You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2010/04/20 04:56:51 UTC
svn commit: r935794 - in /spamassassin/trunk/rulesrc/sandbox/khopesh:
20_khop_sc_bug_6114.cf 20_spamdb_subjects.cf
Author: khopesh
Date: Tue Apr 20 02:56:51 2010
New Revision: 935794
URL: http://svn.apache.org/viewvc?rev=935794&view=rev
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
spamassassin/trunk/rulesrc/sandbox/khopesh/20_spamdb_subjects.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=935794&r1=935793&r2=935794&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Tue Apr 20 02:56:51 2010
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 2010041822
+## khop-sc-neighbors.cf v 2010041922
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -57,7 +57,7 @@ score KHOP_SC_TOP_CIDR8 0.9 0.1 0.9 0.
# 11.6286/0.0475 0.996 20100410 net, solo=11.7224/0.6900@0.944, ->LE as above
# http://www.spamcop.net/w3m?action=map;net=bmaxcnt;mask=16777215;sort=spamcnt
-header KHOP_SC_CIDR16 Received =~ /(?-xism:\b(?:1(?:22\.1(?:62|73)|15\.240)|59\.9[45]|95\.135)(?:\.[012]?\d{1,2}){2}\b)/
+header KHOP_SC_CIDR16 Received =~ /(?-xism:\b(?:12(?:(?:1\.24|3\.1)7|2\.162)|95\.13[35]|59\.95)(?:\.[012]?\d{1,2}){2}\b)/
describe KHOP_SC_CIDR16 Relay CIDR /16 is among worst in SpamCop
tflags KHOP_SC_CIDR16 nopublish
score KHOP_SC_CIDR16 1.6 0.5 1.6 0.5
@@ -72,7 +72,7 @@ score KHOP_SC_CIDR16 1.6 0.5 1.6 0.5
# 0 /0 0 20100409 (wha!?)
# crap, still empty 20100410 bad scrape, script failed to populate rule
-header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b(?:1(?:2(?:2\.16[38]|3\.27)|1(?:7\.197|8\.96)|83\.87)|41\.(?:141|249)|59\.92)(?:\.[012]?\d{1,2}){2}\b)/
+header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b(?:1(?:2(?:2\.16[38]|3\.27)|1(?:7\.197|8\.96)|83\.87)|220\.225|41\.249|59\.94)(?:\.[012]?\d{1,2}){2}\b)/
describe KHOP_SC_TOP_CIDR16 Relay CIDR /16 leads SpamCop in worst /16s
tflags KHOP_SC_TOP_CIDR16 nopublish
score KHOP_SC_TOP_CIDR16 2.0 0.5 2.0 0.5
@@ -89,7 +89,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.5 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:3\.(?:110\.96|233\.64)|2\.63\.221|7\.118\.82)|03\.8(?:7\.178|2\.92))|1(?:1(?:3\.(?:160\.112|22\.69)|1\.224\.250)|9(?:3\.108\.38|6\.40\.10))|(?:41\.254\.|61\.7\.23)1|78\.138\.1(?:68|71)|89\.211\.46)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:0\.127\.209|3\.233\.64|7\.118\.82)|0(?:3\.87\.178|9\.222\.0))|1(?:9(?:3\.108\.38|6\.40\.10)|13\.160\.112)|6(?:7\.205\.10|1\.19\.7)1|78\.138\.1(?:68|71)|89\.211\.46|94\.23\.20)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 2.5 0.6 2.5 0.6
