You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/04/30 08:57:25 UTC
svn commit: r1477485 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Tue Apr 30 06:57:25 2013
New Revision: 1477485
URL: http://svn.apache.org/r1477485
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1477485&r1=1477484&r2=1477485&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Tue Apr 30 06:57:25 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201304292
+## khop-sc-neighbors.cf v 201304302
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:0\.52\.16|2\.97\.33)|21\.(?:181\.251|54\.54)|03\.(?:30\.72|9\.156)|63\.177\.112|99\.180\.113|76\.53\.20)|21(?:3\.230\.128|1\.33\.121)|6(?:5\.181\.127|4\.235\.49)|58\.253\.216|46\.53\.195)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:2\.9(?:0\.197|7\.33)|5\.88\.247)|21\.(?:181\.251|54\.54)|03\.(?:30\.72|9\.156)|76\.53\.20)|2(?:09\.223\.35|11\.33\.121)|6(?:5\.181\.127|4\.235\.49)|58\.253\.216|46\.53\.195)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.(?:128\.2|84\.13)|5\.60\.156)|78\.172\.(?:1(?:5[23]|83)|229)|12\.9(?:0\.(?:197|90)|7\.33)|83\.221\.12|03\.20\.37)|2(?:08\.82\.114|10\.21\.225|\.139\.178)|(?:98\.139\.4|70\.32\.3)4|58\.254\.168|80\.36\.130)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.(?:128\.2|84\.13)|5\.60\.156)|78\.172\.(?:1(?:5[23]|8[36])|229)|12\.9(?:0\.90|7\.33)|99\.180\.113|03\.20\.37)|2(?:08\.82\.114|10\.21\.225|\.139\.178)|(?:98\.139\.4|70\.32\.3)4|58\.254\.168|80\.36\.130)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:9(?:9\.(?:180\.113\.(?:10[012357]|9[89])|30\.136\.12[34]|255\.11\.29)|5\.1(?:91\.1(?:66\.25|84\.82)|28\.253\.152|38\.195\.125)|2\.(?:210\.232\.28|95\.60\.193)|0\.25\.218\.102|3\.255\.143\.63|4\.213\.122\.34)|1(?:2\.(?:9(?:0\.(?:90\.1[6789]|197\.62)|7\.33\.45)|217\.218\.218)|5\.(?:2(?:49\.63\.164|2\.80\.197)|88\.(?:119\.132|247\.131))|7\.2(?:11\.91\.147|0\.3\.231)|4\.141\.253\.14|9\.193\.93\.25)|7(?:6\.(?:53\.2(?:0\.1(?:6[59]|70)|33\.76)|31\.207\.186)|8\.(?:1(?:63\.105\.52|51\.86\.1)|63\.165\.212)|3\.20(?:0\.90\.196|8\.133\.67)|4\.138\.172\.50|5\.196\.73\.189)|2(?:1\.(?:181\.251\.188|254\.228\.25|78\.152\.51)|5\.(?:129\.124\.206|63\.65\.45)|3\.110\.194\.207|4\.243\.124\.206)|8(?:0\.225\.131\.176|8\.127\.230\.28|2\.237\.2\.115)|53\.127\.236\.15|03\.9\.157\.181|49\.255\.3\.158|63\.177\.112\.2)|2(?:1(?:0\.(?:2(?:1(?:\.225\.2(?:5[01234]|2[789]|[34]\d)|0\.115\.249)|45\.89\.69)|1(?:18\.26\.183|68\.50\.16)|51\.44\.199)|7\.(?:1(?:
7\.35\.146|98\.3\.238)|200\.184\.87)|1\.(?:147\.211\.1|206\.121\.6|33\.121\.19)6|8\.(?:2(?:2\.17\.235|\.0\.60)|194\.91\.238)|3\.2(?:30\.128\.226|21\.9\.13)|6\.153\.136\.125|2\.6\.152\.211)|0(?:2\.(?:1(?:31\.237\.134|42\.203\.19)|71\.136\.200)|1\.(?:195\.239\.27|22\.7\.225|45\.114\.3)|8\.82\.114\.(?:5[123456789]|4[469]|6[02])|0\.(?:142\.133\.21|72\.11\.132)|9\.223\.35\.16[24]|3\.255\.15\.146|6\.190\.129\.22)|2(?:2\.(?:174\.163\.2|236\.16\.14)|0\.94\.235\.200)|\.139\.178\.(?:184|81))|6(?:1\.(?:1(?:64\.42\.158|9\.97\.69)|98\.131\.141)|5\.181\.127\.(?:108|221)|4\.235\.49\.20[248]|9\.90\.120\.188|6\.84\.50\.133)|5(?:8\.2(?:5(?:3\.216\.1(?:3[024689]|4[023]|28)|4\.168\.(?:5[6789]|6[0123]))|27\.21\.27)|(?:4\.248\.252\.2|9\.150\.255\.)35)|8(?:(?:0\.36\.130\.13|3\.238\.208\.5)5|(?:1\.169\.156\.13|6\.34\.38\.1)6|7\.2(?:22\.247\.192|36\.232\.231)|4\.54\.160\.128)|7(?:9\.1(?:10\.131\.173|88\.87\.18)|0\.32\.34\.(?:7[012345678]|69)|2\.35\.20\.131)|9(?:1\.121\.(?:234\.4[15]|184\.131|46\.86)
|5\.(?:51\.156\.218|71\.126\.175))|3(?:1\.(?:210\.47\.23|41\.112\.6)|7\.206\.210\.13)0|4(?:2\.113\.107\.151|1\.137\.24\.4))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:5\.(?:2(?:49\.63\.164|2\.80\.197)|88\.(?:119\.132|247\.131)|94\.87\.218)|2\.(?:21(?:6\.181\.110|7\.218\.218)|9(?:0\.90\.1[6789]|7\.33\.45))|7\.2(?:11\.91\.147|0\.3\.231)|4\.141\.253\.14|9\.193\.93\.25|1\.8\.37\.20)|9(?:5\.(?:1(?:91\.1(?:66\.25|84\.82)|28\.253\.152|38\.195\.125)|29\.81\.30)|9\.(?:180\.113\.(?:1(?:0[012357]|11)|9[89])|255\.11\.29)|2\.(?:210\.232\.28|95\.60\.193)|3\.255\.143\.63|4\.213\.122\.34)|7(?:6\.(?:53\.2(?:0\.1(?:6[59]|70)|33\.76)|31\.207\.186)|8\.(?:1(?:63\.105\.52|51\.86\.1)|63\.165\.212)|3\.20(?:0\.90\.196|8\.133\.67)|4\.138\.172\.50|5\.196\.73\.189)|2(?:1\.(?:181\.251\.188|254\.228\.25|78\.152\.51)|5\.(?:129\.124\.206|63\.65\.45)|3\.110\.194\.207|4\.243\.124\.206)|8(?:0\.225\.131\.176|8\.127\.230\.28|2\.237\.2\.115)|53\.127\.236\.15|03\.9\.157\.181|49\.255\.3\.158|63\.177\.112\.2)|2(?:1(?:0\.(?:2(?:1(?:\.225\.2(?:5[01234]|2[789]|[34]\d)|0\.115\.249)|45\.89\.69)|1(?:18\.26\.183|68\.50\.16)|51\.
44\.199)|3\.(?:2(?:30\.128\.226|21\.9\.13)|81\.164\.57)|1\.(?:147\.211\.1|206\.121\.6|33\.121\.19)6|8\.(?:2(?:2\.17\.235|\.0\.60)|194\.91\.238)|7\.1(?:7\.35\.146|98\.3\.238)|6\.153\.136\.125|2\.6\.152\.211)|0(?:2\.(?:1(?:31\.237\.134|42\.203\.19)|71\.136\.200|44\.53\.64)|1\.(?:195\.239\.27|22\.7\.225|45\.114\.3)|8\.82\.114\.(?:5[123456789]|6[02]|36|49)|0\.(?:142\.133\.21|72\.11\.132)|6\.190\.129\.2[02]|9\.223\.35\.16[24]|3\.255\.15\.146)|22\.(?:174\.163\.2|236\.16\.14)|\.139\.178\.(?:184|81))|6(?:1\.1(?:6(?:4\.42\.158|6\.55\.153)|9\.97\.69)|4\.(?:235\.49\.20[248]|15\.155\.49)|5\.181\.127\.(?:10[68]|221)|9\.90\.120\.188|6\.84\.50\.133)|5(?:8\.2(?:5(?:3\.216\.1(?:3[024689]|4[023]|28)|4\.168\.(?:5[6789]|6[123]))|32\.221\.43|27\.21\.27)|(?:4\.248\.252\.2|9\.150\.255\.)35)|8(?:(?:0\.36\.130\.13|3\.238\.208\.5)5|7\.2(?:22\.247\.192|36\.232\.231)|4\.54\.160\.128|6\.34\.38\.16)|7(?:9\.1(?:10\.131\.173|88\.87\.18)|0\.32\.34\.(?:7[012345678]|69)|2\.35\.20\.131)|9(?:1\.121\.(?:234\.4[1
5]|184\.131|46\.86)|5\.(?:51\.156\.218|71\.126\.175))|3(?:7\.206\.210\.1|1\.210\.47\.2)30|41\.137\.24\.4)\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work