You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/05/27 08:57:15 UTC
svn commit: r1486524 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Mon May 27 06:57:14 2013
New Revision: 1486524
URL: http://svn.apache.org/r1486524
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1486524&r1=1486523&r2=1486524&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Mon May 27 06:57:14 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201305262
+## khop-sc-neighbors.cf v 201305272
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -74,7 +74,7 @@ score KHOP_SC_CIDR16 1.0 0.2 1.0 0.2
# crap, still empty 20100410 bad scrape, script failed to populate rule
# crap, still empty 20110227 this is due to safety net exclusions -> 1 .2 1 .2
-header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b(?:1(?:13\.16|78\.12)7|222\.252)(?:\.[012]?\d{1,2}){2}\b)/
+header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b(?:1(?:13\.16|78\.12)7|222\.252|85\.105)(?:\.[012]?\d{1,2}){2}\b)/
describe KHOP_SC_TOP_CIDR16 Relay CIDR /16 leads SpamCop in worst /16s
tflags KHOP_SC_TOP_CIDR16 nopublish
score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0.4
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:7(?:3\.212\.250|4\.36\.167)|89\.108\.118|03\.30\.72|21\.54\.54)|2(?:08\.(?:71\.172|82\.114)|10\.51\.44)|6(?:6\.199\.224|1\.78\.109)|87\.236\.232|72\.42\.224)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:(?:03\.30\.7|13\.31\.4)2|89\.108\.118|74\.36\.167|21\.54\.54)|2(?:0(?:8\.(?:71\.172|82\.114)|3\.210\.83)|10\.51\.44)|6(?:6\.199\.224|1\.78\.109)|42\.121\.127)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:20\.(?:128\.2|84\.13)|12\.9(?:0\.90|7\.33)|84\.82\.154|03\.9\.158)|2(?:(?:21\.194\.12|\.139\.17)8|1(?:0\.21\.225|7\.198\.3)|03\.210\.83)|42\.121\.127|80\.36\.130)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:20\.(?:128\.2|84\.13)|12\.9(?:0\.90|7\.33)|78\.172\.152|84\.82\.154|03\.9\.158)|2(?:(?:21\.194\.12|\.139\.17)8|1(?:0\.21\.225|7\.198\.3))|8(?:7\.236\.232|0\.36\.130)|72\.42\.224)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:90\.90\.(?:1[678]|2[012])|185\.80\.100)|3\.(?:1(?:32\.128\.8|07\.43\.7)5|31\.42\.30)|1\.(?:67\.103\.180|93\.108\.194)|8\.(?:129\.166\.86|97\.196\.163)|7\.(?:102\.116\.253|20\.3\.231)|9\.1(?:61\.161\.188|93\.93\.25)|0\.93\.215\.186|5\.22\.80\.197)|8(?:9\.(?:(?:58\.251\.23|75\.63\.11)4|1(?:08\.118\.194|\.181\.53))|4\.82\.(?:1(?:5(?:9\.237|4\.51)|09\.14)|232\.167)|8\.(?:1(?:27\.230\.28|68\.46\.53)|252\.0\.237)|0\.(?:225\.131\.176|159\.216\.41)|5\.12\.14\.225|6\.226\.48\.16)|7(?:8\.(?:1(?:51\.68\.21|68\.43\.13)0|2(?:11\.46\.190|0\.148\.11))|3\.(?:192\.144\.105|212\.250\.230)|4\.36\.167\.116|7\.137\.0\.123)|9(?:5\.1(?:38\.195\.125|91\.184\.82)|9\.(?:180\.113\.116|255\.11\.29)|0\.(?:107\.140\.77|82\.89\.156)|4\.(?:106\.16\.6|9\.15\.13))|0(?:8\.(?:174\.62\.168|62\.62\.235)|3\.9\.15(?:7\.181|6\.89)|1\.44\.12\.250|9\.195\.23\.55)|2(?:1\.181\.251\.188|0\.50\.86\.3)|33\.242\.115\.44|42\.0\.46\.206)|2(?:0(?:2\.(?:1(?:0(?:9\
.133\.181|7\.224\.20)|42\.203\.19|58\.39\.250)|71\.136\.200|29\.241\.57)|8\.(?:82\.114\.(?:2[1469]|4[579]|39|51)|71\.172\.(?:8[45789]|9[1234])|113\.254\.39)|0\.(?:7(?:2\.11\.132|9\.27\.60)|142\.133\.21|31\.105\.172|206\.14\.26)|3\.(?:2(?:55\.15\.146|10\.83\.23)|93\.108\.142)|1\.(?:24\.129\.2|45\.114\.3)|4\.13\.169\.3[67]|9\.190\.73\.156)|1(?:0\.(?:2(?:1\.225\.2(?:4[25]|35)|45\.89\.69)|5(?:1\.44\.199|6\.23\.100))|7\.1(?:(?:2\.248|98\.3)\.238|1\.177\.26)|(?:9\.143\.207\.14|8\.56\.37\.25)0|3\.(?:230\.128\.226|171\.39\.154)|6\.15(?:3\.136\.125|8\.66\.190)|1\.1(?:47\.211\.16|15\.68\.32)|2\.6\.152\.211)|2(?:1\.(?:1(?:94\.128\.22[34]|32\.35\.7)|2(?:32\.247\.27|\.144\.135))|2\.(?:2(?:31\.57\.104|11\.91\.20)|174\.54\.164|92\.112\.66)|3\.(?:4\.(?:179\.153|233\.162)|25\.242\.62)|0\.(?:225\.253\.12|94\.235\.200))|4\.127\.201\.172|7\.50\.140\.133|\.139\.178\.81)|6(?:1\.(?:1(?:6(?:4\.42\.158|6\.55\.153)|75\.223\.142|87\.186\.150|55\.159\.9)|7(?:7\.210\.75|8\.109\.61)|28\.114\.3[3456])|6\.