@@ -106,7 +106,7 @@ score KHOP_SC_CIDR24 2.5 0.6 2.5 0.6
# 0.2960/0 1.000 20100409
# 0.2905/0 1.000 20100410 net
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:2(?:0(?:2\.(?:152\.243|70\.54)|3\.82\.(?:9[24]|80)|9\.222\.0)|1(?:3\.(?:(?:163\.11|87\.7)6|233\.64)|7\.118\.90))|8(?:5\.26\.(?:1(?:6[45]|83)|23[2345])|3\.149\.(?:28|3)|1\.192\.211|9\.232\.105|2\.178\.69)|1(?:9(?:6\.12\.2(?:3[36]|4[45])|0\.104\.162)|1(?:5\.147\.237|2\.76\.5)|73\.45\.96)|7(?:8\.138\.1(?:6[89]|7[01])|7\.232\.142|9\.106\.109|2\.21\.6)|41\.(?:2(?:23\.20|54\.)|140\.25)1|9(?:5\.129\.166|1\.203\.67)|62\.61\.164)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:3\.(?:(?:163\.11|87\.7)6|233\.64)|7\.118\.90)|0(?:2\.(?:152\.243|70\.54)|3\.82\.9[24]))|1(?:1(?:1\.224\.250|5\.147\.237|3\.22\.69|2\.76\.5)|96\.12\.2(?:3[36]|45)|73\.45\.96)|8(?:5\.26\.(?:1(?:6[45]|83)|23[2345])|3\.149\.(?:28|3)|9\.232\.105|2\.178\.69)|7(?:8\.138\.1(?:6[89]|70)|2\.(?:52\.137|21\.6)|7\.232\.142|9\.106\.109)|9(?:5\.129\.166|1\.203\.67)|41\.(?:140\.25|254\.)1|62\.61\.164)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.6 2.7 0.6
@@ -123,7 +123,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.6 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:9(?:0\.(?:1(?:(?:83\.60\.25|7\.212\.7)3|91\.129\.191|04\.156\.98|61\.14\.132)|2(?:07\.163\.52|4\.150\.68|6\.67\.230|7\.80\.93)|8(?:6\.207\.218|0\.156\.14)|41\.(?:171\.154|223\.167)|34\.154\.204|96\.68\.179)|5\.(?:1(?:61\.(?:8\.1|9\.2)|89\.46\.253|74\.4\.209)|2(?:02\.81\.154|38\.191\.68))|3\.1(?:0(?:7\.184\.192|8\.38\.228)|98\.8\.211)|6\.(?:1\.209\.(?:69|83)|40\.10\.246)|4\.(?:164\.247\.144|54\.52\.239)|2\.129\.3\.191)|2(?:2\.(?:2(?:20\.255\.172|52\.234\.74)|166\.61\.134|34\.215\.210)|1\.1(?:68\.226\.231|\.18\.244)|4\.1(?:07\.16\.66|24\.43\.32)|3\.140\.193\.203)|7(?:3\.(?:45\.96\.(?:2(?:0[679]|1[69])|1(?:0[02]|9[24])|98)|1(?:61\.201\.15|2\.120\.21)7|77\.241\.20)|8\.176\.234\.44)|1(?:8\.(?:169\.222\.230|217\.216\.132)|(?:4\.32\.100\.12|3\.160\.2\.5)8|1\.224\.250\.13[34]|5\.118\.134\.54)|8(?:9\.(?:1(?:60\.217\.246|95\.16\.84)|84\.174\.253)|7\.16\.28\.18|6\.24\.19\.3)|6(?:3\.23\.104\.129|5\.98\.153\.46)|(?:09\.188\.1\.22|51\.
