You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/03/16 07:55:56 UTC
svn commit: r1457210 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Sat Mar 16 06:55:55 2013
New Revision: 1457210
URL: http://svn.apache.org/r1457210
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1457210&r1=1457209&r2=1457210&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Sat Mar 16 06:55:55 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201303152
+## khop-sc-neighbors.cf v 201303162
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -20,7 +20,7 @@
# http://spamcop.net/w3m?action=map;mask=4294967295;net=0;sort=56
# Due to the massive block size, this rule only examines the last untrusted
-header __KHOP_SC_CIDR8 X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b(?:1(?:22|86)|95|2)(?:\.[012]?\d{1,2}){3}\b) /
+header __KHOP_SC_CIDR8 X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b(?:9[35]|186|2)(?:\.[012]?\d{1,2}){3}\b) /
# and gets cleaned up a bit
meta KHOP_SC_CIDR8 __KHOP_SC_CIDR8 && !(__VIA_ML||__freemail_safe||__RCVD_IN_DNSWL||RCVD_IN_HOSTKARMA_WL)
describe KHOP_SC_CIDR8 Relay CIDR /8 is among worst in SpamCop
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:12\.21(?:6\.130|7\.161)|88\.165\.190|20\.128\.2)|21(?:7\.2(?:00\.184|3\.5)|3\.233\.64|6\.45\.55)|7(?:8\.128\.76|5\.102\.9)|89\.218\.68)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:12\.21(?:6\.130|7\.161)|88\.165\.190|44\.76\.38)|21(?:3\.23(?:0\.128|3\.64)|7\.2(?:00\.184|3\.8))|(?:66\.35\.7|75\.102\.)9|89\.218\.68)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:7(?:8\.172\.186|6\.31\.152)|9(?:2\.119\.149|7\.252\.0)|0(?:3\.9\.156|8\.61\.59)|2(?:0\.84\.13|5\.91\.11)|1(?:2\.97\.24|0\.52\.8)|44\.76\.28)|2(?:1(?:0\.21\.225|7\.23\.2)|00\.77\.172)|8(?:4\.235\.9[12]|0\.36\.130)|79\.106\.109|31\.7\.125)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.(?:128\.2|84\.13)|5\.91\.11)|7(?:8\.172\.186|6\.31\.152)|1(?:2\.97\.24|0\.52\.8)|03\.9\.156|44\.76\.28|97\.252\.0)|2(?:1(?:7\.23\.[25]|0\.21\.225)|00\.77\.172)|8(?:4\.235\.9[12]|0\.36\.130)|79\.106\.109|31\.7\.125)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:21(?:6\.(?:246\.210|130\.34)|7\.(?:225\.146|161\.58))|152\.252\.9|97\.24\.158)|9\.(?:226\.202\.122|30\.132\.130)|5\.(?:115\.180\.26|249\.63\.164)|8\.(?:102\.171\.132|99\.27\.1)|3\.160\.226\.129|6\.12\.230\.46|0\.14\.46\.47)|2(?:1\.(?:1(?:56\.65\.1(?:65|87)|24\.124\.79|4\.17\.220)|22\.127\.17|58\.238\.3)|4\.1(?:2(?:4\.43\.206|5\.156\.52)|65\.228\.18|36\.228\.3)|5\.(?:91\.11\.8[78]|63\.65\.45)|2\.160\.(?:154\.251|25\.175))|8(?:(?:2\.72\.164\.1|9\.85\.165\.)10|8\.165\.190\.1(?:4[18]|30|67|72)|0\.21(?:0\.203\.213|1\.179\.30)|1\.134\.0\.116|4\.72\.95\.61|7\.4\.80\.188|5\.2\.12\.77)|9(?:2\.(?:1(?:19\.149\.2(?:4[389]|3[36]|51)|57\.212\.15[012]|74\.84\.47)|69\.92\.4[23])|0\.1(?:77\.198\.9|95\.191\.8)8|9\.58\.163\.5[46]|8\.27\.80\.29)|7(?:6\.(?:3(?:1\.152\.1(?:0[1238]|1[36]|23)|4\.192\.160)|53\.233\.76)|3\.2(?:54\.216\.1(?:38|40)|45\.6\.178)|5\.196\.73\.189)|4(?:4\.76\.(?:2(?:8\.103|7\.21)|38\.39)|6\.66\.23\.247|9\.255\.
