You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/03/25 07:57:22 UTC
svn commit: r1460531 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Mon Mar 25 06:57:21 2013
New Revision: 1460531
URL: http://svn.apache.org/r1460531
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1460531&r1=1460530&r2=1460531&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Mon Mar 25 06:57:21 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201303242
+## khop-sc-neighbors.cf v 201303252
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:1\.196\.186|3\.230\.128|0\.51\.44)|21\.143\.46)|1(?:03\.9\.156|20\.128\.2|44\.76\.31|85\.5\.54)|37\.59\.136|5\.135\.224)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:0(?:8\.163\.23|3\.9\.15)6|78\.89\.107|85\.5\.54)|2(?:\.135\.24[23]|21\.143\.46|10\.51\.44)|37\.59\.136|5\.135\.224)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.(?:143\.16|84\.13)|5\.(?:60\.156|91\.11))|83\.(?:221\.1[23]|10\.80)|1(?:2\.97\.24|0\.52\.8)|08\.163\.236|97\.252\.0)|21(?:0\.21\.225|7\.23\.1?2)|8(?:0\.36\.130|9\.218\.68)|46\.166\.179)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.(?:1(?:43\.16|28\.2)|84\.13)|5\.(?:60\.156|91\.11))|83\.(?:221\.1[23]|10\.80)|1(?:2\.97\.24|0\.52\.8))|21(?:0\.21\.225|7\.23\.1?2)|8(?:0\.36\.130|9\.218\.68)|46\.166\.179)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:2(?:1\.(?:1(?:58\.198\.76|25\.63\.87)|(?:8\.152\.24|49\.107\.)2|22\.127\.17|66\.95\.156)|4\.(?:(?:243\.124\.20|42\.124\.13)6|12(?:5\.156\.52|4\.59\.93))|5\.(?:91\.11\.8[789]|141\.204\.82)|0\.132\.132\.119)|7(?:8\.(?:2(?:1(?:0\.144\.17|3\.33\.95)|07\.158\.230)|1(?:63\.105\.52|51\.86\.1)|89\.107\.(?:164|66)|32\.223\.88|49\.170\.57|91\.254\.66)|6\.(?:31\.157\.173|53\.233\.76)|4\.137\.168\.212|7\.73\.105\.23)|9(?:5\.(?:1(?:3(?:8\.195\.125|\.200\.218)|28\.253\.152|91\.166\.25)|29\.81\.30|94\.11\.17)|0\.(?:82\.89\.156|0\.60\.238)|2\.227\.137\.55|4\.213\.122\.34|9\.255\.11\.29)|1(?:8\.(?:2(?:44\.182\.94|6\.204\.182)|97\.75\.154)|(?:4\.207\.113\.5|3\.142\.8\.20)5|5\.249\.63\.164|6\.112\.66\.102|9\.180\.26\.110|2\.152\.252\.9)|8(?:8\.(?:12(?:7\.230\.28|8\.99\.94)|252\.0\.237)|0\.(?:182\.167\.68|211\.179\.30)|3\.1(?:11\.21\.144|0\.80\.5)|5\.(?:2\.12|5\.54)\.77)|0(?:9\.(?:195\.54\.231|251\.28\.154)|8\.163\.236\.2(?:08|1)|3\.9\.156\.
