You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/11/06 08:57:31 UTC
svn commit: r1539254 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Wed Nov 6 07:57:31 2013
New Revision: 1539254
URL: http://svn.apache.org/r1539254
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1539254&r1=1539253&r2=1539254&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Wed Nov 6 07:57:31 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 20131152
+## khop-sc-neighbors.cf v 20131162
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -101,7 +101,7 @@ score KHOP_SC_TOP_CIDR16 0.6 0.2 0.7 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:(?:(?:09\.235|21\.54)\.5|12\.97\.2)4|9(?:8\.24\.175|3\.26\.10)|73\.44\.169|84\.22\.172)|2(?:1(?:(?:6\.231\.14|0\.13\.8)0|1\.119\.86|8\.92\.249)|02\.117\.120))\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:0(?:3\.243\.50|9\.235\.54)|73\.44\.169|84\.22\.172|21\.54\.54|93\.26\.10)|21(?:(?:6\.231\.14|0\.13\.8)0|8\.92\.249)|77\.81\.106|5\.39\.217)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.6 0 0.6 0
@@ -122,7 +122,7 @@ score KHOP_SC_CIDR24 0.6 0 0.6 0
# 0.4428/0 1.000 20130705@376k resume scores -> .6 0 .6 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:(?:78\.124\.11|41\.0\.6)1|9(?:8\.24\.174|9\.96\.83)|1(?:2\.97\.24|0\.52\.0)|09\.169\.88|25\.60\.156)|21(?:7\.(?:13\.154|8\.255)|3\.132\.241)|4(?:6\.102\.186|9\.156\.191|1\.254\.5)|5\.39\.217|64\.79\.99)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:9(?:8\.24\.17[45]|9\.96\.83)|1(?:0\.52\.[02]|2\.97\.24)|(?:78\.124\.11|41\.0\.6)1|09\.169\.88|25\.60\.156)|21(?:7\.(?:13\.154|8\.255)|3\.132\.241)|4(?:6\.102\.186|9\.156\.191|1\.254\.5)|64\.79\.99)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0.5
@@ -142,7 +142,7 @@ score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:9(?:9\.(?:96\.83\.1(?:4[02356789]|5[01245679]|3[023469])|30\.13(?:6\.12[78]|7\.1[67]))|8\.24\.1(?:7(?:4\.16[37]|5\.[234]|8\.131|3\.80)|80\.91)|0\.107\.140\.77|3\.26\.10\.112|5\.252\.108\.6)|1(?:2\.(?:2(?:16\.55\.162|20\.224\.59)|184\.172\.244)|8\.(?:130\.107\.235|97\.196\.163)|9\.(?:201\.16\.211|37\.195\.59)|5\.82\.2(?:46\.163|27\.28)|1\.223\.112\.99|4\.247\.23\.66)|8(?:4\.(?:22\.(?:1(?:7(?:2\.14[15]|7\.51)|97\.216)|53\.201)|82\.179\.117)|0\.178\.56\.138|2\.54\.192\.243|8\.252\.0\.237|9\.112\.88\.65)|2(?:5\.(?:141\.142\.224|65\.110\.143|46\.24\.62)|2\.1(?:82\.28\.245|55\.7\.104)|1\.(?:22\.127|88\.54)\.17|4\.160\.35\.2)|0(?:9\.(?:169\.88\.1(?:5[27]|48)|235\.54\.219)|3\.(?:243\.50\.(?:7[45]|69)|9\.157\.126)|8\.62\.240\.104|1\.44\.3\.50)|7(?:7\.(?:1\.223\.73|20\.144\.7)|3\.212\.205\.158)|4(?:8\.223\.59\.187|1\.0\.61\.166|\.63\.74\.204))|2(?:1(?:1\.(?:1(?:19\.86\.14[47]|72\.251\.168|47\.211\.16)|23(?:3\.64\.110|2\.92\.23)|54\.17\.200
)|3\.(?:1(?:(?:71\.39\.15|95\.77\.11)4|32\.241\.13)|207\.41\.34)|(?:0\.(?:13\.80\.21|217\.56\.)|8\.92\.249\.16)2|7\.(?:8\.255\.(?:189|220)|13\.154\.155)|2\.113\.32\.199|6\.231\.140\.15)|0(?:2\.(?:1(?:(?:30\.114\.13|29\.216\.6|72\.37\.21)0|1(?:7\.120\.8[29]|8\.236\.178)|42\.203\.19)|7(?:1\.136\.200|9\.52\.53)|234\.40\.41|53\.13\.187)|0\.(?:7(?:2\.11\.132|9\.27\.60)|142\.133\.21)|3\.(?:171\.233\.243|234\.111\.248)|1\.116\.199\.34|8\.84\.135\.147)|2(?:1\.2(?:14\.2(?:08\.226|14\.187)|34\.24\.46)|2\.(?:239\.255\.70|99\.202\.239)|0\.122\.136\.155)|4\.237\.229\.37)|6(?:4\.79\.(?:99\.(?:2(?:4[026789]|3[789]|5[01])|1(?:6[01236789]|7[024]))|107\.13)|9\.198\.197\.156|5\.60\.15\.173|7\.90\.21\.150)|4(?:6\.1(?:02\.186\.(?:4[012345789]|5[012378]|3[4679]|6[02])|51\.22\.240)|9\.218\.4(?:2\.206|5\.181)|1\.137\.24\.4)|7(?:7\.(?:81\.106\.(?:1[12]|6)|106\.232\.178)|2\.(?:166\.187\.139|35\.20\.131)|6\.164\.199\.71|4\.51\.36\.155)|8(?:5\.1(?:85\.244\.101|7\.27\.110)|1\.30\.15(?:8\.141|6\.36)|3\.18\.234\.