3\.158|\.47\.20\.245)|08\.61\.59\.1(?:3[2589]|42)|39\.130\.3\.90|\.234\.6\.81)|2(?:1(?:7\.(?:2(?:3\.(?:2\.1(?:2[89]|05)|8\.1(?:19|86)|5\.(?:35|64)|12\.142)|00\.184\.87)|16\.136\.176)|1\.(?:2(?:38\.108\.113|06\.121\.66)|189\.88\.180|38\.184\.253|99\.212\.154|63\.82\.175)|0\.(?:1(?:83\.11\.151|68\.50\.19)|210\.110\.226|51\.44\.199)|6\.(?:45\.55\.(?:2(?:0[14]|15)|197)|83\.60\.75)|8\.(?:232\.111\.227|194\.91\.238|38\.13\.31)|3\.(?:230\.128\.226|55\.72\.14)|2\.(?:77\.203\.50|49\.70\.48))|2(?:2\.(?:(?:234\.222\.16|75\.151\.24)0|174\.255\.238)|0\.(?:118\.93\.193|73\.130\.66|93\.111\.47)|1\.(?:214\.208\.226|149\.123\.40))|0(?:2\.(?:1(?:13\.65\.229|04\.22\.42)|43\.186\.208)|0\.(?:142\.133\.21|47\.10\.209)|3\.2(?:28\.43\.207|39\.21\.72)|7\.148\.183\.202)|7\.251\.160\.226)|6(?:6\.(?:1(?:99\.254\.(?:5[69]|61)|15\.88\.126)|35\.79\.(?:19[479]|204)|225\.128\.73)|2\.1(?:62\.1(?:67\.138|79\.205)|48\.137\.138)|(?:0\.244\.186\.18|5\.47\.140\.13)0|1\.(?:110\.67\.125|41\.148\.62)|7\.2(?:29\.70\.
124|35\.80\.241)|8\.112\.23\.163)|7(?:5\.(?:1(?:02\.9\.(?:209|71)|86\.145\.159)|98\.233\.(?:8[48]|9[04]))|8\.(?:1(?:28\.76\.15[2346789]|54\.214\.140)|97\.96\.33)|2\.9\.96\.2(?:1[28]|2[01])|7\.106\.232\.178|0\.34\.203\.21)|5(?:8\.(?:18(?:0\.26\.203|7\.12\.141)|2(?:27\.21\.27|54\.168\.0))|9\.(?:90\.(?:192\.173|206\.95)|150\.106\.108|60\.7\.146)|\.39\.25\.(?:[12]7|6)|4\.247\.41\.229)|4(?:1\.(?:2(?:08\.106\.244|22\.70\.242)|137\.2[04]\.4)|6\.137\.44\.44)|8(?:0\.36\.130\.135|4\.15\.191\.254|7\.252\.2\.63|\.33\.183\.1)|9(?:3\.(?:127\.97\.15|95\.184\.23)6|1\.235\.126\.92))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:21(?:6\.(?:246\.210|130\.34)|7\.(?:225\.146|161\.58))|152\.252\.9|97\.24\.158)|5\.(?:115\.180\.26|249\.63\.164)|9\.(?:30\.132\.130|56\.113\.254)|8\.(?:102\.171\.132|99\.27\.1)|3\.160\.226\.129|6\.12\.230\.46|0\.14\.46\.47)|2(?:1\.(?:1(?:56\.65\.1(?:65|87)|24\.124\.79|4\.17\.220)|22\.127\.17|58\.238\.3)|4\.1(?:2(?:4\.43\.206|5\.156\.52)|65\.228\.18|36\.228\.3)|5\.(?:91\.11\.8[789]|63\.65\.45)|0\.132\.132\.119|2\.160\.25\.175)|9(?:(?:0\.1(?:77\.198\.9|95\.191\.8)|5\.13\.200\.21)8|2\.1(?:57\.212\.15[012]|19\.149\.233|74\.84\.47)|9\.