You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/04/10 08:57:25 UTC
svn commit: r1466349 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Wed Apr 10 06:57:24 2013
New Revision: 1466349
URL: http://svn.apache.org/r1466349
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1466349&r1=1466348&r2=1466349&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Wed Apr 10 06:57:24 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 20130492
+## khop-sc-neighbors.cf v 201304102
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:0(?:3\.9\.15[67]|6\.241\.3)|2(?:0\.128\.2|1\.54\.54)|75\.45\.168)|(?:46\.105\.13|78\.138\.10)1|21(?:1\.222\.53|2\.48\.65)|(?:37\.59\.14|5\.39\.21)6)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:7(?:5\.45\.168|8\.33\.144)|0(?:3\.9\.156|6\.241\.3)|2(?:0\.128\.2|1\.54\.54)|41\.105\.64|12\.97\.33)|(?:46\.105\.13|78\.138\.10)1|210\.21\.225|5\.39\.216)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:5\.60\.156|0\.84\.13)|12\.97\.(?:24|33)|83\.221\.1[23]|03\.20\.75)|21(?:7\.2(?:00\.184|3\.2)|0\.21\.225)|7(?:8\.138\.106|2\.42\.224)|(?:80\.36\.13|5\.39\.22)0|66\.199\.228)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:12\.97\.(?:24|33)|83\.221\.1[23]|03\.20\.75|20\.84\.13)|7(?:8\.138\.106|2\.42\.224)|(?:80\.36\.13|5\.39\.22)0|217\.2(?:00\.184|3\.1?2)|66\.199\.228)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:4\.(?:1(?:41\.253\.134|13\.221\.66)|207\.113\.55)|2\.(?:1(?:86\.46\.107|64\.62\.8)|90\.90\.16)|5\.(?:249\.63\.164|88\.247\.131|90\.96\.85)|6\.(?:255\.164\.18|90\.162\.116)|8\.(?:129\.166\.8|97\.75\.15)6|9\.192\.252\.1)|7(?:8\.(?:3(?:3\.(?:170\.(?:85|93)|38\.178)|2\.223\.88)|2(?:07\.158\.230|36\.112\.56|18\.48\.23)|163\.105\.52)|(?:3\.200\.90\.19|6\.53\.233\.7)6|4\.137\.168\.212|5\.117\.144\.15|7\.67\.96\.244)|9(?:5\.1(?:(?:28\.253\.15|91\.184\.8)2|3(?:8\.195\.125|\.200\.218))|(?:2\.69\.200\.11|6\.46\.2\.22)8|3\.2(?:00\.126\.14|55\.143\.63)|0\.82\.89\.156|9\.255\.11\.29)|2(?:1\.(?:1(?:58\.198\.76|25\.63\.87)|22\.127\.17|49\.107\.2)|2\.11(?:2\.97\.124|5\.57\.26)|0\.132\.132\.119|5\.141\.204\.82|8\.61\.186\.135)|8(?:0\.2(?:11\.1(?:91\.25|79\.3)0|25\.131\.176)|7\.(?:51\.140\.170|32\.52\.161|4\.80\.188)|8\.252\.0\.237)|0(?:3\.9\.157\.181|6\.241\.3\.217)|4(?:9\.255\.3\.158|\.63\.74\.204)|\.226\.83\.81)|2(?:1(?:1\.(?:1(?:15\
.(?:127|68)\.32|47\.211\.16|74\.179\.80|96\.186\.53)|2(?:(?:38\.108\.11|22\.53\.8)3|06\.133\.94)|4(?:3\.149\.60|0\.135\.4)|58\.255\.121|36\.19\.58)|8\.(?:1(?:(?:53\.247\.6|94\.91\.23)8|45\.71\.192)|5(?:0\.1\.146|6\.32\.11)|232\.111\.227)|0\.(?:1(?:1(?:8\.26\.227|7\.6\.152)|68\.50\.16)|(?:245\.89\.6|51\.44\.19)9|91\.133\.143)|3\.(?:2(?:30\.128\.226|51\.186\.229|21\.9\.13)|1(?:71\.39\.154|86\.39\.43)|81\.164\.57)|7\.2(?:3\.2\.1(?:2[567]|0[47]|3[23]|5[35]|45|61)|00\.184\.87)|2\.4(?:8\.65\.34|9\.70\.48)|6\.153\.136\.125)|0(?:2\.(?:1(?:42\.203\.19|58\.39\.250)|43\.183\.227|71\.136\.200)|0\.(?:7(?:2\.11\.132|9\.27\.60)|247\.100\.178|142\.133\.21)|1\.(?:195\.239\.27|82\.216\.162|22\.7\.225|45\.114\.3)|3\.(?:2(?:28\.43\.207|36\.93\.142)|155\.102\.2)|4\.13\.169\.37|6\.71\.51\.153)|2(?:1\.(?:1(?:61\.197\.65|43\.46\.13)|214\.208\.226)|2\.(?:1(?:22\.79\.121|74\.163\.2)|236\.16\.14)))|9(?:1\.(?:2(?:18\.114\.204|35\.126\.92)|121\.184\.12)|5\.(?:131\.145\.200|51\.156\.218)|3\.15(?:7\.148\.
