You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/12/26 08:57:14 UTC
svn commit: r1553459 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Thu Dec 26 07:57:13 2013
New Revision: 1553459
URL: http://svn.apache.org/r1553459
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1553459&r1=1553458&r2=1553459&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Thu Dec 26 07:57:13 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201312252
+## khop-sc-neighbors.cf v 201312262
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -101,7 +101,7 @@ score KHOP_SC_TOP_CIDR16 0.6 0.2 0.7 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:2\.9(?:1\.217|0\.93)|5\.80\.40)|98\.143\.132|21\.54\.54)|2(?:1(?:6\.231\.136|7\.13\.154)|07\.210\.106|22\.100\.234)|58\.254\.1(?:68|72))\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:2\.90\.(?:37|93)|5\.80\.40)|21\.54\.5[48]|80\.149\.96)|58\.25(?:4\.1(?:68|72)|1\.146)|2(?:22\.100\.23|17\.13\.15)4|88\.196\.63)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.6 0 0.6 0
@@ -122,7 +122,7 @@ score KHOP_SC_CIDR24 0.6 0 0.6 0
# 0.4428/0 1.000 20130705@376k resume scores -> .6 0 .6 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:(?:1\.17\.12|4\.95\.15)5|5\.60\.156|0\.84\.13)|0(?:1\.(?:50\.12|8\.113)|3\.246\.195)|8(?:1\.66\.15[67]|0\.204\.235)|9(?:0\.234\.106|8\.143\.150)|57\.250\.132)|8(?:0\.193\.214|8\.196\.63)|31\.1(?:92\.108|4\.23)|213\.135\.113|94\.20\.224)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:(?:1\.17\.12|4\.95\.15)5|5\.60\.156|0\.84\.13)|9(?:8\.143\.1(?:32|50)|0\.234\.10[56])|0(?:1\.(?:50\.12|8\.113)|3\.20\.8)|81\.66\.15[67]|57\.250\.132|15\.80\.46)|(?:80\.193\.21|94\.20\.22)4|31\.1(?:92\.108|4\.23)|213\.135\.113|41\.254\.5)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0.5
@@ -142,7 +142,7 @@ score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:2(?:1(?:6\.86\.25|7\.161\.)3|20\.31\.13[23])|9(?:1\.217\.19[6789]|0\.93\.[123]|6\.24\.3)|184\.172\.244)|8\.(?:4(?:5\.123\.85|6\.127\.36|1\.157\.3)|163\.156\.109|69\.205\.202|97\.95\.185)|5\.(?:8(?:0\.(?:4(?:6\.190|0\.38)|39\.238)|8\.119\.132)|178\.76\.13)|9\.(?:110\.108\.92|201\.141\.81|42\.147\.114)|(?:0\.189\.168\.17|7\.102\.101\.21)1|4\.(?:141\.253\.14|247\.23\.66)|6\.193\.90\.26)|2(?:1\.(?:1(?:3(?:4\.(?:238\.12|190\.5)9|9\.233\.90)|7\.125\.(?:1[234567]|20))|78\.119\.193)|4\.95\.155\.(?:5[289]|27|32)|2\.49\.119\.188|5\.131\.29\.100|0\.105\.0\.53)|9(?:8\.143\.1(?:50\.2(?:3[01234569]|2[679]|5[012]|47)|28\.13[39]|32\.23[57])|2\.237\.180\.100|0\.82\.89\.156)|8(?:0\.(?:149\.96\.1(?:69|70)|204\.235\.165)|4\.(?:82\.123\.85|22\.53\.19)|8\.35\.136\.254|3\.98\.235\.12)|7(?:(?:3\.212\.205\.15|8\.32\.92\.9)8|7\.80\.104\.52)|0(?:1\.(?:8\.113\.149|12\.33\.15)|6\.3\.32\.153)|31\.130\.69\.218|\.234\.38\.106)|2(?:1(?:1\.(?:23(?:2\.(?
