You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/04/25 08:57:19 UTC

svn commit: r1475646 - /spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf

Author: khopesh
Date: Thu Apr 25 06:57:18 2013
New Revision: 1475646

URL: http://svn.apache.org/r1475646
Log:
auto-generated rules

Modified:
    spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf

Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1475646&r1=1475645&r2=1475646&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Thu Apr 25 06:57:18 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf	v 201304242
+## khop-sc-neighbors.cf	v 201304252
 ## Khopesh's syndication of SpamCop's top offenders and top offending networks.
 ## 
 ## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -92,7 +92,7 @@ score	 KHOP_SC_TOP_CIDR16  2.0 0.3 2.0 0
 
 
 # http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header	 KHOP_SC_CIDR24  Received =~ /(?-xism:\b(?:1(?:0(?:3\.(?:30\.72|9\.156)|1\.101\.146|8\.174\.195)|12\.9(?:0\.197|7\.33)|88\.40\.127|21\.54\.54)|5(?:8\.25(?:3\.216|4\.168)|\.39\.216)|2(?:17\.200\.184|04\.45\.139)|46\.53\.195|72\.46\.152)\.[012]?\d{1,2}\b)/
+header	 KHOP_SC_CIDR24  Received =~ /(?-xism:\b(?:1(?:0(?:3\.(?:30\.72|9\.156)|1\.101\.146)|(?:12\.90\.19|88\.40\.12)7|63\.177\.112|21\.54\.54)|2(?:17\.200\.184|04\.45\.139)|7(?:2\.46\.152|0\.32\.34)|58\.25(?:3\.216|4\.168)|81\.169\.156|46\.53\.195)\.[012]?\d{1,2}\b)/
 describe KHOP_SC_CIDR24  Relay CIDR /24 is among worst in SpamCop
 tflags	 KHOP_SC_CIDR24  nopublish
 score	 KHOP_SC_CIDR24  0.1 0 0.1 0
@@ -111,7 +111,7 @@ score	 KHOP_SC_CIDR24  0.1 0 0.1 0
 # 0.4157/0.5009 0.454 20110227  something is wrong here! -> .1 0 .1 0
 
 
-header	 KHOP_SC_TOP_CIDR24  Received =~ /(?-xism:\b(?:1(?:1(?:2\.9(?:0\.90|7\.33)|0\.52\.16)|78\.172\.(?:1(?:8[36]|53)|229)|20\.(?:128\.2|84\.13))|2(?:1(?:3\.230\.128|0\.21\.225)|08\.82\.114|\.139\.178)|8(?:1\.169\.156|0\.36\.130)|66\.199\.228)\.[012]?\d{1,2}\b)/
+header	 KHOP_SC_TOP_CIDR24  Received =~ /(?-xism:\b(?:1(?:1(?:2\.9(?:0\.90|7\.33)|0\.52\.1[67])|78\.172\.(?:1(?:5[23]|8[36])|229)|20\.(?:128\.2|84\.13))|2(?:1(?:3\.230\.128|0\.21\.225)|08\.82\.114|\.139\.178)|66\.199\.228|80\.36\.130)\.[012]?\d{1,2}\b)/
 describe KHOP_SC_TOP_CIDR24  Relay CIDR /24 leads SpamCop in worst /24s
 tflags	 KHOP_SC_TOP_CIDR24  nopublish
 score	 KHOP_SC_TOP_CIDR24  2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score	 KHOP_SC_TOP_CIDR24  2.7 0.5 2.7 0
 
