You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/06/22 08:57:14 UTC
svn commit: r1495673 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Sat Jun 22 06:57:14 2013
New Revision: 1495673
URL: http://svn.apache.org/r1495673
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1495673&r1=1495672&r2=1495673&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Sat Jun 22 06:57:14 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201306212
+## khop-sc-neighbors.cf v 201306222
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:7(?:3\.192\.14[17]|4\.36\.164)|0(?:1\.101\.152|3\.9\.158)|92\.119\.66)|20(?:9\.(?:144\.27|223\.35)|8\.82\.114)|78\.138\.101)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:7(?:3\.(?:192\.14[17]|232\.45)|4\.36\.164)|88\.64\.184|03\.9\.158)|209\.144\.27|78\.138\.101|5\.39\.220|65\.60\.15)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:84\.82\.(?:120|29)|10\.52\.[02]|25\.60\.156|74\.37\.167)|2(?:1(?:3\.230\.128|2\.48\.64)|08\.71\.172)|6(?:6\.199\.224|5\.60\.15)|37\.122\.209|50\.97\.3)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:3\.56\.2(?:4[89]|5[01])|0\.52\.[02])|84\.82\.(?:120|29)|25\.60\.156|74\.37\.167)|2(?:1(?:3\.230\.128|2\.48\.64)|08\.71\.172)|37\.122\.20[89]|66\.199\.224|50\.97\.3)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:1(?:6(?:1\.232\.157|7\.170\.33|8\.218\.86|4\.62\.8)|04\.189\.110)|21(?:6\.(?:1(?:81\.110|02\.98)|8\.158)|7\.235\.138))|8\.(?:1(?:(?:14\.77\.11|29\.166\.8)6|68\.170\.103|71\.95\.234)|97\.196\.163)|9\.(?:19(?:4\.153\.187|7\.181\.120|2\.252\.1|3\.93\.25)|201\.16\.211)|0\.(?:45\.(?:1(?:36\.181|40\.89)|244\.(?:40|54))|189\.168\.171)|5\.(?:88\.(?:119\.132|247\.131)|22\.80\.197|90\.96\.85)|4\.(?:47\.157\.97|27\.94\.29)|3\.0\.85\.249)|8(?:8\.(?:1(?:27\.230\.28|68\.46\.53)|252\.0\.237)|0\.2(?:11\.1(?:62\.254|79\.30)|25\.131\.176)|4\.82\.(?:120\.2(?:10|35)|29\.3[34])|3\.(?:106\.116\.109|81\.152\.228)|7\.120\.127\.27|6\.237\.41\.56|9\.39\.35\.168)|7(?:4\.3(?:7\.1(?:67\.1(?:03|11|22)|48\.77)|6\.16(?:0\.157|4\.184|7\.116))|8\.(?:20(?:7\.158\.230|\.148\.11)|163\.105\.52)|3\.192\.14(?:4\.105|7\.114|1\.99)|7\.1\.223\.73)|9(?:5\.(?:1(?:38\.195\.125|91\.184\.82)|29\.81\.30)|9\.(?:30\.137\.13[89]|255\.11\.29)|8\.50\.164\.219|4\.10