:183\.58|92\.23)|3\.64\.110|7\.20\.39)|1(?:69\.224\.17|76\.76\.198))|8\.(?:1(?:1\.167\.126|07\.4\.117)|56\.49\.2)|0\.(?:183\.179\.(?:38|45)|51\.37\.162)|(?:2\.144\.254|9\.140\.69)\.122|3\.135\.113\.197|6\.231\.136\.93|7\.13\.154\.155)|2(?:2\.(?:1(?:0(?:0\.234\.251|9\.130\.95)|6\.40\.230)|236\.16\.14|73\.93\.153)|1\.(?:2(?:14\.2(?:08\.226|14\.187)|32\.144\.164)|165\.38\.226)|0\.(?:94\.235\.200|68\.224\.45))|0(?:2\.(?:2(?:07\.1\.234|34\.40\.41)|194\.119\.69|82\.202\.228|71\.98\.62)|(?:0\.111\.103|1\.77\.202)\.68|3\.156\.207\.249|7\.210\.106\.153)|3\.253\.52\.134)|8(?:(?:2\.117\.194\.22|5\.25\.153\.1)9|8\.(?:196\.63\.25|85\.228\.66)|0\.193\.214\.226|9\.208\.155\.170|1\.211\.80\.22)|9(?:(?:2\.50\.155\.21|4\.77\.199\.14)8|3\.1(?:57\.148\.102|84\.71\.66)|1\.247\.160\.10|5\.211\.135\.83)|31\.1(?:4\.23\.(?:[45]|1(?:4[023456789]|5\d?|3\d|60?|29|7))|92\.108\.1(?:[37][89]|8[01]|58|60))|4(?:9\.(?:218\.4(?:0\.27|7\.95)|1\.224\.9)|1\.(?:137\.24\.4|63\.166\.3)|6\.115\.94\.169)|6(?:0\.196\.143\.153
|9\.198\.197\.156|1\.38\.186\.117|7\.90\.21\.150)|5(?:8\.12(?:0\.225\.155|6\.157\.18)|9\.1(?:88\.133\.198|1\.98\.232))|7(?:7\.(?:106\.232\.178|237\.252\.2)|2\.35\.20\.131|6\.164\.212\.6))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:2(?:1(?:6\.(?:105\.90|86\.253|46\.75)|7\.161\.3)|20\.31\.13[23])|9(?:1\.217\.19[6789]|0\.93\.[123])|184\.172\.244)|8\.(?:4(?:6\.127\.36|1\.157\.3)|97\.(?:196\.163|95\.185)|163\.156\.109|69\.205\.202)|5\.(?:8(?:0\.(?:4(?:6\.190|0\.38)|39\.238)|8\.119\.132)|178\.76\.13)|9\.(?:110\.108\.92|201\.141\.81|42\.147\.114)|(?:0\.189\.168\.17|7\.102\.101\.21)1|4\.(?:141\.253\.14|247\.23\.66)|6\.193\.90\.26)|2(?:1\.(?:1(?:3(?:4\.(?:238\.12|190\.5)9|9\.233\.90)|7\.125\.(?:1[234567]|20))|78\.119\.193)|4\.(?:95\.155\.(?:5[28]|27|32)|160\.35\.2)|2\.49\.119\.188|5\.131\.29\.100|0\.105\.0\.53)|9(?:8\.143\.1(?:50\.2(?:3[0124569]|5[012]|2[79]|47)|32\.23[57]|28\.139)|(?:0\.(?:54\.13\.10|82\.89\.15)|4\.106\.16\.)6|2\.237\.180\.100|5\.205\.237\.15)|8(?:4\.(?:22\.(?:197\.216|53\.19)|82\.123\.85)|0\.(?:149\.96\.1(?:69|70)|204\.235\.165)|8\.(?:35\.136\.254|168\.46\.53)|3\.98\.235\.12)|7(?:(?:3\.212\.205\.15|8\.32\.92\.9)8|7\.80\.104\.52)|0(?:1\.
(?:8\.113\.149|12\.33\.15)|6\.3\.32\.153)|(?:62\.242\.171\.15|31\.130\.69\.21)8|4(?:8\.223\.59\.140|\.63\.74\.204))|2(?:1(?:1\.(?:23(?:2\.(?:183\.58|92\.23)|3\.64\.110|7\.20\.39)|169\.224\.17)|0\.(?:183\.179\.(?:38|45)|51\.37\.162|0\.203\.76)|8\.(?:1(?:1\.167\.126|07\.4\.117)|56\.49\.2)|(?:2\.144\.254|9\.140\.69)\.122|3\.135\.113\.197|7\.13\.154\.155)|2(?:2\.(?:10(?:0\.234\.251|9\.130\.95)|236\.16\.14|73\.93\.153)|1\.2(?:14\.2(?:08\.226|14\.187)|32\.144\.164)|0\.(?:94\.235\.200|68\.224\.45))|0(?:2\.(?:1(?:42\.203\.1|94\.119\.6)9|2(?:07\.1\.234|34\.40\.41)|82\.202\.228|71\.98\.62)|1\.(?:116\.199\.34|77\.202\.68)|0\.111\.103\.68)|3\.253\.52\.134)|9(?:(?:2\.50\.155\.21|4\.77\.199\.14)8|5\.(?:154\.245\.144|211\.135\.83)|3\.1(?:57\.148\.102|84\.71\.66)|1\.247\.160\.10)|8(?:(?:2\.117\.194\.22|5\.25\.153\.1)9|8\.(?:196\.63\.25|85\.228\.66)|0\.193\.214\.226|1\.211\.80\.22)|31\.1(?:4\.23\.(?:[45]|1(?:3[123456789]|4[023456789]|5\d?|60?|29|7))|92\.108\.1(?:[37][89]|8[01]))|4(?:9\.(?:218\.4(?:0
\.27|7\.95)|1\.224\.[79])|1\.(?:137\.24\.4|63\.166\.3)|6\.115\.94\.169)|6(?:0\.196\.(?:143\.153|58\.189)|9\.198\.197\.156|1\.38\.186\.117|7\.90\.21\.150)|7(?:7\.(?:106\.232\.178|237\.252\.2)|2\.35\.20\.131|6\.164\.212\.6)|5(?:8\.12(?:0\.225\.155|6\.157\.18)|9\.11\.98\.232))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work