51)|4(?:4\.76\.31\.172|\.63\.74\.204)|\.226\.83\.81)|2(?:1(?:1\.(?:1(?:1(?:5\.(?:127|68)\.32|1\.174\.98)|74\.179\.80|96\.186\.53)|2(?:3(?:6\.241\.13|8\.108\.11)3|02\.3\.156)|58\.255\.121|63\.82\.175|36\.19\.58)|7\.(?:2(?:3\.(?:12\.1(?:4[379]|8[58]|9[37]|07|19|61|74)|2\.1(?:0[238]|53))|00\.184\.87|19\.123\.59)|12\.113\.67|97\.211\.20)|3\.(?:2(?:30\.128\.226|51\.186\.229)|1(?:86\.39\.43|92\.3\.66)|81\.164\.57|0\.89\.6)|8\.(?:1(?:07\.132\.66|94\.91\.238)|232\.111\.227|38\.29\.32)|0\.(?:(?:245\.89\.6|51\.44\.19)9|94\.153\.180)|9\.223\.252\.150|2\.49\.70\.48)|0(?:2\.(?:1(?:1(?:8\.236\.178|3\.65\.229)|42\.203\.19|58\.39\.250|04\.22\.42)|71\.136\.200|44\.53\.64)|0\.(?:2(?:47\.100\.178|06\.14\.26)|142\.133\.21|72\.11\.132|68\.76\.69)|1\.(?:1(?:8\.145\.118|95\.239\.27)|22\.7\.225|45\.114\.3)|3\.(?:2(?:28\.43\.207|36\.93\.142)|144\.170\.98)|9\.236\.119\.75)|2(?:2\.1(?:74\.(?:255\.238|163\.2)|22\.79\.121)|1\.(?:214\.208\.226|143\.46\.13))|\.1(?:35\.24(?:3\.(?:187|210)|2\.1[26]2)|83\.15
5\.2))|8(?:9\.(?:218\.(?:68\.(?:146|74|90)|224\.(?:35|58)|94\.166)|123\.37\.143|34\.72\.74)|4\.(?:15\.191\.254|54\.160\.128)|5\.2(?:14\.157\.75|02\.5\.110)|0\.36\.130\.135|3\.14\.26\.98)|6(?:1\.(?:1(?:75\.223\.1(?:34|42)|33\.125\.162|47\.79\.111|66\.55\.153)|55\.156\.210|235\.71\.24)|6\.(?:199\.254\.56|63\.178\.54|84\.50\.133)|0\.244\.24\.156|2\.146\.28\.212)|9(?:1\.(?:2(?:3(?:0\.216\.130|5\.126\.92)|21\.176\.163)|194\.57\.18)|(?:4\.242\.243\.8|5\.48\.24\.1)0|3\.(?:159\.160\.164|79\.44\.189)|2\.243\.119\.158|0\.83\.184\.211)|5(?:\.(?:1(?:35\.(?:224\.(?:69|70)|92\.150)|99\.140\.67)|39\.122\.117|9\.131\.21)|9\.(?:49\.79\.121|60\.7\.146|72\.88\.58)|8\.180\.26\.203)|7(?:7\.(?:106\.232\.178|41\.1\.12)|2\.(?:35\.20\.131|9\.96\.115)|4\.122\.227\.124|5\.98\.233\.250|8\.157\.217\.65)|4(?:6\.(?:1(?:66\.179\.107|37\.45\.105)|238\.24\.34|48\.191\.71)|1\.137\.24\.4)|37\.59\.136\.203)\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:2(?:4\.(?:1(?:2(?:5\.156\.52|4\.59\.93)|36\.228\.3)|(?:243\.124\.20|42\.124\.13)6)|1\.(?:1(?:58\.198\.76|25\.63\.87)|22\.127\.17|66\.95\.156|49\.107\.2)|5\.(?:91\.11\.8[89]|141\.204\.82)|0\.132\.132\.119|3\.30\.174\.61)|9(?:5\.(?:1(?:3(?:8\.195\.125|\.200\.218)|28\.253\.152|91\.166\.25)|29\.81\.30|94\.11\.17)|0\.(?:1(?:07\.140\.76|82\.52\.113)|82\.89\.156|0\.60\.238)|9\.(?:19\.108\.231|255\.11\.29)|2\.227\.137\.55|4\.213\.122\.34)|7(?:8\.(?:2(?:1(?:0\.144\.17|3\.33\.95)|07\.158\.230)|1(?:63\.105\.52|51\.86\.1)|89\.107\.