44\.239\.6)2)|2(?:0(?:1\.(?:2(?:(?:00\.178|45\.162)\.50|15\.112\.231|32\.107\.46)|1(?:(?:34\.103\.2|44\.87\.)36|0\.176\.43)|(?:5(?:3\.133\.20|9\.92\.24)|43\.13\.8)6|7\.225\.15)|0\.(?:1(?:1(?:1\.161\.194|6\.243\.197|7\.254\.129)|08\.242\.133)|95\.162\.200|3\.170\.217|80\.140\.61)|9\.(?:2(?:22\.0\.(?:1[36]|27|4)|54\.56\.106)|94\.196\.170)|2\.(?:1(?:84\.124\.1[349]|64\.52\.100)|42\.133\.58)|4\.(?:10\.139\.16[02]|202\.250\.207)|3\.(?:229\.24\.25|59\.95\.113)|6\.48\.103\.222)|1(?:3\.1(?:(?:63\.116\.23|86\.47\.15)0|98\.11(?:1\.207|2\.90))|6\.(?:155\.3(?:9\.(?:2[24]|14)|8\.233)|230\.133\.69)|9\.(?:95\.(?:227\.218|148\.97|45\.81)|75\.44\.207)|7\.(?:1(?:29\.104\.252|74\.229\.221)|76\.2\.129)|1\.1(?:91\.174\.141|71\.31\.100)|0\.1(?:12\.121\.12|27\.209\.34)|8\.(?:111\.179\.134|38\.29\.80)|2\.63\.221\.10)|2(?:2\.(?:12(?:4\.156\.231|0\.16\.15)|252\.223\.2)|1\.143\.46\.33)|4\.106\.135\.238)|8(?:2\.1(?:14\.(?:65|90)\.246|78\.173\.197|40\.91\.41)|9\.(?:211\.46\.21[08]|42\.116\.44|74\.181\.6
)|0\.(?:93\.12(?:5\.186|4\.1)|179\.212\.151)|(?:1\.21\.115\.|6\.72\.93\.1)38|3\.(?:3\.237\.195|69\.117\.81)|4\.2(?:42\.142\.94|2\.56\.50)|5\.1(?:75\.6\.123|54\.6\.71)|7\.126\.68\.215)|6(?:1\.(?:1(?:00\.228\.61|9\.71\.74)|7\.2(?:31\.23|41\.7)0|9\.6\.245)|4\.(?:1(?:64\.228\.206|91\.134\.147|87\.119\.3)|70\.190\.10)|7\.(?:2(?:05\.101\.4|17\.48\.)9|115\.179\.198)|2\.(?:103\.171\.28|95\.110\.33)|9\.(?:151\.79\.23|79\.214\.11)8|3\.253\.107\.166)|9(?:4\.(?:23\.(?:20(?:3\.173|\.147)|55\.42)|85\.241\.193|76\.213\.81)|1\.(?:1(?:9(?:8\.175\.252|9\.116\.9)|50\.127\.93)|214\.128\.24)|5\.(?:188\.80\.244|77\.218\.249|51\.121\.90)|3\.(?:186\.96\.40|91\.196\.99)|8\.224\.242\.240|7\.66\.79\.81)|7(?:7\.(?:1(?:20\.251\.37|92\.142\.63)|22\.162\.99|73\.139\.2)|6\.(?:1(?:03\.160\.74|72\.157\.10)|227\.84\.105)|2\.(?:52\.137\.166|21\.6\.24)|8\.109\.36\.16|4\.92\.90\.58)|41\.(?:2(?:06\.61\.243|15\.18\.110)|190\.239\.178)|59\.90\.214\.99)\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:9(?:0\.(?:1(?:91\.129\.191|61\.14\.132|83\.62\.154|7\.212\.73)|2(?:07\.163\.52|4\.150\.68|6\.67\.230|7\.80\.93)|41\.(?:1(?:71\.154|99\.252)|223\.167)|8(?:6\.207\.218|0\.156\.14)|34\.154\.204|96\.68\.179)|5\.(?:1(?:61\.(?:8\.1|9\.2)|89\.46\.253|17\.26\.89)|2(?:02\.81\.154|38\.191\.68))|6\.(?:1\.209\.(?:69|83)|201\.207\.169|40\.10\.246)|4\.