82\.114\.(?:5[2345789]|6[02]|36)|113\.254\.39)|2\.(?:1(?:42\.203\.19|58\.39\.250)|44\.53\.64)|0\.(?:7(?:2\.11\.132|9\.27\.60)|142\.133\.21)|1\.(?:156\.231\.37|22\.7\.225|45\.114\.3)|9\.223\.3(?:5\.16[356]|6\.22[689])|3\.155\.102\.2)|2(?:2\.(?:117\.219\.97|236\.16\.14)|1\.214\.208\.226|0\.94\.235\.200))|6(?:6\.(?:55\.(?:1(?:4(?:3\.11[68]|0\.182)|53\.61)|29\.6)|(?:35\.84\.19|63\.178\.3)7|96\.213\.138|84\.49\.9)|1\.(?:1(?:6(?:4\.42\.158|6\.55\.153)|9\.97\.69)|28\.114\.3[3456]|38\.186\.117)|4\.(?:120\.1(?:70\.138|81\.94)|203\.238\.6[47])|5\.60\.15\.1(?:73|86)|8\.115\.192\.7)|5(?:\.(?:39\.(?:220\.22[79]|86\.90)|159\.229\.2(?:49|53)|255\
.67\.8)|8\.(?:254\.168\.(?:5[6789]|6[0123])|151\.149\.118)|9\.1(?:25\.182\.182|5\.76\.97))|7(?:7\.106\.232\.178|5\.127\.110\.39|6\.74\.186\.237|2\.35\.20\.131|4\.9\.203\.186|0\.184\.4\.15)|8(?:(?:0\.36\.130\.13|1\.15\.172\.14|3\.238\.208\.5)5|7\.236\.232\.231)|4(?:6\.(?:180\.223\.73|244\.10\.172)|1\.137\.24\.4)|9(?:3\.157\.148\.102|5\.48\.24\.10)|37\.206\.210\.130)\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:21(?:7\.235\.138|6\.45\.114)|18(?:5\.80\.100|6\.46\.107)|90\.90\.1[6789])|7\.(?:2(?:11\.91\.147|0\.3\.231)|102\.116\.253)|3\.(?:98\.254\.177|107\.43\.75|0\.85\.249)|4\.(?:141\.253\.13?4|207\.113\.55)|0\.(?:165\.125\.152|93\.215\.186)|9\.(?:161\.161\.188|201\.16\.211)|1\.(?:67\.103\.180|93\.108\.194)|8\.(?:114\.77\.116|97\.196\.163)|5\.88\.119\.132)|8(?:4\.(?:82\.(?:2(?:9\.3[34]|32\.167)|1(?:09\.14|54\.51))|22\.108\.1(?:64|80))|8\.(?:1(?:27\.230\.28|68\.46\.53)|252\.0\.237)|9\.(?:58\.251\.23|75\.63\.11)4|0\.225\.131\.176)|9(?:5\.(?:1(?:(?:28\.253\.15|91\.184\.8)2|38\.195\.125)|29\.81\.30)|9\.(?:180\.113\.(?:1(?:0[017]|22)|98)|255\.11\.29)|0\.(?:69\.155\.100|85\.132\.83)|8\.23\.141\.115)|7(?:3\.(?:2(?:12\.250\.230|00\.90\.196)|45\.114\.(?:6[56789]|8[2456])|1(?:92\.144\.105|3\.9\.9))|4\.36\.167\.116|8\.151\.68\.210)|0(?:3\.9\.15(?:6\.(?:67|89)|7\.181|8\.104)|8\.(?:61\.43\.7[15]|174\.202\.75)|1\.101\.155\.8)|21\.134
\.238\.129|33\.242\.115\.44)|2(?:1(?:0\.(?:2(?:1\.225\.2(?:4[189]|3[19]|27)|45\.89\.69)|5(?:1\.44\.199|6\.23\.100)|91\.133\.143|117\.6\.135)|3\.(?:2(?:30\.128\.226|51\.186\.229)|1(?:71\.39\.154|86\.39\.43)|81\.164\.57)|1\.(?:1(?:(?:76\.61\.11|15\.68\.3)2|47\.211\.16)|222\.53\.83)|8\.(?:153\.247\.68|56\.37\.250|2\.129\.53)|6\.(?:153\.136\.125|240\.191\.11)|7\.1(?:2\.248|98\.3)\.238|9\.223\.252\.150|2\.6\.152\.211)|0(?:0\.(?:7(?:2\.11\.132|9\.27\.60)|142\.133\.21|31\.105\.172|206\.14\.26)|2\.(?:1(?:(?:07\.224\.2|58\.39\.25)0|42\.203\.19)|44\.53\.64)|8\.(?:82\.114\.(?:5[24789]|[46][02]|36)|113\.254\.39)|1\.(?:2(?:2\.7\.225|4\.129\.2)|45\.114\.3)|9\.223\.3(?:5\.16[35]|6\.22[89])|3\.(?:155\.102\.2|210\.83\.23))|2(?:2\.(?:2(?:11\.91\.20|36\.16\.14)|117\.219\.97)|0\.(?:225\.253\.12|94\.235\.200)|1\.214\.208\.226|3\.4\.233\.162)|\.139\.178\.81)|6(?:1\.(?:1(?:(?:33\.125\.16|75\.223\.14)2|6(?:4\.42\.158|6\.55\.153)|91\.27\.118|05\.174\.4)|28\.114\.3[3456]|77\.210\.75)|6\.(?:55\.1(?:4(
?:3\.11[68]|0\.182)|53\.61)|96\.213\.138|84\.49\.9)|4\.120\.1(?:70\.138|81\.94)|5\.60\.15\.1(?:73|86)|0\.8\.63\.52)|5(?:\.(?:39\.(?:220\.22[579]|86\.90)|159\.229\.2(?:49|53)|255\.67\.8)|9\.(?:1(?:25\.182\.182|5\.76\.97)|34\.57\.88)|8\.254\.168\.(?:5[6789]|6[0123]))|8(?:(?:0\.36\.130\.13|1\.15\.172\.14|3\.238\.208\.5)5|7\.236\.232\.231|2\.99\.246\.10)|7(?:7\.106\.232\.178|5\.127\.110\.39|6\.74\.186\.237|2\.35\.20\.131|4\.9\.203\.186)|4(?:2\.121\.127\.201|6\.180\.223\.73|1\.137\.24\.4)|9(?:5\.(?:159\.105\.2|48\.24\.10)|6\.9\.138\.233)|37\.206\.210\.130)\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work