102|9\.160\.164)|4\.(?:23\.2\.185|83\.91\.53))|7(?:8\.138\.10(?:6\.(?:3[0289]|5[25]|44)|1\.(?:[57]|12))|2\.42\.224\.(?:[58]|1[0123579]|2[02])|4\.(?:122\.227\.124|9\.203\.186)|7\.106\.232\.178)|6(?:6\.(?:199\.228\.(?:2(?:0[012345678]|10)|19[6789])|84\.50\.133)|1\.(?:1(?:38\.104\.30|66\.55\.153)|80\.254\.220))|3(?:7\.(?:59\.(?:146\.2[125]|231\.22|36\.217)|122\.208\.18)|1\.(?:210\.47\.230|3\.243\.24))|4(?:6\.(?:105\.131\.(?:1[67]|20)|32\.235\.64)|9\.128\.40\.70|1\.137\.24\.4)|5(?:\.39\.2(?:20\.2(?:3[23]|26)|16\.50|5\.44)|8\.180\.26\.203)|8(?:(?:0\.36\.130\.13|1\.15\.172\.14)5|4\.15\.191\.254))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:2(?:1(?:1\.(?:1(?:15\.(?:127|68)\.32|47\.211\.16|74\.179\.80|96\.186\.53)|2(?:(?:38\.108\.11|22\.53\.8)3|06\.133\.94)|4(?:3\.149\.60|0\.135\.4)|58\.255\.121|36\.19\.58)|3\.(?:2(?:30\.128\.226|51\.186\.229|21\.9\.13)|1(?:71\.39\.154|92\.73\.136|86\.39\.43)|81\.164\.57)|7\.2(?:3\.(?:2\.1(?:2[5678]|0[47]|3[23]|5[35]|45|61)|12\.1(?:8[02]|96))|00\.184\.87)|8\.(?:1(?:(?:53\.247\.6|94\.91\.23)8|45\.71\.192)|232\.111\.227|56\.32\.11)|0\.(?:(?:245\.89\.6|51\.44\.19)9|1(?:17\.6\.152|68\.50\.16)|91\.133\.143)|2\.(?:227\.159\.133|49\.70\.48)|6\.153\.136\.125)|0(?:2\.(?:1(?:42\.203\.19|58\.39\.250)|43\.183\.227|71\.136\.200)|0\.(?:7(?:2\.11\.132|9\.27\.60)|247\.100\.178|142\.133\.21)|3\.(?:2(?:28\.43\.207|36\.93\.142)|155\.102\.2)|1\.(?:195\.239\.27|22\.7\.225|45\.114\.3)|6\.71\.51\.153)|2(?:2\.(?:1(?:22\.79\.121|74\.163\.2)|23(?:6\.16\.14|7\.5\.193))|1\.(?:214\.208\.226|143\.46\.13)|0\.9(?:4\.235\.200|3\.111\.47)))|1(?:7(?:8\.(?:3(?:3\.(
?:170\.(?:85|93)|38\.178)|2\.223\.88)|2(?:07\.158\.230|36\.112\.56|18\.48\.23)|163\.105\.52)|(?:3\.200\.90\.19|6\.53\.233\.7)6|4\.137\.168\.212|5\.117\.144\.15)|9(?:5\.1(?:(?:28\.253\.15|91\.184\.8)2|3(?:8\.195\.125|\.200\.218))|(?:2\.69\.200\.11|6\.46\.2\.22)8|3\.2(?:00\.126\.14|55\.143\.63)|0\.82\.89\.156|9\.255\.11\.29)|1(?:5\.(?:249\.63\.164|88\.119\.132|90\.96\.85)|4\.(?:141\.253\.134|207\.113\.55)|6\.(?:255\.164\.18|90\.162\.116)|2\.(?:186\.46\.107|90\.90\.16)|8\.97\.75\.156)|2(?:1\.(?:158\.198\.76|22\.127\.17|49\.107\.2)|2\.11(?:2\.97\.124|5\.57\.26)|5\.141\.204\.82|8\.61\.186\.135)|8(?:0\.2(?:11\.1(?:91\.25|79\.3)0|25\.131\.176)|8\.(?:127\.230\.28|252\.0\.237)|7\.32\.52\.161)|4(?:1\.105\.64\.(?:100|91)|9\.255\.3\.158|\.63\.74\.204)|0(?:3\.9\.157\.181|6\.241\.3\.217)|\.2(?:26\.83\.81|34\.6\.7)|53\.127\.236\.15)|9(?:1\.(?:2(?:18\.114\.204|35\.126\.92)|121\.184\.12)|5\.(?:131\.145\.200|51\.156\.218)|3\.15(?:7\.148\.102|9\.160\.164)|4\.(?:23\.2\.185|83\.91\.53))|7(?:8\.1
38\.10(?:6\.(?:3[028]|5[25]|44)|1\.(?:[57]|12))|2\.42\.224\.(?:1[012345679]|2[02]|5)|4\.(?:122\.227\.124|9\.203\.186)|7\.106\.232\.178)|6(?:6\.(?:199\.228\.(?:2(?:0[02345678]|1[013])|19[68])|84\.(?:50\.133|49\.9))|1\.(?:1(?:38\.104\.30|66\.55\.153)|80\.254\.220))|8(?:(?:(?:0\.36\.130\.1|6\.120\.239\.)3|1\.15\.172\.14)5|4\.(?:15\.191\.254|54\.160\.128)|2\.186\.161\.252|3\.3\.103\.227)|4(?:6\.(?:105\.131\.(?:1[67]|20)|32\.235\.64)|9\.128\.40\.70|1\.137\.24\.4)|3(?:7\.(?:122\.208\.18|59\.36\.217)|1\.(?:210\.47\.230|3\.243\.24))|5(?:\.39\.2(?:20\.2(?:3[123]|26)|16\.(?:34|50))|8\.180\.26\.203))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work