(?:1(?:64\.247\.14|50\.96\.20)4|54\.52\.239)|3\.1(?:0(?:7\.184\.192|8\.38\.228)|98\.8\.211)|9\.237\.202\.232|2\.129\.3\.191)|2(?:2\.(?:2(?:20\.255\.172|52\.234\.74)|166\.61\.134|34\.215\.210)|4\.(?:1(?:07\.16\.66|24\.43\.32)|217\.216\.112)|3\.(?:140\.193\.203|237\.252\.35)|1\.1(?:68\.226\.231|\.18\.244)|5\.7\.192\.146)|7(?:3\.(?:45\.96\.(?:1(?:9[249]|0[02])|2(?:0[1679]|16))|161\.201\.157|77\.241\.20)|5\.116\.8\.24)|8(?:9\.(?:1(?:60\.217\.246|14\.16\.187|95\.16\.84)|84\.174\.253)|7\.16\.28\.18|6\.24\.19\.3)|1(?:8\.169\.2(?:22\.230|17\.26)|1\.224\.250\.13[34]|0\.45\.144\.227|4\.32\.100\.128
)|6(?:3\.(?:152\.106\.152|23\.104\.129)|5\.98\.153\.46)|(?:09\.188\.1\.22|51\.44\.239\.6)2)|2(?:0(?:1\.(?:1(?:(?:34\.103\.2|44\.87\.)36|0\.176\.43)|2(?:15\.112\.231|00\.178\.50|32\.107\.46)|43\.13\.86|7\.225\.15)|0\.(?:11(?:1\.161\.194|6\.243\.197|7\.254\.129)|(?:49\.157\.5|80\.140\.6)1|3\.170\.217|50\.72\.66)|3\.(?:2(?:55\.220\.41|29\.24\.25)|194\.220\.54|59\.95\.113)|9\.(?:2(?:22\.0\.(?:1[36]|27|4)|54\.56\.106)|94\.196\.170)|2\.1(?:84\.124\.1[349]|64\.52\.100)|4\.10\.139\.16[02]|5\.209\.97\.173|6\.48\.103\.222)|1(?:7\.(?:1(?:29\.104\.252|74\.229\.221)|20\.138\.113|76\.2\.129)|9\.(?:95\.(?:227\.218|148\.97)|75\.44\.207)|6\.(?:155\.39\.(?:2[24]|14)|230\.133\.69)|(?:8\.111\.179\.1|0\.127\.209\.)34|3\.(?:163\.116\.230|251\.164\.123)|2\.(?:156\.16\.34|63\.221\.10)|1\.171\.31\.100)|2(?:2\.12(?:4\.156\.231|0\.16\.15)|1\.143\.46\.33)|4\.106\.135\.238)|8(?:2\.1(?:7(?:8\.173\.197|7\.53\.4)|14\.(?:65|90)\.246|40\.91\.41)|3\.(?:1(?:09\.75\.242|9\.164\.58)|3\.237\.195|69\.117\.81)|5\.(
?:1(?:75\.6\.123|54\.6\.71)|221\.151\.97)|0\.(?:179\.212\.151|93\.125\.186)|9\.(?:211\.46\.21[08]|74\.181\.6)|4\.2(?:42\.142\.94|2\.56\.50)|7\.126\.68\.215|1\.21\.115\.38)|6(?:4\.(?:1(?:64\.228\.206|91\.134\.147|87\.119\.3)|233\.207\.54|46\.21\.153|70\.190\.10)|1\.(?:1(?:00\.228\.61|9\.71\.74)|7\.2(?:31\.23|41\.7)0|9\.6\.245)|7\.(?:115\.179\.198|205\.101\.49)|2\.(?:103\.171\.28|95\.110\.33)|3\.253\.107\.166|9\.151\.79\.238|5\.183\.14\.22)|9(?:4\.(?:23\.(?:20(?:3\.173|\.147)|55\.42)|85\.241\.193|76\.213\.81)|1\.(?:1(?:(?:20\.21\.24|50\.127\.9)3|99\.116\.9)|214\.128\.24)|3\.(?:186\.96\.40|91\.196\.99)|8\.224\.242\.240|2\.105\.94\.99|7\.66\.79\.81)|7(?:7\.(?:1(?:20\.251\.37|92\.142\.63)|22\.162\.99|73\.139\.2)|6\.(?:1(?:03\.160\.74|72\.157\.10)|227\.84\.105)|2\.(?:52\.1(?:37\.166|16\.44)|21\.6\.24)|9\.187\.150\.122|8\.109\.36\.16|4\.92\.90\.58)|41\.(?:2(?:06\.61\.243|15\.18\.110)|190\.239\.178)|59\.90\.214\.99)\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work