 
 # http://www.spamcop.net/w3m?action=hoshame
-header	 KHOP_SC_TOP200  Received =~ /(?-xism:\b(?:1(?:7(?:6\.(?:31\.36\.(?:2(?:08|16)|197)|53\.233\.76)|8\.(?:207\.158\.230|63\.165\.212|33\.38\.178)|3\.2(?:12\.240\.245|00\.90\.196)|4\.1(?:38\.172\.50|42\.104\.5)|5\.(?:196\.73\.18|45\.10\.13)9|7\.67\.96\.244)|1(?:2\.(?:1(?:8(?:5\.80\.100|6\.46\.107)|64\.62\.8)|9(?:0\.90\.1[6789]|7\.33\.45)|217\.218\.218)|5\.(?:249\.63\.164|71\.238\.71)|9\.1(?:84\.214\.18|92\.252\.1)|4\.141\.253\.134|7\.20\.3\.231)|9(?:9\.(?:2(?:41\.187\.233|55\.11\.29)|30\.136\.12[34])|5\.1(?:91\.1(?:66\.25|84\.82)|28\.253\.152)|8\.(?:46\.147\.198|50\.164\.217)|0\.25\.218\.102|2\.210\.232\.28|3\.255\.143\.63)|2(?:1\.(?:1(?:81\.237\.251|4\.17\.220)|78\.152\.51)|3\.1(?:10\.183\.106|6\.252\.77)|4\.243\.124\.206)|8(?:8\.(?:1(?:65\.145\.21|27\.230\.2)8|40\.127\.86)|7\.(?:32\.52\.161|4\.80\.188)|0\.225\.131\.176)|0(?:8\.174\.195\.(?:182|227)|3\.9\.157\.181|6\.241\.3\.217)|5(?:8\.255\.1\.2(?:4[56]|5[02])|3\.127\.236\.15)|4(?:6\.0\.79\.19[78]|9\.255\.3\.158)|63\.17
 7\.112\.(?:110|2))|2(?:1(?:1\.(?:2(?:0(?:6\.1(?:21\.66|33\.94)|2\.3\.156)|41\.161\.131|38\.245\.28)|1(?:06\.90\.165|47\.211\.16|74\.179\.80|15\.68\.32)|33\.121\.196|58\.255\.121)|0\.(?:2(?:1\.225\.2(?:3[023456789]|4[012345678]|5[0234]|2[89])|45\.89\.69)|1(?:17\.6\.152|68\.50\.16)|51\.44\.199)|8\.(?:1(?:45\.71\.192|94\.91\.238)|2(?:2\.17\.235|\.0\.60)|38\.12\.150)|7\.(?:200\.184\.87|17\.35\.146)|3\.2(?:30\.128\.226|21\.9\.13)|6\.153\.136\.125|2\.6\.152\.211)|0(?:0\.(?:247\.100\.178|142\.133\.21|72\.11\.132)|8\.82\.114\.(?:4[13456789]|3[79]|5[01]|29)|2\.(?:142\.203\.19|71\.136\.200)|1\.(?:195\.239\.27|22\.7\.225)|9\.223\.35\.16[24]|3\.255\.15\.146|4\.45\.139\.184)|2(?:2\.(?:1(?:22\.79\.121|74\.163\.2)|236\.16\.14)|0\.94\.235\.200)|\.139\.178\.(?:184|81))|6(?:6\.(?:199\.22(?:8\.(?:19[5678]|20[02])|7\.117)|84\.50\.133)|1\.(?:16(?:4\.42\.158|6\.55\.153)|98\.131\.141)|9\.90\.120\.188)|5(?:8\.25(?:4\.168\.(?:5[68]|6[02])|3\.216\.136)|\.(?:39\.216\.(?:8[236]|37|58)|255\.67\.15)|0\.7
 4\.242\.227|4\.228\.53\.251)|8(?:(?:0\.36\.130\.13|3\.238\.208\.5)5|4\.(?:15\.191\.254|54\.160\.128)|1\.169\.156\.136|7\.236\.232\.231|9\.222\.171\.219)|7(?:2\.(?:46\.152\.13[12]|35\.20\.131)|9\.1(?:10\.131\.173|88\.87\.18)|0\.32\.34\.7[02]|7\.106\.232\.178|8\.47\.186\.105)|9(?:1\.121\.(?:234\.4[15]|184\.131|46\.86)|3\.157\.148\.102|4\.102\.53\.200|5\.71\.126\.175)|3(?:7\.(?:206\.210\.130|59\.36\.217)|1\.(?:210\.47\.23|41\.112\.6)0)|41\.137\.24\.4)\b)/