(?:199\.22(?:4\.(?:[3478]|10)|7\.197)|96\.213\.13[48]|84\.49\.9)|4\.(?:120\.170\.138|71\.130\.190)|0\.(?:190\.25\.4|8\.63\.5)2|8\.115\.192\.7|9\.65\.43\.46)|8(?:(?:0\.(?:36\.130\.13|70\.2\.18)|4\.17\.27\.24)5|3\.(?:18\.234\.202|238\.208\.55|3\.103\.227)|7\.236\.232\.231|2\.99\.246\.10)|5(?:8\.(?:2(?:54\.168\.(?:5[6789]|6[0123])|13\.157\.68)|151\.149\.118)|9\.(?:34\.57\.88|60\.7\.146)|\.39\.220\.228)|9(?:2\.(?:255\.235\.215|51\.109\.182)|5\.(?:159\.105\.2|48\.24\.10)|1\.205\.52\.253)|7(?:2\.(?:42\.224\.(?:[4589]|1[0123])|35\.20\.131)|5\.127\.110\.39)|4(?:1\.211\.125\.123|2\.121\.127\.201|6\.182\.24\.130)|37\.206\.210\.130)\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:9(?:0\.90\.(?:1[678]|2[012])|7\.33\.153)|186\.46\.107)|(?:4\.207\.113\.5|9\.193\.93\.2)5|8\.(?:129\.166\.86|97\.196\.163)|5\.(?:88\.119\.132|22\.80\.197)|7\.(?:102\.116\.253|20\.3\.231)|3\.(?:132\.128\.85|31\.42\.30)|0\.165\.125\.152)|8(?:9\.(?:1(?:08\.118\.194|\.181\.53)|39\.35\.168|75\.63\.114)|8\.(?:1(?:27\.230\.28|68\.46\.53)|252\.0\.237)|4\.82\.1(?:5(?:9\.237|4\.51)|09\.14)|0\.(?:225\.131\.176|159\.216\.41)|5\.12\.14\.225|6\.226\.48\.16)|9(?:9\.(?:180\.113\.11[36]|255\.11\.29)|5\.1(?:38\.195\.125|91\.184\.82)|0\.(?:107\.140\.77|82\.89\.156)|4\.(?:106\.16\.6|9\.15\.13))|7(?:8\.(?:2(?:11\.46\.190|0\.148\.11)|168\.43\.130)|3\.(?:192\.144\.105|212\.250\.230)|7\.1(?:37\.0\.12|\.223\.10)3|4\.36\.167\.116)|0(?:8\.(?:174\.62\.168|62\.62\.235)|3\.9\.15(?:7\.181|6\.89)|1\.44\.12\.250|9\.195\.23\.55)|2(?:1\.181\.251\.188|0\.50\.86\.3)|33\.242\.115\.44|42\.0\.46\.206)|2(?:0(?:8\.(?:82\.114\.(?:4[4579]|2[179]|3[09]|51)|
71\.172\.(?:8[45789]|9[1234])|113\.254\.39)|2\.(?:1(?:09\.133\.181|42\.203\.19|58\.39\.250)|71\.136\.200|29\.241\.57)|3\.(?:2(?:55\.15\.146|10\.83\.23)|93\.108\.142)|0\.(?:7(?:2\.11\.132|9\.27\.60)|142\.133\.21)|9\.190\.73\.156|4\.13\.169\.37|1\.45\.114\.3)|1(?:0\.(?:2(?:1\.225\.2(?:3[2568]|4[245]|52)|45\.89\.69)|5(?:1\.44\.199|6\.23\.100))|1\.(?:1(?:47\.211\.16|15\.68\.32)|222\.53\.83)|3\.(?:230\.128\.226|171\.39\.154)|6\.15(?:3\.136\.125|8\.66\.190)|7\.1(?:1\.177\.26|98\.3\.238)|2\.6\.152\.211)|2(?:2\.(?:2(?:3(?:1\.57\.10|6\.16\.1)4|11\.91\.20)|174\.54\.164|92\.112\.66)|1\.(?:1(?:94\.128\.22[34]|32\.35\.7)|2(?:32\.247\.27|\.144\.135))|3\.4\.(?:179\.153|233\.162)|0\.94\.235\.200)|4\.127\.201\.172|7\.50\.140\.133|\.139\.178\.81)|6(?:1\.(?:1(?:6(?:4\.42\.158|6\.55\.153)|87\.186\.150|55\.159\.9)|28\.114\.3[3456]|78\.109\.61)|6\.(?:199\.22(?:4\.(?:[345678]|1[0134])|7\.19[57])|96\.213\.13[48]|84\.49\.9)|4\.(?:120\.170\.138|71\.130\.190)|0\.190\.25\.42|8\.115\.192\.7|9\.65\.43\.4
6)|8(?:(?:(?:1\.15\.172\.1|4\.17\.27\.2)4|0\.(?:36\.130\.13|70\.2\.18))5|3\.(?:18\.234\.202|238\.208\.55|3\.103\.227)|7\.236\.232\.231)|5(?:8\.(?:2(?:54\.168\.(?:5[6789]|6[0123])|13\.157\.68)|151\.149\.118)|\.39\.220\.228|9\.60\.7\.146)|7(?:2\.(?:42\.224\.(?:[4589]|1[012346])|35\.20\.131)|5\.127\.110\.39|4\.9\.203\.186)|9(?:2\.(?:255\.235\.215|51\.109\.182)|1\.205\.52\.253|5\.48\.24\.10)|4(?:2\.121\.127\.201|6\.182\.24\.130)|37\.206\.210\.130)\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work