@@ -140,7 +140,7 @@ score KHOP_SC_TOP200 4 0 4 0 # unneces
# PSBL-neighbors: any /24 with 73+ (2/7, 29%) IPs in the PSBL (not SpamCop),
# as obtained from rsync://psbl-mirror.surriel.com::psbl/psbl.txt
-header KHOP_PSBL_CIDR24 X-Spam-Relays-Untrusted =~ /(?-xism:\b(?:1(?:1(?:7\.(?:2(?:4(?:1\.(?:2(?:4[01]?|5[23]?|2[48]|00|17|32)|1(?:7[678]|2[08]|[48]4|[59]2)?|8[012]?|56|64|0)|2\.(?:[08]|1(?:0[48]|4[04]|3?2|9?6)|2(?:4?8|04)|4[04]?|6[08]|7[23]|56?))|0(?:0\.(?:1(?:3[01]|28|44|79)|20[89])|5\.(?:14[45]|9[689])|4\.(?:8[12]|113|96)|6\.(?:[23]|16)))|1(?:9(?:9\.(?:[03]|1(?:4[45]|81|7)?|4[89]|52)|6\.(?:1(?:28|33|62)|225)|7\.(?:6[456]|9[67]|242))|\.233)|44\.2[01])|3\.(?:16(?:7\.(?:1(?:7[6789]|8[013]|1[58]|60)?|3[2346]|248|0)|8\.(?:[02469]|1(?:1[246]|2)|8[05])|2\.(?:[79]7|225|80)|6\.(?:[0258]|1?3))|22\.(?:[89]|6[89]|10)|56\.28)|9\.(?:100\.(?:1(?:4[4567]|6[45])|2(?:1[01234]|09))|48\.19[23456789])|8\.(?:68\.(?:2(?:4[89]|5[23])|19[26])|71\.(?:6?8|10|9))|5\.147\.(?:2(?:3[0127]|0[123]|29)|192)|1\.181\.1(?:3[6789]|4[0123])|6\.71\.79)|2(?:2\.1(?:6(?:8\.(?:2(?:[789]|1[012345679]?|2[0123678]?|4[0124789]|0[56789]|3[14569]|5[045]?)|1(?:[24]|71?|63)|7[349]|3[01]|6[89]|9)|1\.[16]8|3\.185)|72\.1(?:2
[16]|16))|3\.(?:2(?:7\.(?:2(?:1[01234678]|09|6)|8[0158]|93)|8\.14[13])|1(?:8\.1(?:6[234567]|9[2457]|7[56]|59)|7\.24[05]))|0\.89\.79)|8(?:3\.(?:87\.(?:2(?:18|20)|115)|93\.0)|8\.(?:48\.(?:76|2)|50\.91))|9(?:6\.(?:12\.2(?:4[2345]|3[36])|28\.247)|0\.104\.162))|5(?:9\.(?:9(?:9\.(?:1(?:2[89]|5[23]|8[45]|30|6)|2(?:[45]|0[089]|10)|5[67]|6[45]|[37]2|40)|8\.(?:1(?:2[89]|9[23]|44|52)|200)|7\.(?:2(?:0[089]|1[67])|120)|3\.(?:1(?:29|31)|5)|4\.(?:11[2345]|41)|5\.98)|164\.(?:[289]|1[12]))|8\.18(?:7\.(?:[89]|35|64)|6\.(?:1[24]|217)))|2(?:1(?:9\.13(?:8\.(?:21[18]|119)|9\.12[013])|7\.(?:8\.2(?:25|36)|118\.90)|3\.(?:132\.255|87\.76))|2(?:2\.25(?:2\.1(?:45|57)|4\.(?:108|66)|3\.27?)|1\.234\.(?:[78]4|16|20))|0(?:2\.(?:70\.5[489]|152\.243)|3\.82\.(?:9[234]|8[01])))|41\.(?:1(?:31\.2(?:2[456789]|3[0145])|9(?:9\.18[23]|1\.2[07])|40\.251|76\.182|89\.193)|2(?:0(?:9\.(?:114|78)|3\.224)|54\.[123]|23\.201))|8(?:5\.26\.(?:1(?:6[45]|8[36])|2(?:3[2345]|41))|4\.36\.1(?:5[23468]|31)|3\.149\.(?:28|45|3)|1\.192\.
