You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/04/18 08:57:21 UTC
svn commit: r1469187 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Thu Apr 18 06:57:21 2013
New Revision: 1469187
URL: http://svn.apache.org/r1469187
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1469187&r1=1469186&r2=1469187&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Thu Apr 18 06:57:21 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201304172
+## khop-sc-neighbors.cf v 201304182
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.128\.2|1\.54\.54)|03\.(?:30\.72|9\.156)|19\.192\.252|99\.241\.187|76\.31\.36)|(?:59\.150\.25|67\.222\.14|46\.53\.19)5|21(?:7\.200\.184|0\.168\.50|1\.33\.121)|78\.138\.102)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:0(?:3\.(?:30\.72|9\.157)|8\.174\.195)|2(?:0\.128\.2|1\.54\.54)|12\.164\.62|76\.31\.36)|21(?:7\.200\.184|0\.168\.50)|(?:66\.199\.22|5\.255\.6)7|46\.53\.195|72\.42\.224)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:(?:(?:83\.221|20\.84)\.1|12\.97\.3)3|78\.33\.144)|2(?:08\.82\.114|10\.21\.225)|(?:91\.121\.25|80\.36\.13)0|72\.(?:42\.224|55\.179)|5\.39\.2(?:16|20)|66\.199\.228)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:9\.192\.252|2\.97\.33)|99\.241\.187|03\.9\.156|20\.84\.13)|2(?:08\.82\.114|10\.21\.225)|7(?:8\.138\.102|2\.55\.179)|5\.39\.2(?:16|20)|66\.199\.228|80\.36\.130)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:21(?:6\.181\.110|7\.218\.218)|90\.90\.1[67]|164\.62\.8)|5\.(?:238\.129\.149|31\.153\.215|88\.247\.131|94\.87\.218)|8\.(?:(?:219\.232\.24|97\.196\.16)3|129\.166\.86)|9\.1(?:9(?:2\.252\.1|3\.93\.25)|84\.214\.18)|4\.(?:141\.253\.13?4|207\.113\.55)|(?:3\.205\.159\.24|1\.89\.140\.)2|6\.(?:255\.164\.18|90\.162\.116)|7\.20\.3\.231)|9(?:5\.(?:1(?:3(?:8\.195\.125|\.200\.218)|91\.1(?:66\.25|84\.82)|28\.253\.152)|29\.81\.30)|9\.(?:2(?:41\.187\.233|55\.11\.29)|19\.117\.228)|4\.(?:177\.40\.195|213\.122\.34)|3\.2(?:43\.169\.66|55\.143\.63)|8\.91\.90\.3[15]|6\.41\.123\.236)|7(?:8\.(?:33\.(?:144\.1(?:4[17]|37)|23\.107|38\.178)|2(?:07\.158\.230|18\.48\.23))|3\.2(?:00\.90\.196|24\.125\.98)|4\.13(?:7\.168\.212|3\.169\.98))|2(?:1\.(?:1(?:81\.251\.188|4\.17\.220)|2(?:54\.228\.25|2\.127\.17)|78\.152\.51)|(?:(?:4\.243|5\.129)\.124\.20|2\.115\.57\.2)6)|8(?:8\.(?:1(?:2(?:7\.230\.28|8\.99\.94)|68\.46\.53)|252\.0\.237)|7\.(?:32\.52\.161|1