6\.16\.6)|2(?:1\.(?:1(?:34\.238\.129|81\.251\.188|57\.3\.252)|22\.127\.17)|(?:3\.201\.60\.8|0\.50\.86\.)3|2\.165\.225\.177)|3(?:3\.242\.115\.39|8\.91\.88\.93)|\.(?:226\.84\.175|168\.12\.23)|03\.9\.15(?:7\.181|8\.147)|49\.255\.3\.158)|2(?:1(?:1\.(?:1(?:7(?:2\.242\.74|6\.61\.112)|47\.211\.16)|238\.133\.138|33\.121\.231)|3\.(?:2(?:11\.148\.159|30\.128\.226)|1(?:71\.39\.154|32\.241\.7))|8\.(?:1(?:45\.135\.137|53\.247\.68|64\.18\.225)|234\.108\.13)|7\.(?:1(?:49\.52\.12|98\.3\.238)|2(?:00\.184\.87|3\.6\.196))|0\.(?:2(?:10\.123\.47|45\.89\.69)|51\.44\.199)|2\.(?:48\.64\.14|6\.152\.21)1|9\.145\.110\.118)|0(?:8\.(?:71\.172\.(?:8[456789]|9[0124])|82\.114\.(?:4[49]|51)|113\.254\.39)|0\.(?:14(?:8\.125\.247|2\.133\.21)|7(?:2\.11\.132|9\.27\.60)|94\.77\.1)|2\.(?:1(?:58\.(?:39\.250|52\.84)|42\.203\.19)|71\.136\.200)|9\.(?:2(?:23\.35\.20[23456]|39\.114\.172)|144\.27\.22[689])|1\.(?:22\.7\.225|45\.114\.3)|3\.155\.102\.2)|2(?:2\.(?:161\.201\.132|99\.202\.239|236\.16\.14)|1\.214\.208\.226|0\.9
4\.235\.200))|6(?:1\.(?:2(?:52\.138\.195|24\.150\.43|31\.19\.112)|(?:164\.42\.1|70\.83\.)58|98\.(?:131\.141|77\.169)|38\.186\.117|42\.104\.99|57\.65\.125)|6\.(?:199\.224\.(?:1[245679]|2[01])|84\.49\.9)|5\.60\.15\.18[46]|9\.61\.206\.162|8\.115\.192\.7)|5(?:9\.1(?:(?:20\.213\.3|5\.76\.9)7|0(?:8\.47\.58|\.7\.16))|8\.(?:232\.221\.43|62\.113\.251)|\.200\.9\.231|0\.97\.3\.89)|8(?:7\.(?:236\.232\.231|97\.215\.67)|3\.(?:18\.234\.202|3\.103\.227)|1\.(?:15\.172\.14|23\.106\.7)5|4\.22\.61\.190)|9(?:3\.1(?:57\.148\.102|88\.8\.67)|5\.(?:48\.24\.10|86\.4\.79)|4\.189\.183\.70|1\.214\.83\.2)|7(?:8\.138\.101\.1[04]|6\.74\.186\.237|2\.35\.20\.131|4\.9\.203\.186)|3(?:7\.(?:122\.2(?:11\.100|09\.89)|206\.210\.130)|6\.229\.224\.79)|4(?:6\.182\.24\.130|1\.137\.24\.4))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:21(?:6\.(?:181\.110|55\.162|8\.158)|7\.(?:235\.138|161\.3))|16(?:1\.232\.157|7\.170\.33|8\.218\.86|4\.62\.8))|9\.(?:19(?:4\.153\.187|7\.181\.120|2\.252\.1|3\.93\.25)|201\.16\.211)|8\.(?:1(?:(?:14\.77\.11|29\.166\.8)6|68\.170\.103)|97\.196\.163)|0\.(?:1(?:65\.125\.152|89\.168\.171)|45\.(?:140\.89|244\.54))|5\.(?:88\.(?:119\.132|247\.131)|22\.80\.197|90\.96\.85)|4\.(?:47\.157\.97|27\.94\.29)|3\.0\.85\.249)|8(?:0\.(?:2(?:11\.1(?:62\.254|79\.30)|25\.131\.176)|96\.16\.69)|4\.(?:82\.(?:120\.2(?:10|35)|29\.3[34])|107\.58\.135)|8\.