You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2014/03/10 07:57:17 UTC

svn commit: r1575845 - /spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf

Author: khopesh
Date: Mon Mar 10 06:57:16 2014
New Revision: 1575845

URL: http://svn.apache.org/r1575845
Log:
auto-generated rules

Modified:
    spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf

Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1575845&r1=1575844&r2=1575845&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Mon Mar 10 06:57:16 2014
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf	v 20140393
+## khop-sc-neighbors.cf	v 201403102
 ## Khopesh's syndication of SpamCop's top offenders and top offending networks.
 ## 
 ## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -101,7 +101,7 @@ score	 KHOP_SC_TOP_CIDR16  0.6 0.2 0.7 0
 
 
 # http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header	 KHOP_SC_CIDR24  Received =~ /(?-xism:\b(?:1(?:8(?:4\.(?:22\.197|82\.171)|0\.222\.124)|(?:49\.210\.13|98\.143\.12)8|73\.212\.205|22\.13\.132)|21(?:2\.67\.215|3\.233\.64)|7(?:4\.208\.99|2\.22\.74)|31\.220\.43)\.[012]?\d{1,2}\b)/
+header	 KHOP_SC_CIDR24  Received =~ /(?-xism:\b(?:1(?:8(?:4\.(?:82\.17[19]|22\.197)|0\.222\.124)|(?:49\.210\.13|98\.143\.12)8|73\.212\.205|22\.13\.132)|7(?:4\.208\.99|2\.22\.74)|212\.67\.215)\.[012]?\d{1,2}\b)/
 describe KHOP_SC_CIDR24  Relay CIDR /24 is among worst in SpamCop
 tflags	 KHOP_SC_CIDR24  nopublish
 score	 KHOP_SC_CIDR24  0.6 0 0.6 0
@@ -122,7 +122,7 @@ score	 KHOP_SC_CIDR24  0.6 0 0.6 0
 # 0.4428/0      1.000 20130705@376k  resume scores -> .6 0 .6 0
 
 
-header	 KHOP_SC_TOP_CIDR24  Received =~ /(?-xism:\b(?:1(?:8(?:0\.2(?:22\.12[13]|04\.193)|4\.(?:82\.179|22\.53)|1\.66\.15[67]|3\.182\.39|8\.162\.65)|2(?:3\.50\.208|5\.60\.156|0\.84\.13)|9(?:0\.234\.10[56]|8\.143\.150)|0(?:9\.188\.12[67]|3\.25\.146)|17\.19\.7[25])|2(?:17\.76\.7[48]|00\.146\.61)|7(?:8\.25\.12[01]|7\.93\.241)|9(?:1\.218\.24|4\.20\.22)4|31\.(?:192\.111|220\.44))\.[012]?\d{1,2}\b)/
+header	 KHOP_SC_TOP_CIDR24  Received =~ /(?-xism:\b(?:1(?:8(?:0\.2(?:22\.12[13]|04\.193)|1\.66\.15[67]|3\.182\.39|4\.22\.53)|2(?:3\.50\.208|5\.60\.156|0\.84\.13)|9(?:0\.234\.10[56]|8\.143\.150)|17\.19\.7[25]|03\.25\.146)|2(?:17\.76\.7[48]|00\.146\.61)|7(?:8\.25\.12[01]|7\.93\.241)|31\.(?:220\.4[34]|192\.111)|9(?:1\.218\.24|4\.20\.22)4)\.[012]?\d{1,2}\b)/
 describe KHOP_SC_TOP_CIDR24  Relay CIDR /24 leads SpamCop in worst /24s
 tflags	 KHOP_SC_TOP_CIDR24  nopublish
 score	 KHOP_SC_TOP_CIDR24  1.7 0.5 1.7 0.5
@@ -178,7 +178,7 @@ score	 KHOP_SPAMHAUS_DROP_LE	2 0 2 0 	# 
 
 # PSBL-neighbors:  any /24 with 73+ (2/7, 29%) IPs in the PSBL (not SpamCop),
 # as obtained from rsync://psbl-mirror.surriel.com::psbl/psbl.txt
-header	 KHOP_PSBL_CIDR24	X-Spam-Relays-Untrusted =~ / (?:by|ip)=(?-xism:\b(?:1(?:1(?:1\.176\.(?:[67]|(?:12|8)[4567]|4[89]?|5[01]?)|6\.207\.(?:6[0123]|4[89]|5\d)|5\.63\.(?:1[124]|9)|4\.108\.203|2\.215\.44)|8(?:6\.(?:1(?:3\.[01234567]|22\.4[4567])|37\.203)|1\.66\.15[67]|8\.73\.252|3\.95\.67)|9(?:0\.(?:113\.20[89]|234\.10[56])|7\.252\.1|9\.19\.92)|2(?:(?:3\.136\.10|5\.60\.15)6|2\.155\.34)|0(?:3\.25(?:1\.157|3\.23)|9\.127\.8[06])|7(?:1\.80\.1(?:6[89]|7[01])|7\.11\.55)|30\.193\.14[67])|2(?:7\.20\.(?:[89]|1(?:0[0123]?|[28][89]|[39][01]|7[6789]|1)|24[01234567]|4[0123]|5[6789])|0(?:2\.29\.17[67]|1\.220\.242|3\.191\.26)|12\.(?:34\.12|5\.158)|4\.244\.23)|58\.5(?:0\.1(?:[2345]|0[456789]|1\d)|4\.18[4567])|9(?:5\.83\.2(?:49|53)|4\.230\.93)|41\.254\.[2568]|79\.106\.109|31\.210\.91)\.[012]?\d{1,2}\b)/
+header	 KHOP_PSBL_CIDR24	X-Spam-Relays-Untrusted =~ / (?:by|ip)=(?-xism:\b(?:1(?:1(?:1\.176\.(?:[67]|(?:12|8)[4567]|4[89]?|5[01]?)|6\.207\.(?:6[0123]|4[89]|5\d)|(?:2\.215\.[46]|5\.63\.1)4|4\.108\.203)|8(?:6\.(?:1(?:3\.[01234567]|22\.4[4567])|37\.203)|1\.66\.15[67]|8\.73\.252)|9(?:0\.(?:113\.20[89]|234\.10[56])|2\.95\.63|7\.252\.1|9\.19\.92)|0(?:3\.2(?:5(?:1\.157|3\.23)|40\.252)|9\.127\.8[06])|7(?:1\.80\.1(?:6[89]|7[01])|7\.(?:54\.147|11\.55))|2(?:(?:3\.136\.10|5\.60\.15)6|2\.155\.34)|30\.193\.1(?:4[67]|65)|54\.65\.32)|2(?:7\.20\.(?:[89]|1(?:0[0123]?|[28][89]|[39][01]|7[6789]|1)|24[01234567]|4[0123]|5[6789])|0(?:1\.220\.24[23]|2\.29\.17[67]|3\.191\.26)|12\.5\.158|4\.244\.23)|5(?:8\.5(?:0\.1(?:[2345]|0[456789]|1\d)|4\.18[4567])|9\.55\.253)|9(?:5\.83\.2(?:49|53)|4\.230\.93)|41\.254\.[2568]|79\.106\.109|31\.210\.91)\.[012]?\d{1,2}\b)/
 describe KHOP_PSBL_CIDR24	Relay's IP/24 CIDR contains many PSBL hits
 tflags	 KHOP_PSBL_CIDR24	nopublish
 score	 KHOP_PSBL_CIDR24	2 0.6 2 0.6