6\.28\.18)|0\.211\.179\.30|9\.38\.50\.28)|0(?:9\.123\.100\.56|3\.9\.157\.181|1\.44\.3\.50)|30\.193\.121\.162|41\.105\.64\.88)|2(?:1(?:0\.(?:1(?:18\.26\.183|68\.50\.16)|(?:245\.89\.6|51\.44\.19)9|48\.154\.253)|1\.(?:(?:147\.211\.1|206\.121\.6|33\.121\.19)6|99\.212\.154)|3\.(?:(?:192\.(?:73\.13|3\.6)|230\.128\.22)6|81\.164\.57)|2\.(?:227\.159\.133|6\.152\.211|49\.70\.48)|9\.(?:223\.252\.150|147\.172\.2)|7\.(?:200\.184\.87|17\.35\.146)|8\.(?:194\.91\.238|2\.0\.60)|6\.153\.136\.125)|0(?:2\.(?:1(?:42\.203\.19|04\.22\.42)|4(?:3\.44\.32|4\.53\.64)|71\.136\.200)|0\.(?:7(?:2\.11\.132|9\.27\.60)|247\.100\.178|142\.133\.21)|8\.82\.114\.(?:2[0123468]|4[02]|38)|9\.(?:105\.248\.|62\.115\.7)4|1\.(?:22\.7\.225|45\.114\.3))|2(?:2\.(?:1(?:22\.79\.121|74\.163\.2)|236\.16\.14)|0\.(?:110\.167\.22[78]|94\.235\.200)|1\.214\.2(?:08\.226|14\.187)))|9(?:4\.(?:2(?:42\.227\.2(?:20|49)|3\.2\.185)|1(?:38\.207\.154|00\.89\.158))|1\.(?:1(?:21\.(?:250\.218|184\.12)|02\.161\.10)|215\.156\.119)|5\.(?:51\.156\
.218|71\.126\.175|48\.24\.10)|3\.(?:157\.148\.102|89\.225\.96)|0\.83\.184\.211)|6(?:1\.(?:1(?:66\.55\.153|9\.97\.69)|252\.138\.195|80\.254\.220|98\.131\.141)|6\.(?:199\.22(?:8\.2(?:1[2456]|2[12])|7\.118)|84\.(?:50\.133|49\.9))|7\.(?:214\.170\.197|90\.21\.150)|4\.(?:15\.155\.49|20\.44\.140)|9\.90\.120\.188)|7(?:2\.(?:42\.224\.(?:2[34567]|18)|35\.20\.131|55\.179\.55|9\.150\.200)|8\.138\.10(?:2\.(?:2[789]|33)|1\.1)|(?:7\.106\.232\.17|9\.188\.87\.1)8|4\.(?:86\.101\.2|9\.203\.18)6|6\.74\.186\.237)|8(?:(?:2\.195\.224\.10|7\.236\.232\.23)1|(?:0\.36\.130\.13|3\.238\.208\.5)5|4\.(?:15\.191\.254|54\.160\.128))|5(?:\.39\.2(?:16\.(?:43|57|76|81)|20\.2(?:4[168]|32))|9\.150\.255\.35|8\.227\.21\.27)|3(?:7\.(?:59\.(?:182\.39|36\.217)|206\.210\.130)|1\.210\.47\.230)|4(?:6\.137\.52\.222|1\.137\.24\.4))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:21(?:6\.181\.110|7\.218\.218)|90\.90\.1[678]|164\.62\.8)|5\.(?:238\.129\.149|31\.153\.215|88\.247\.131|94\.87\.218)|8\.(?:(?:219\.232\.24|97\.196\.16)3|129\.166\.86)|9\.1(?:9(?:2\.252\.1|3\.93\.25)|84\.214\.18)|4\.(?:141\.253\.134|207\.113\.55)|3\.205\.159\.242|6\.90\.162\.116|7\.20\.3\.231)|9(?:5\.(?:1(?:3(?:8\.195\.125|\.200\.218)|91\.1(?:66\.25|84\.82)|28\.253\.152)|29\.81\.30)|9\.(?:2(?:41\.187\.233|55\.11\.29)|19\.117\.228)|8\.(?:91\.90\.3[15]|46\.147\.198)|4\.