(?:164|66)|32\.223\.88|49\.170\.57|91\.254\.66)|6\.(?:31\.157\.173|53\.233\.76|8\.242\.91)|4\.137\.168\.212|7\.73\.105\.23)|1(?:8\.(?:2(?:44\.182\.94|6\.204\.182)|97\.75\.154)|3\.1(?:08\.201\.189|42\.8\.205)|5\.2(?:49\.63\.164|2\.80\.197)|1\.68\.104\.133|4\.207\.113\.55|6\.112\.66\.102|9\.180\.26\.110|2\.152\.252\.9)|8(?:8\.(?:12(?:7\.230\.28|8\.99\.94)|252\.0\.237)|0\.(?:182\.167\.68|211\.179\.30)|3\.1(?:1
1\.21\.144|0\.80\.5)|7\.108\.240\.20|5\.5\.54\.77)|0(?:9\.(?:195\.54\.231|251\.28\.154)|8\.163\.236\.208|1\.44\.3\.50)|4(?:4\.76\.31\.172|\.63\.74\.204)|\.226\.83\.81)|2(?:1(?:1\.(?:1(?:1(?:1\.174\.98|5\.127\.32)|74\.179\.80|96\.186\.53)|2(?:3(?:6\.241\.13|8\.108\.11)3|02\.3\.156)|58\.255\.121|63\.82\.175)|7\.(?:2(?:3\.(?:12\.1(?:4[37]|8[58]|[09]7|19|61|74)|2\.10[238])|00\.184\.87|19\.123\.59)|97\.211\.20)|0\.(?:2(?:2\.125\.174|45\.89\.69)|5(?:1\.44\.199|3\.47\.105)|94\.153\.180)|3\.(?:2(?:30\.128\.226|51\.186\.229)|186\.39\.43|81\.164\.57|0\.89\.6)|8\.(?:232\.111\.227|194\.91\.238)|2\.(?:241\.16\.2|49\.70\.)48|9\.223\.252\.150)|0(?:2\.(?:1(?:18\.236\.178|42\.203\.19|58\.39\.250|04\.22\.42)|71\.136\.200|44\.53\.64)|0\.(?:2(?:47\.100\.178|06\.14\.26)|142\.133\.21|72\.11\.132|68\.76\.69)|1\.(?:1(?:8\.145\.118|95\.239\.27)|65\.114\.212|22\.7\.225|45\.114\.3)|3\.2(?:28\.43\.207|36\.93\.142)|9\.236\.119\.75)|2(?:2\.(?:1(?:74\.(?:255\.238|163\.2)|22\.79\.121)|231\.57\.117)|1\.(?:2
(?:07\.220\.140|14\.208\.226)|143\.46\.13)|0\.94\.235\.200)|\.1(?:35\.24(?:3\.(?:187|210)|2\.1[26]2)|83\.155\.2))|6(?:1\.(?:1(?:75\.223\.1(?:34|42)|33\.125\.162|10\.67\.125|47\.79\.111|66\.55\.153)|55\.156\.210|235\.71\.24)|6\.(?:199\.254\.56|63\.178\.54|84\.50\.133)|0\.(?:173\.11\.121|244\.24\.156)|2\.146\.28\.212)|5(?:\.(?:1(?:35\.(?:224\.(?:69|70)|92\.150)|99\.140\.67)|39\.122\.117|9\.131\.21)|9\.(?:(?:127\.204\.2|34\.57\.8)8|49\.79\.121|60\.7\.146)|8\.180\.26\.203)|8(?:9\.218\.(?:68\.(?:146|74|90)|224\.58|94\.166)|4\.(?:15\.191\.254|54\.160\.128)|5\.2(?:14\.157\.75|02\.5\.110)|0\.36\.130\.135|3\.14\.26\.98)|9(?:1\.2(?:3(?:0\.216\.130|5\.126\.92)|21\.176\.163)|(?:4\.242\.243\.8|5\.48\.24\.1)0|3\.159\.160\.164|0\.83\.184\.211)|7(?:4\.(?:122\.227\.124|216\.223\.82)|7\.(?:106\.232\.178|41\.1\.12)|2\.(?:35\.20\.131|9\.96\.115)|8\.157\.217\.65)|4(?:6\.(?:1(?:66\.179\.107|37\.45\.105)|99\.253\.158|238\.24\.34|48\.191\.71)|1\.137\.24\.4)|37\.59\.136\.203)\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work