(?:1(?:27\.230\.28|68\.46\.53)|252\.0\.237)|3\.106\.116\.109|7\.120\.127\.27|6\.237\.41\.56|9\.39\.35\.168)|7(?:4\.3(?:7\.1(?:67\.1(?:03|11|22)|48\.77)|6\.16(?:0\.157|4\.184|7\.116))|3\.(?:192\.14(?:4\.105|7\.114|1\.99)|232\.45\.41)|8\.(?:20(?:7\.158\.230|\.148\.11)|33\.144\.132)|7\.1(?:\.223\.(?:10|7)3|40\.162\.120))|9(?:5\.(?:1(?:38\.195\.125|91\.184\.82)|29\.81\.30)|9\.(?:30\.137\.13[89]|25
5\.11\.29)|0\.69\.155\.100|2\.74\.251\.118|8\.50\.164\.219|4\.106\.16\.6)|2(?:1\.(?:1(?:34\.238\.129|81\.251\.188|57\.3\.252)|22\.127\.17)|2\.165\.225\.177|8\.134\.37\.115|0\.50\.86\.3)|3(?:3\.242\.115\.39|8\.91\.88\.93)|\.(?:226\.84\.175|168\.12\.23)|03\.9\.15(?:7\.181|8\.147)|58\.255\.2\.6[07]|49\.255\.3\.158)|2(?:0(?:0\.(?:14(?:8\.125\.247|2\.133\.21)|7(?:2\.11\.132|9\.27\.60)|94\.77\.1)|8\.(?:71\.172\.(?:8[456789]|9[0124])|113\.254\.39|82\.114\.44)|2\.(?:1(?:(?:58\.39\.25|20\.1\.3)0|42\.203\.19)|71\.136\.200)|9\.(?:2(?:23\.35\.20[356]|39\.114\.172)|144\.27\.22[689])|3\.(?:80\.244\.134|155\.102\.2)|1\.(?:22\.7\.225|45\.114\.3))|1(?:1\.(?:1(?:7(?:2\.242\.74|6\.61\.112)|47\.211\.16)|238\.133\.138|33\.121\.231)|3\.(?:2(?:11\.148\.159|30\.128\.226)|1(?:71\.39\.154|32\.241\.7))|7\.(?:1(?:49\.52\.12|98\.3\.238)|2(?:00\.184\.87|3\.6\.196))|0\.(?:2(?:10\.123\.47|45\.89\.69)|51\.44\.199)|8\.1(?:53\.247\.68|64\.18\.225)|9\.145\.110\.118|2\.6\.152\.211)|2(?:2\.(?:161\.201\.132|99\.2
02\.239|236\.16\.14)|1\.214\.208\.226|0\.94\.235\.200))|6(?:1\.(?:2(?:52\.138\.195|31\.19\.112)|1(?:64\.42\.158|47\.69\.79)|3(?:8\.186\.117|2\.38\.3)|98\.(?:131\.141|77\.169)|42\.104\.99|57\.65\.125|70\.83\.58)|6\.(?:199\.224\.(?:1[4579]|2[01])|84\.49\.9)|5\.60\.15\.18[46]|8\.115\.192\.7)|5(?:9\.1(?:(?:20\.213\.3|5\.76\.9)7|0(?:8\.47\.58|\.7\.16))|8\.(?:232\.221\.43|62\.113\.251)|\.(?:39\.220\.254|200\.9\.231)|0\.97\.3\.89)|8(?:7\.(?:236\.232\.231|97\.215\.67)|3\.(?:18\.234\.202|3\.103\.227)|1\.(?:15\.172\.14|23\.106\.7)5)|9(?:3\.1(?:57\.148\.102|88\.8\.67)|5\.(?:48\.24\.10|86\.4\.79)|4\.189\.183\.70|1\.214\.83\.2)|3(?:7\.(?:122\.2(?:0(?:8\.148|9\.89)|11\.100)|206\.210\.130)|6\.229\.224\.79)|7(?:8\.138\.101\.(?:1[04]|4)|6\.74\.186\.237|2\.35\.20\.131|4\.9\.203\.186)|4(?:6\.182\.24\.130|1\.137\.24\.4))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work