You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/03/30 07:57:25 UTC
svn commit: r1462712 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Sat Mar 30 06:57:25 2013
New Revision: 1462712
URL: http://svn.apache.org/r1462712
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1462712&r1=1462711&r2=1462712&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Sat Mar 30 06:57:25 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201303292
+## khop-sc-neighbors.cf v 201303302
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:4\.207\.113|5\.22\.80)|78\.89\.107|20\.84\.13)|2(?:10\.(?:223\.111|51\.44)|20\.94\.235)|(?:89\.218|5\.135)\.224|46\.166\.179)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:4\.(?:141\.25|207\.11)3|5\.88\.119)|78\.(?:33\.170|89\.107)|03\.9\.156)|22(?:2\.1(?:74\.163|22\.79)|0\.94\.235)|89\.218\.224)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.(?:128\.2|84\.13)|5\.60\.156)|1(?:2\.97\.24|0\.52\.8)|83\.(?:221\.13|10\.80)|76\.53\.112|03\.9\.156|44\.76\.31)|2(?:1(?:0\.21\.225|7\.23\.2)|22\.122\.79)|8(?:0\.36\.130|9\.218\.68))\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.(?:128\.2|84\.13)|5\.60\.156)|(?:76\.53\.1|83\.221\.)12|1(?:2\.97\.24|5\.22\.80)|03\.9\.156|44\.76\.31)|21(?:0\.(?:21\.225|51\.44)|7\.23\.2)|8(?:0\.36\.130|9\.218\.68))\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:8\.(?:2(?:44\.182\.94|6\.204\.182)|97\.75\.154)|6\.(?:255\.138\.238|112\.66\.102|90\.162\.116)|4\.(?:141\.253\.14|207\.113\.55)|5\.2(?:49\.63\.164|2\.80\.197)|9\.1(?:80\.26\.110|93\.93\.25)|0\.165\.125\.152|3\.108\.201\.189|1\.68\.104\.133|2\.133\.201\.70)|2(?:1\.(?:1(?:81\.237\.251|24\.124\.79|45\.120\.75)|22\.(?:127\.17|34\.166)|66\.95\.156|49\.107\.2)|4\.(?:42\.124\.136|136\.228\.3|67\.69\.52)|0\.(?:132\.132\.119|72\.85\.102)|5\.141\.204\.82|3\.30\.174\.61)|9(?:5\.(?:1(?:3(?:8\.195\.125|\.200\.218)|91\.1(?:66\.25|84\.82))|9(?:4\.11\.17|8\.81\.3)|29\.81\.30)|(?:3\.200\.126\.1|4\.213\.122\.3)4|0\.(?:202\.116\.101|0\.60\.238)|9\.(?:19\.108\.231|255\.11\.29))|7(?:8\.(?:2(?:07\.158\.230|13\.33\.95)|89\.107\.(?:164|66)|32\.223\.88|91\.254\.66|151\.86\.1)|6\.53\.(?:112\.2(?:2[78]|3[12])|233\.76)|4\.137\.168\.212|3\.200\.90\.196|7\.73\.105\.23)|8(?:8\.(?:1(?:27\.230\.28|68\.46\.53)|252\.0\.237)|0\.2(?:25\.131\.176|11\.179\
.30)|7\.(?:28\.204\.5|111\.3\.2)2|5\.20\.52\.118)|0(?:8\.163\.236\.208|9\.195\.54\.231|1\.44\.3\.50)|4(?:4\.76\.31\.172|\.63\.74\.204))|2(?:1(?:7\.(?:2(?:3\.(?:2\.1(?:0[23]|3[37]|61)|12\.1(?:07|85)|8\.118)|1(?:9\.1(?:23\.59|32\.15)|8\.43\.130)|00\.184\.87)|17\.35\.146|97\.211\.20)|3\.(?:2(?:30\.128\.226|51\.186\.229)|1(?:71\.39\.154|86\.39\.43)|81\.164\.57|0\.89\.6)|0\.(?:2(?:23\.111\.8|45\.89\.69)|5(?:1\.44\.199|6\.23\.100)|117\.6\.152)|(?:2\.(?:241\.16\.2|49\.70\.)4|8\.194\.91\.23)8|1\.1(?:04\.184\.195|11\.174\.98|47\.211\.16)|9\.2(?:23\.252\.150|19\.114\.74)|6\.153\.136\.125)|0(?:0\.(?:2(?:47\.100\.178|06\.14\.26)|7(?:2\.11\.132|9\.27\.60)|142\.133\.21|68\.76\.69)|2\.(?:1(?:42\.203\.19|58\.39\.250)|29\.216\.236|71\.136\.200|44\.53\.64|91\.25\.41)|1\.(?:1(?:95\.239\.27|8\.93\.170)|65\.114\.212|22\.7\.225|45\.114\.3)|3\.(?:2(?:28\.43\.20|49\.75\.1)7|155\.102\.2)|9\.238\.180\.166|8\.113\.254\.39)|2(?:2\.(?:1(?:74\.(?:255\.238|163\.2)|22\.79\.121)|255\.27\.140)|1\.(?:2(?:07\.