+header	 KHOP_SC_TOP200  Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:9(?:0\.90\.1[6789]|7\.33\.45)|18(?:5\.80\.100|6\.46\.107)|217\.218\.218)|5\.(?:249\.63\.164|71\.238\.71|94\.87\.218)|0\.1(?:65\.125\.152|70\.36\.4)|9\.1(?:84\.214\.18|93\.93\.25)|4\.141\.253\.134|7\.211\.91\.147)|7(?:8\.(?:(?:163\.105\.5|63\.165\.21)2|207\.158\.230)|6\.(?:31\.36\.2(?:08|16)|53\.233\.76)|3\.2(?:12\.240\.245|08\.133\.67)|4\.1(?:38\.172\.50|42\.104\.5)|5\.(?:196\.73\.18|45\.10\.13)9|7\.67\.96\.244)|9(?:9\.(?:180\.113\.(?:100|98)|30\.136\.12[34]|255\.11\.29)|(?:5\.128\.253\.15|0\.25\.218\.10)2|2\.(?:210\.232\.28|95\.60\.193)|3\.255\.143\.63|8\.50\.164\.217)|2(?:1\.(?:1(?:81\.2(?:37\.251|51\.188)|4\.17\.220)|254\.228\.25|78\.152\.51)|3\.1(?:10\.183\.106|6\.252\.77)|4\.243\.124\.206|5\.63\.65\.45)|8(?:8\.(?:1(?:65\.145\.21|27\.230\.2)8|40\.127\.86)|7\.(?:32\.52\.161|4\.80\.188)|0\.225\.131\.176|2\.237\.2\.115)|0(?:8\.174\.195\.(?:182|227)|3\.9\.157\.181|6\.241\.3\.217)|5(?:8\.255\.1\.2(?:46|50)|3\.127
 \.236\.15)|4(?:6\.0\.79\.(?:197|210)|9\.255\.3\.158)|63\.177\.112\.(?:1[01]0|2))|2(?:1(?:1\.(?:2(?:0(?:6\.1(?:21\.66|33\.94)|2\.3\.156)|41\.161\.131|38\.245\.28)|1(?:06\.90\.165|74\.179\.80|15\.68\.32)|33\.121\.196|58\.255\.121)|0\.(?:21(?:\.225\.2(?:3[023456789]|5[0234]|2[89]|4\d)|0\.115\.249)|1(?:17\.6\.152|68\.50\.16)|51\.44\.199)|8\.(?:1(?:45\.71\.192|94\.91\.238)|2(?:2\.17\.235|\.0\.60)|38\.12\.150)|7\.(?:200\.184\.87|198\.3\.238)|3\.2(?:30\.128\.226|21\.9\.13))|0(?:8\.82\.114\.(?:4[13456789]|5[0135]|[23]9)|0\.(?:247\.100\.178|142\.133\.21)|9\.223\.3(?:5\.16[24]|6\.226)|3\.255\.15\.146|4\.45\.139\.184|1\.22\.7\.225)|2(?:2\.(?:1(?:22\.79\.121|74\.163\.2)|236\.16\.14)|0\.94\.235\.200)|\.139\.178\.(?:184|81)|7\.54\.248\.223)|5(?:8\.25(?:4\.168\.(?:5[6789]|6[02])|3\.216\.13[026])|\.(?:39\.216\.(?:8[26]|37|58)|255\.67\.15)|0\.74\.242\.227|4\.228\.53\.251)|6(?:1\.(?:16(?:4\.42\.158|6\.55\.153)|98\.131\.141)|6\.199\.228\.(?:19[5678]|20[02])|5\.181\.127\.10[68]|4\.235\.49\.20[2
 4])|7(?:0\.32\.34\.7[0246]|2\.46\.152\.13[12]|7\.106\.232\.178|9\.110\.131\.173|8\.47\.186\.105)|9(?:1\.121\.(?:234\.4[15]|184\.131|46\.86)|3\.157\.148\.102|4\.102\.53\.200|5\.71\.126\.175)|8(?:1\.169\.156\.136|7\.236\.232\.231|9\.222\.171\.219|0\.36\.130\.135|4\.15\.191\.254)|3(?:1\.41\.112\.60|7\.59\.36\.217)|41\.137\.24\.4)\b)/
 describe KHOP_SC_TOP200  Relay listed in SpamCop top 200 spammer IPs
 tflags	 KHOP_SC_TOP200  nopublish
 score	 KHOP_SC_TOP200  4 0 4 0	# unnecessary if DNSBLs work