202|4\.95\.244\.11)|5(?:\.39\.217\.(?:20[023]|199)|9\.124\.115\.88)|93\.1(?:8(?:4\.71\.66|8\.8\.67)|59\.160\.164)|37\.123\.98\.115)\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:9(?:9\.(?:96\.83\.1(?:4[02356789]|5[1245679]|3[023469])|30\.13(?:6\.12[78]|7\.1[67]))|8\.24\.1(?:7(?:4\.16[37]|5\.[234]|8\.131|3\.80)|80\.91)|0\.107\.140\.77|3\.26\.10\.112|5\.252\.108\.6)|1(?:2\.(?:2(?:16\.55\.162|20\.224\.59)|184\.172\.244)|8\.(?:130\.107\.235|97\.196\.163)|9\.(?:201\.16\.211|37\.195\.59)|5\.82\.2(?:46\.163|27\.28)|1\.223\.112\.99|4\.247\.23\.66)|2(?:5\.(?:141\.142\.224|65\.110\.143|46\.24\.62)|1\.(?:(?:22\.127|88\.54)\.17|134\.238\.129)|4\.(?:95\.155\.(?:5[239]|27|32)|160\.35\.2)|2\.1(?:82\.28\.245|55\.7\.104))|8(?:4\.(?:22\.(?:17(?:2\.14[15]|7\.51)|53\.201)|82\.1(?:79\.117|23\.85))|0\.178\.56\.138|2\.54\.192\.243|8\.252\.0\.237|9\.112\.88\.65)|0(?:3\.243\.50\.(?:7[458]|80)|9\.169\.88\.1(?:5[27]|48)|8\.62\.240\.104)|4(?:\.(?:63\.74\.204|0\.82\.10)|8\.223\.59\.187|1\.0\.61\.166)|7(?:3\.212\.205\.158|8\.168\.43\.130|7\.1\.223\.73))|2(?:1(?:1\.(?:1(?:7(?:2\.251\.168|4\.120\.123)|19\.86\.144|47\.211\.16)|23(?:2\.(
?:183\.58|92\.23)|3\.64\.110))|(?:0\.(?:13\.80\.21|217\.56\.)|8\.92\.249\.16)2|3\.1(?:(?:71\.39\.15|95\.77\.11)4|32\.241\.13)|7\.(?:8\.255\.(?:2(?:07|20)|189)|13\.154\.155)|2\.(?:113\.32\.19|72\.189\.14)9|6\.231\.140\.15)|0(?:2\.(?:1(?:(?:30\.114\.13|29\.216\.6|72\.37\.21)0|1(?:7\.120\.8[29]|8\.236\.178)|42\.203\.19|96\.96\.55)|7(?:1\.136\.200|9\.52\.53)|234\.40\.41|53\.13\.187)|0\.(?:7(?:2\.11\.132|9\.27\.60)|142\.133\.21)|3\.(?:171\.233\.243|234\.111\.248)|1\.116\.199\.34|8\.84\.135\.147)|2(?:1\.2(?:14\.2(?:08\.226|14\.187)|34\.24\.46)|0\.(?:122\.136\.155|94\.235\.200)|2\.(?:99\.202\.239|234\.3\.151))|4\.237\.229\.37)|6(?:4\.79\.(?:99\.(?:2(?:4[012678]|3[789]|5[01])|1(?:6[01236789]|7[024]))|107\.13)|9\.198\.197\.156|5\.60\.15\.173|7\.90\.21\.150)|7(?:7\.(?:81\.106\.(?:1[1278]|6)|106\.232\.178)|(?:6\.164\.199\.7|2\.35\.20\.13)1|4\.51\.36\.155)|4(?:6\.1(?:02\.186\.(?:4[012345789]|5[012378]|6[02])|51\.22\.240)|9\.218\.42\.206|1\.137\.24\.4)|8(?:(?:1\.30\.158\.14|4\.95\.244\.1)1|3\.18
\.234\.202|5\.185\.112\.6)|5(?:\.39\.217\.(?:20[023]|199)|9\.124\.115\.88)|93\.1(?:59\.160\.164|88\.8\.67)|37\.123\.98\.115)\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work