211|9\.232\.105|2\.178\.69)|7(?:8\.(?:93\.(?:1(?:50|77)|68)|138\.1(?:7[01]|68))|7\.(?:64\.1(?:1[89]?|21)|232\.142)|9\.106\.109)|6(?:1\.19\.6[567]|2\.61\.164)|9(?:1\.203\.6|2\.39\.7)7)\.[012]?\d{1,2}\b)/
+header KHOP_PSBL_CIDR24 X-Spam-Relays-Untrusted =~ /(?-xism:\b(?:1(?:1(?:7\.(?:2(?:4(?:1\.(?:1(?:7[678]|2[08]|[48]4|[59]2|68)?|2(?:4[01]?|5[23]?|2[48]|00|17|32)|8[012]?|6[45]|56|0)|2\.(?:[08]|1(?:4[04]|3?2|9?6|08)|2(?:4?8|04)|4[04]?|6[089]|7[23]|56?))|0(?:0\.(?:1(?:6[12]?|2[89]|7[79]|30|44)|20[89])|4\.(?:1(?:1[235]|44)|8[124]|9[67])|5\.(?:1(?:00|45)|9[689])|6\.(?:[02]|34?|16|51)))|1(?:9(?:9\.(?:[036]|1(?:[67]|4[4567]|81)?|21|48|52)|6\.(?:1(?:3[03]|28|62|80)|225)|7\.(?:6[456]|9[678])|8\.(?:3[23]|146))|\.233)|44\.2[01])|3\.(?:16(?:7\.(?:1(?:8[0123]|1[589]|7[678]|60|9)?|2(?:4[158]|9)|3[2346]|48|0)|8\.(?:[0569]|1(?:0[478]|1[246]|4[047]|36|2)|2(?:28)?|8[025])|6\.(?:[023568]|1[234])|2\.(?:[79]7|225|80))|22\.(?:[89]|2[67]|6[89]|[13]0)|56\.28)|8\.(?:68\.(?:2(?:4[89]|5[23])|1(?:9[26]|66))|71\.(?:1(?:71|0)|6?8|9))|9\.(?:100\.(?:1(?:4[457]|6[45])|21[234])|48\.19[23456789])|5\.147\.(?:2(?:3[0127]|0[123]|29)|192)|1\.181\.1(?:4[0123]|3[789])|6\.71\.(?:147|210|44|58|79)|2\.76\.5)|2(?:2\.1
(?:6(?:8\.(?:2(?:[789]|2[01236789]?|0[01456789]|4[01246789]|3[1245689]|5[0345]?|1\d?)|1(?:[249]|6[3456]?|71?)|7[013459]?|6[89]?|97?|30|4)|1\.(?:1[18]|68)|3\.185)|72\.1(?:1[236789]|2[12356]))|3\.(?:1(?:8\.(?:1(?:6[234567]|7[0256]|5[689]|9[245])|24[01])|7\.(?:2(?:4[02359]|50)|165)|6\.175)|2(?:7\.(?:2(?:[56]|1[012346789]|09)|8[0123567]|3[34]|93)|8\.14[123]|2\.55))|0\.89\.79)|8(?:3\.87\.(?:2(?:1[78]|20|3)|115)|8\.(?:48\.(?:76|2)|50\.91))|9(?:6\.(?:12\.2(?:4[2345]|3[36])|28\.247)|0\.104\.162))|5(?:9\.(?:9(?:9\.(?:1(?:[67]|2[89]|5[23]|8[45]|30)|2(?:[45]|0[089]|10)|5[67]|6[45]|[37]2|40)|8\.(?:1(?:2[89]|9[23]|36|44|52|60)|(?:20)?0|8)|7\.(?:2(?:0[089]|1[67]|2[45])|1(?:2[08]|12))|3\.(?:1(?:2[89]|30)?|39|5)|5\.(?:10[23]|98)|4\.11[2345])|164\.(?:[2389]|1[123]?))|8\.18(?:7\.(?:[89]|3[45]|6[49])|6\.(?:21[678]|1[234])))|2(?:2(?:2\.25(?:2\.(?:1(?:5[1789]|45)|2(?:1[79]|01))|4\.(?:1(?:08|10)|(?:21|6)8|74)|3\.2[67]?)|1\.234\.(?:[78]4|16|20))|1(?:9\.13(?:9\.12[013]|8\.21[18])|7\.(?:8\.2(?:25|36
)|118\.90)|3\.(?:132\.255|87\.76))|0(?:2\.(?:70\.5[489]|152\.243)|3\.82\.(?:9[234]|8[01])))|41\.(?:1(?:3(?:1\.2(?:2[456789]|3[0145])|0\.13)|9(?:9\.18[23]|1\.2[07])|40\.251|76\.182|89\.193)|2(?:0(?:9\.(?:114|78)|3\.224)|54\.[0123]|23\.201))|8(?:5\.26\.(?:1(?:6[45]|8[36])|2(?:3[2345]|41))|4\.36\.1(?:5[234678]|3[13])|3\.149\.(?:4[45]|28|3)|1\.192\.211|9\.232\.105|2\.178\.69)|7(?:8\.(?:93\.(?:1(?:5[01]|49)|226|68)|138\.1(?:7[01]|68))|7\.(?:64\.1(?:1[789]?|21)|232\.142)|9\.106\.109)|6(?:1\.19\.6[567]|2\.61\.164)|9(?:1\.203\.6|2\.39\.7)7)\.[012]?\d{1,2}\b)/