220\.140|14\.208\.226)|139\.0\.67)|0\.94\.235\.200)|\.1(?:35\.24(?:3\.(?:187|210)|2\.1[26]2)|83\.155\.2))|8(?:9\.218\.(?:68\.(?:146|74|90)|224\.(?:35|58)|94\.166)|1\.(?:1(?:7\.16\.13[47]|5\.172\.145)|23\.106\.75)|5\.(?:2(?:14\.157\.75|02\.5\.110)|113\.141\.251)|4\.(?:15\.191\.254|54\.160\.128)|3\.(?:111\.92\.120|3\.103\.227)|0\.36\.130\.135)|6(?:1\.(?:1(?:3(?:3\.125\.162|8\.104\.30)|75\.223\.1(?:34|42)|10\.67\.125|66\.55\.153)|55\.156\.210|98\.131\.141)|6\.84\.(?:50\.133|49\.9)|2\.146\.28\.212|9\.90\.120\.188|0\.2\.227\.123)|5(?:\.(?:1(?:35\.(?:224\.(?:69|70)|92\.150)|99\.140\.67)|9\.131\.21)|9\.(?:(?:127\.204\.2|34\.57\.8)8|60\.7\.146)|8\.180\.26\.203)|9(?:(?:1\.144\.153|0\.83\.184)\.211|5\.(?:51\.156\.218|48\.24\.10)|3\.159\.160\.164|4\.23\.2\.185)|7(?:4\.(?:122\.227\.124|216\.223\.82|9\.203\.186)|2\.(?:35\.20\.131|9\.150\.200)|8\.157\.217\.65)|4(?:6\.(?:166\.179\.107|99\.253\.158|238\.24\.34|48\.191\.71)|2\.121\.118\.123|1\.137\.24\.4)|3(?:1\.210\.47\.230|7\.59\.136\.203)
)\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:8\.(?:2(?:44\.182\.94|6\.204\.182)|97\.75\.154)|2\.(?:133\.201\.70|217\.161\.58)|4\.(?:141\.253\.14|207\.113\.55)|6\.(?:112\.66\.102|90\.162\.116)|5\.(?:88\.119\.132|22\.80\.197)|9\.1(?:80\.26\.110|93\.93\.25)|0\.165\.125\.152|3\.108\.201\.189|1\.68\.104\.133)|9(?:5\.(?:1(?:3(?:8\.195\.125|\.200\.218)|91\.1(?:66\.25|84\.82)|28\.253\.152)|9(?:4\.11\.17|8\.81\.3)|29\.81\.30)|(?:3\.200\.126\.1|4\.213\.122\.3)4|0\.(?:202\.116\.101|0\.60\.238)|9\.(?:19\.108\.231|255\.11\.29))|2(?:1\.(?:1(?:81\.237\.251|24\.124\.79|45\.120\.75)|22\.(?:127\.17|34\.166)|66\.95\.156|49\.107\.2)|4\.(?:42\.124\.136|136\.228\.3|67\.69\.52)|0\.(?:132\.132\.119|72\.85\.102)|3\.30\.174\.61|5\.7\.221\.146)|7(?:8\.(?:2(?:07\.158\.230|13\.33\.95)|89\.107\.(?:164|66)|32\.223\.88|49\.170\.57|91\.254\.66|151\.86\.1)|6\.53\.(?:112\.2(?:2[78]|3[12])|233\.76)|4\.137\.168\.212|3\.200\.90\.196)|8(?:8\.(?:1(?:27\.230\.28|68\.46\.53)|252\.0\.237)|0\.2(?:25\.131\
