You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/09/25 08:58:16 UTC
svn commit: r1526118 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Wed Sep 25 06:58:15 2013
New Revision: 1526118
URL: http://svn.apache.org/r1526118
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1526118&r1=1526117&r2=1526118&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Wed Sep 25 06:58:15 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201309243
+## khop-sc-neighbors.cf v 201309252
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -101,7 +101,7 @@ score KHOP_SC_TOP_CIDR16 0.6 0.2 0.7 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:0(?:1\.15\.2(?:47|51)|3\.30\.7[23])|12\.90\.222|78\.20\.148|21\.54\.54|41\.0\.61)|2(?:11\.119\.86|21\.4\.142)|58\.254\.172|91\.218\.115|85\.25\.13)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:0(?:1\.15\.25[14]|3\.30\.7[23])|98\.50\.163|21\.54\.54|41\.0\.61)|2(?:11\.119\.86|21\.4\.142)|58\.254\.172|91\.218\.115|69\.64\.49|85\.25\.13)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.6 0 0.6 0
@@ -122,7 +122,7 @@ score KHOP_SC_CIDR24 0.6 0 0.6 0
# 0.4428/0 1.000 20130705@376k resume scores -> .6 0 .6 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:5\.60\.156|0\.84\.13)|98\.24\.17[45]|84\.82\.53)|2(?:1(?:3\.132\.241|6\.155\.17)|06\.214\.(?:71|95))|(?:75\.75\.24|85\.25\.15)0|41\.254\.5|69\.64\.49)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:5\.60\.156|0\.84\.13)|98\.24\.17[45]|78\.20\.148|84\.82\.53)|2(?:1(?:3\.132\.241|6\.155\.17)|06\.214\.(?:71|95))|(?:75\.75\.24|85\.25\.15)0|41\.254\.5)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0.5
@@ -178,7 +178,7 @@ score KHOP_SPAMHAUS_DROP_LE 2 0 2 0 #
# PSBL-neighbors: any /24 with 73+ (2/7, 29%) IPs in the PSBL (not SpamCop),
# as obtained from rsync://psbl-mirror.surriel.com::psbl/psbl.txt
-header KHOP_PSBL_CIDR24 X-Spam-Relays-Untrusted =~ / (?:by|ip)=(?-xism:\b(?:1(?:1(?:1\.(?:176\.(?:(?:12|8)[4567]|[46][89]?|5[01]?|7\d?)|68\.32)|5\.(?:63\.(?:[89]|1[012345])|58\.133)|6\.207\.(?:1[2345]|6[0123]|4[89]|5\d)|2\.(?:215\.(?:6[34]|44)|72\.13)|3\.56\.2(?:4[589]|5[01]|25)|0\.52\.[0123]|9\.36\.21[23])|8(?:3\.93\.(?:9[78]|115|69|84)|(?:2\.18\.22|8\.73\.25)2|6\.(?:123\.135|37\.203)|1\.66\.15[67])|0(?:3\.(?:2(?:0\.3[79]|8\.184)|30\.72|1\.69|5\.27)|9\.127\.8[01]|8\.174\.193)|2(?:5\.(?:44\.24[01234567]|60\.156)|3\.136\.106|4\.107\.127|2\.155\.44)|9(?:0\.(?:113\.21[01]|234\.10[56])|7\.252\.[01])|30\.193\.1(?:46|65)|63\.125\.14[45]|42\.234\.186)|2(?:7\.20\.(?:[89]|1(?:0[0123]?|[28][89]|[39][01]|7[6789]|1)|24[01234567]|4[0123]|5[6789])|0(?:3\.19(?:4\.115|1\.27)|2\.29\.17[67]|6\.246\.99)|1(?:6\.155\.20|2\.34\.12)|3\.106\.71)|58\.(?:50\.(?:1(?:[2345]|1[6789]|06)|6[89]|7[01])|19\.19[01])|4(?:1\.254\.[1258]|9\.0\.11[89])|79\.106\.109|85\.153\.71)\.[012]?\d{1,2}\b)/
+header KHOP_PSBL_CIDR24 X-Spam-Relays-Untrusted =~ / (?:by|ip)=(?-xism:\b(?:1(?:1(?:1\.(?:176\.(?:(?:12|8)[4567]|[46][89]?|5[01]?|7\d?)|68\.32)|5\.(?:63\.(?:[89]|1[012345])|58\.133)|6\.207\.(?:1[2345]|6[0123]|4[89]|5\d)|2\.(?:215\.(?:6[34]|44)|72\.13)|3\.56\.2(?:4[589]|5[01]|25)|0\.52\.[0123]|9\.36\.21[23])|8(?:3\.93\.(?:9[78]|115|69|84)|(?:2\.18\.22|8\.73\.25)2|6\.(?:123\.135|37\.203)|1\.66\.15[67])|0(?:3\.(?:2(?:0\.3[79]|8\.184)|30\.72|1\.69|5\.27)|9\.127\.8[01]|8\.174\.193)|2(?:5\.(?:44\.24[01234567]|60\.156)|3\.136\.106|4\.107\.127|2\.155\.44)|9(?:0\.(?:113\.21[01]|234\.10[56])|7\.252\.[01])|(?:42\.234\.18|77\.86\.4)6|30\.193\.1(?:46|65)|63\.125\.14[45])|2(?:7\.20\.(?:[89]|1(?:0[0123]?|[28][89]|[39][01]|7[6789]|1)|24[01234567]|4[0123]|5[6789])|0(?:3\.19(?:4\.115|1\.27)|2\.29\.17[67])|1(?:3\.55\.115|6\.155\.20|2\.34\.12)|3\.106\.71)|58\.(?:50\.(?:1(?:[2345]|1[6789])|6[89]|70)|19\.19[01])|4(?:1\.254\.[1258]|9\.0\.11[89])|79\.106\.109|85\.153\.71)\.[012]?\d{1,2}\b)/
describe KHOP_PSBL_CIDR24 Relay's IP/24 CIDR contains many PSBL hits
tflags KHOP_PSBL_CIDR24 nopublish
score KHOP_PSBL_CIDR24 2 0.6 2 0.6