describe KHOP_PSBL_CIDR24 Relay's IP/24 CIDR contains many PSBL hits
tflags KHOP_PSBL_CIDR24 nopublish
score KHOP_PSBL_CIDR24 1.8 0.8 1.8 0.8
@@ -157,21 +157,26 @@ meta __KHOP_SPAMMY_CIDR24 KHOP_PSBL_CID
# est. 1.2/0.0050@.996, floor: 1.0/0.0112@.989, ceiling: 1.4/0@1
# spam/ham s/o corpus
# 1.2645/0.0054 0.996 20100410 net
+# 1.1562/0.0058 0.995 20100417 net
meta __KHOP_SPAMMY_CIDR16 KHOP_SC_CIDR16||KHOP_SC_TOP_CIDR16
# est. 1.4/0.02@.986, floor: 1.3/0.0312@.977, ceiling: 2.0/0.0150@.993
# spam/ham s/o corpus
# 1.0611/0.0009 0.999 20100410 net
+# 1.9539/0.0152 0.992 20100417 net
meta __KHOP_SPAMMY_CIDR8 KHOP_SC_CIDR8||KHOP_SC_TOP_CIDR8
# est. 23.7/0.15@.994, floor: 23/0.2685@.988, ceiling: 26.5/0.0789@.997
# spam/ham s/o corpus
# 23.7686/0.0614 0.997 20100410 net
+# 22.2300/0.0616 0.997 20100417 net
-meta __KHOP_SPAMMY_SUBNET __KHOP_SPAMMY_CIDR24||__KHOP_SPAMMY_CIDR16||__KHOP_SPAMMY_CIDR8
+meta __KHOP_SPAMMY_SUBNET __KHOP_SPAMMY_CIDR24||__KHOP_SPAMMY_CIDR16
# est. 26.2/0.175@.993, floor: 24.5/0.5@.980, ceiling: 30.1/0.1@.997
# spam/ham s/o corpus
# 25.6744/0.0677 0.997 20100410 net, beat estimated ceiling (for ham)!
+# 23.7846/0.0826 0.997 20100417 net, beat ceiling ham, but beat floor spam
+# 23.7505/0.1041 0.996 20100418 too much ham, nixing /8, new est. 3.0/.02@.993
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_spamdb_subjects.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_spamdb_subjects.cf?rev=935794&r1=935793&r2=935794&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_spamdb_subjects.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_spamdb_subjects.cf Tue Apr 20 02:56:51 2010
@@ -1,6 +1,6 @@
# Tests of suject data from Phil Tom's SPAMDB
# (as compiled into rules by Adam Katz)
-# Last updated Mon Apr 19 22:58:09 UTC 2010
+# Last updated Tue Apr 20 02:57:05 UTC 2010
header KHOP_SPAMDB_SUBJ Subject =~ m{(?-xism:^(?:(?:H(?:e(?:llo(?:. (?:long time did not communicate. please contact me. your beautiful Sonia|you have a nice picture in the dating site. would you mind to chat|my gentle sun. let's talk)| here. do you like girls from russia. I hope so :)|y - tell me your mobile - Katya from Russia)|i(?:. I(?:'m (?:from Russia - a dream to live abroad. my name is Mary. can we get started. .I'm on this dating site - come in to me|like blond and cute. can I talk with you)| like your picture in the dating site. Let's communicate)| sweety. Remember me)|ydrocodone(?: is available at your fingertips and many more|. Vicodin. Phentermin. 100 percent reliable ..)|ave (?:no more weight problems with Phentermin|Great Focus with Adderall)|undreds of profiles of Russian hotties|ow about Russian bride)|I(?: (?:am (?:your Russian pussy - you remember my nickname|Julia. 28 y.o. Russia .dating)|sexual Russian blonde. want to see. come closer|want you now. tell