(?:177\.40\.195|213\.122\.34)|3\.2(?:43\.169\.66|55\.143\.63)|6\.41\.123\.236)|8(?:8\.(?:1(?:2(?:7\.230\.28|8\.99\.94)|68\.46\.53)|252\.0\.237)|0\.(?:182\.167\.68|211\.179\.30)|7\.(?:32\.52\.161|16\.28\.18)|9\.38\.50\.28)|2(?:1\.(?:1(?:81\.251\.188|4\.17\.220)|2(?:54\.228\.25|2\.127\.17)|78\.152\.51)|(?:(?:4\.243|5\.129)\.124\.20|2\.115\.57\.2)6)|7(?:8\.(?:2(?:07\.158\.230|18\.48\.23)|33\.(?:23\.107|38\.178))|3\.2(?:00\.90\.196|24\.125\.98)|6\.31\.36\
.197)|0(?:8\.174\.195\.165|9\.123\.100\.56|3\.9\.157\.181|1\.44\.3\.50)|4(?:1\.105\.64\.8|6\.0\.79\.19)8|58\.255\.1\.2(?:45|52)|30\.193\.121\.162)|2(?:1(?:1\.(?:2(?:0(?:6\.121\.6|2\.3\.15)6|41\.161\.131)|(?:147\.211\.1|33\.121\.19)6|99\.212\.154)|0\.(?:(?:245\.89\.6|51\.44\.19)9|48\.154\.253|168\.50\.16)|3\.(?:(?:192\.(?:73\.13|3\.6)|230\.128\.22)6|81\.164\.57)|2\.(?:227\.159\.133|6\.152\.211|49\.70\.48)|7\.(?:200\.184\.87|17\.35\.146)|8\.(?:194\.91\.238|2\.0\.60)|6\.153\.136\.125|9\.147\.172\.2)|0(?:2\.(?:1(?:42\.203\.19|04\.22\.42)|4(?:3\.44\.32|4\.53\.64)|71\.136\.200)|0\.(?:7(?:2\.11\.132|9\.27\.60)|247\.100\.178|142\.133\.21)|8\.82\.114\.(?:2[0123468]|3[78]|4[02])|1\.(?:22\.7\.225|45\.114\.3)|9\.62\.115\.74)|2(?:2\.(?:1(?:22\.79\.121|74\.163\.2)|236\.16\.14)|0\.(?:110\.167\.22[78]|94\.235\.200)|1\.214\.2(?:08\.226|14\.187)))|6(?:6\.(?:199\.22(?:8\.2(?:1[246]|2[12])|7\.11[78])|84\.(?:50\.133|49\.9))|1\.(?:1(?:66\.55\.153|9\.97\.69)|252\.138\.195|80\.254\.220)|7\.(?:2(?:1
4\.170\.19|22\.145\.4)7|90\.21\.150)|4\.(?:15\.155\.49|20\.44\.140)|9\.90\.120\.188)|9(?:1\.(?:1(?:21\.(?:250\.218|46\.86)|02\.161\.10)|215\.156\.119)|4\.(?:1(?:38\.207\.154|00\.89\.158)|23\.2\.185)|5\.(?:51\.156\.218|71\.126\.175|48\.24\.10)|3\.157\.148\.102|0\.83\.184\.211)|7(?:2\.(?:42\.224\.2[345679]|35\.20\.131|55\.179\.55|9\.150\.200)|8\.138\.10(?:2\.(?:2[789]|33)|1\.1)|(?:7\.106\.232\.17|9\.188\.87\.1)8|4\.(?:86\.101\.2|9\.203\.18)6|6\.74\.186\.237)|8(?:(?:2\.195\.224\.10|7\.236\.232\.23)1|(?:0\.36\.130\.13|3\.238\.208\.5)5|4\.(?:15\.191\.254|54\.160\.128)|1\.169\.156\.136)|5(?:\.(?:39\.2(?:16\.(?:8[13]|57|76)|20\.2(?:4[168]|32))|2(?:28\.74\.112|55\.67\.15))|9\.150\.255\.35|8\.227\.21\.27)|3(?:7\.(?:59\.(?:182\.39|36\.217)|206\.210\.130)|1\.210\.47\.230)|4(?:6\.137\.52\.222|1\.137\.24\.4))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work