.176|11\.179\.30)|7\.(?:28\.204\.5|111\.3\.2)2|5\.20\.52\.118)|0(?:9\.195\.54\.231|1\.44\.3\.50)|4(?:4\.76\.31\.172|\.63\.74\.204))|2(?:1(?:7\.(?:2(?:1(?:9\.1(?:23\.59|32\.15)|8\.43\.130)|3\.(?:2\.1(?:3[37]|02)|8\.118)|00\.184\.87)|1(?:2\.113\.67|7\.35\.146)|97\.211\.20)|3\.(?:2(?:30\.128\.226|51\.186\.229|21\.9\.13)|1(?:71\.39\.154|86\.39\.43)|81\.164\.57|0\.89\.6)|0\.(?:2(?:23\.111\.8|45\.89\.69)|5(?:1\.44\.199|6\.23\.100)|117\.6\.152)|1\.(?:1(?:04\.184\.195|11\.174\.98|47\.211\.16)|33\.121\.196)|(?:2\.(?:241\.16\.2|49\.70\.)4|8\.194\.91\.23)8|9\.2(?:23\.252\.150|19\.114\.74)|6\.153\.136\.125)|0(?:0\.(?:2(?:47\.100\.178|06\.14\.26)|7(?:2\.11\.132|9\.27\.60)|142\.133\.21|68\.76\.69)|2\.(?:1(?:42\.203\.19|58\.39\.250)|29\.216\.236|71\.136\.200|44\.53\.64|91\.25\.41)|1\.(?:1(?:95\.239\.27|8\.93\.170)|65\.114\.212|22\.7\.225|45\.114\.3)|3\.(?:2(?:28\.43\.20|49\.75\.1)7|155\.102\.2)|9\.238\.180\.166|8\.113\.254\.39)|2(?:1\.(?:2(?:07\.220\.140|14\.208\.226)|1(?:43\.51\.201|39\.0
\.67))|2\.(?:1(?:74\.(?:255\.238|163\.2)|22\.79\.121)|255\.27\.140)|0\.94\.235\.200|3\.4\.233\.164)|\.1(?:35\.24(?:3\.(?:187|210)|2\.1[26]2)|83\.155\.2))|8(?:9\.218\.(?:68\.(?:146|74|90)|224\.(?:35|58)|94\.166)|1\.(?:1(?:7\.16\.13[47]|5\.172\.145)|23\.106\.75)|5\.(?:2(?:14\.157\.75|02\.5\.110)|113\.141\.251)|4\.(?:15\.191\.254|54\.160\.128)|3\.(?:111\.92\.120|3\.103\.227)|0\.36\.130\.135|7\.103\.197\.93)|6(?:1\.(?:1(?:3(?:3\.125\.162|8\.104\.30|6\.68\.76)|75\.223\.1(?:34|42)|10\.67\.125|66\.55\.153)|55\.156\.210|98\.131\.141)|6\.84\.(?:50\.133|49\.9)|2\.146\.28\.212|9\.90\.120\.188|0\.2\.227\.123)|9(?:(?:1\.144\.153|0\.83\.184)\.211|5\.(?:51\.156\.218|48\.24\.10)|4\.23\.(?:100\.24|2\.185)|3\.159\.160\.164)|7(?:4\.(?:122\.227\.124|216\.223\.82|9\.203\.186)|2\.(?:35\.20\.131|9\.150\.200)|8\.157\.217\.65)|4(?:6\.(?:99\.253\.158|238\.24\.34|48\.191\.71)|2\.121\.(?:118\.123|81\.212)|1\.137\.24\.4)|5(?:9\.(?:1(?:1\.237\.151|27\.204\.28)|34\.57\.88|60\.7\.146)|\.(?:39\.49\.149|9\.1
31\.21))|31\.210\.47\.230)\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work