me reciprocate and get me|can do for you is - what can not no girl)|'ll (?:see you I really liked - let's get acquainted. I am from Russia|like you. Remember that night in the hotel)|f you are disappointed in its second half. bold. come in)|A(?:(?:ny designer knows that Quark XPress 8 for Mac is one of the best programs to create image|dderall is one of the best mental enhancer)s| (?:year ago you came to Russia. I remember you. write me|great tool for great focus. Adderall)|mbien. Soma. Phentermin. and more without a prescription )|F(?:ind (?:a (?:perfect (?:soul mate among the good-looking Russian women right her|Russian wif)|Russian wife her)|your Russian soul-mat|Oxycodone Her)e|ed up with overpriced pharmacy costs)|T(?:(?:he most beautiful Russian women are|rim some pounds. RxMedications) available here|ell me how you live. as a new wife. .Your Russian friend)|G(?:et (?:RxMeds online with 3 day UPS Shipping|Percocet(?: online|Today))|reat Deal on Phentermine here)|Phent
ermin (?:is (?:availabl|her)e at your fingertips and many more|helps (?:get off the weigh|melt fa)t)|Lo(?:ts of decent Russian women to choose from|se_weight fast with Phentermin.|oking for Percocet)|1(?:000 singleladies from Russia are online now. have ineterst|1 new ladies profiles .dating)|(?:7 new messages from ladies for you .|9 ladies are online now .Russia. )dating|order hydrocodone online without prescription - cheap ..|Do you want me again. I love you madly I want|we sell Phentermin here).|You(?: (?:(?:remember that day at the beach. .I'll immediately noticed|are my good. my handsome - write me. I'm waiting|can buy Phentermin On-Line Today).|have (?:little joy in life. Lacks warmth and affection. Come to me.|new mail from Olga(?: 26 y.o. Russia. dating)?))|'re saying that you come to Russia - I've been expecting you like a fool. but you do not come.)|W(?:(?:ork with images easily using tools of Quark XPress 8 for Mac|ant to know what the real Russian girls love and
warmth|hy we stopped our communication. I expected more. Olga).|e have (?:brand name Phentermin available with trackable shipping.|Percocet available here))|R(?:ussian (?:(?:w(?:omen need a prince|ives are the best)|(?:beautie|queen)s are waiting|ladies for any taste).|dating site)|e(?:al Deal Phentermin available here.|plica Watches)|E: Home Warranty)|B(?:(?:e(?:autiful Russian women(?: waiting to meet YOU)?|come very focused with Adderall)|rand name Phentermin is available here).|uy Hydrocodone Online from a US Pharmacy)|M(?:ar(?:ia is online now. waiting for your reply. Russian dating|ry a gorgeous Russian girl.)|eet (?:and marry a gorgeous Russian queen|Russian women here).)|N(?:eed (?:Phentermin. Purchase meds here online|pain killers..Get them Here.)|oPRESCRIPTION for Hydrocodone Needed|atali Russia. updated her profile)|S(?:ave (?:up to 70% on (?:Life Insurance.|RxMedications)|huge on Hydrocodone.)|till single.look at my profile. Olga from Russia)|O(?:ne of the best p
ain killers is here. Percocet.|xycodone is available here)|E(?:nhance your focus with Adderall.|xquisite Replica)|you have 6 unread messages from ladies|Julia sent new message for you|greatDeal on Percocet)$)}
describe KHOP_SPAMDB_SUBJ Matches one of the SPAMDB top 100 spam subjects