(?:58\.163\.5[46]|229\.250\.144)|8\.27\.80\.29)|8(?:(?:(?:2\.72\.164\.1|9\.85\.165\.)1|0\.211\.179\.3)0|8\.165\.1(?:90\.1(?:4[18]|30|67|72)|49\.(?:17|24))|1\.134\.0\.116|7\.4\.80\.188|5\.2\.12\.77)|7(?:6\.(?:3(?:1\.152\.1(?:0[1238]|1[36]|23)|4\.192\.160)|53\.233\.76)|3\.(?:2(?:54\.216\.1(?:38|40)|45\.6\.178)|189\.26\.140)|5\.196\.73\.189)|0(?:8\.61\.59\.1(?:39|42)|9\.251\.28\.154)|44\.76
\.(?:28\.103|38\.39)|53\.127\.236\.15|\.234\.6\.81)|2(?:1(?:7\.(?:2(?:3\.(?:8\.1(?:8[56]|19|60)|2\.1(?:2[89]|05)|5\.(?:3[57]|64)|12\.14[24])|00\.184\.87)|16\.136\.176)|1\.(?:2(?:38\.108\.113|06\.121\.66)|189\.88\.180|38\.184\.253|99\.212\.154|63\.82\.175)|0\.(?:210\.110\.226|183\.11\.151|51\.44\.199)|6\.(?:45\.55\.20[14]|83\.60\.7[56])|3\.(?:230\.128\.226|55\.72\.14)|8\.(?:194\.91\.238|38\.13\.31)|2\.(?:77\.203\.50|49\.70\.48))|0(?:2\.(?:1(?:29\.124\.168|13\.65\.229|04\.22\.42)|43\.186\.208)|0\.(?:142\.133\.21|47\.10\.209)|3\.2(?:28\.43\.207|39\.21\.72)|7\.148\.183\.202|8\.104\.21\.223)|2(?:2\.(?:(?:234\.222\.16|75\.151\.24)0|174\.255\.238)|0\.(?:118\.93\.193|73\.130\.66|93\.111\.47)|1\.(?:214\.208\.226|149\.123\.40))|7\.251\.160\.226|4\.160\.72\.11)|6(?:6\.(?:1(?:99\.254\.(?:5[689]|61)|15\.88\.126)|2(?:25\.128\.73|02\.30\.42)|35\.79\.(?:19[479]|20[04])|49\.61\.158)|1\.(?:1(?:10\.67\.125|38\.104\.30)|41\.148\.62)|2\.1(?:62\.1(?:67\.138|79\.205)|48\.137\.138)|7\.(?:2(?:29\.70
\.124|35\.80\.241)|186\.7\.8)|(?:0\.244\.186\.18|5\.47\.140\.13)0|8\.112\.23\.163)|5(?:8\.(?:2(?:54\.168\.[047]|27\.21\.27)|18(?:0\.26\.203|7\.12\.141))|9\.(?:90\.(?:192\.173|206\.95)|60\.7\.146)|\.39\.25\.(?:[12]7|6)|4\.247\.41\.229)|7(?:8\.(?:1(?:54\.214\.140|28\.76\.159)|97\.96\.33)|5\.1(?:02\.9\.(?:209|71)|86\.145\.159)|2\.9\.96\.21[268]|7\.106\.232\.178|0\.34\.203\.21)|8(?:9\.218\.68\.(?:1(?:22|38|54)|34)|0\.36\.130\.135|4\.15\.191\.254|3\.14\.26\.98|7\.252\.2\.63|\.33\.183\.1)|9(?:3\.(?:1(?:59\.160\.164|27\.97\.156)|95\.184\.236)|1\.(?:121\.184\.1|235\.126\.9)2|4\.242\.243\.71)|4(?:1\.(?:2(?:08\.106\.244|22\.70\.242)|137\.2[04]\.4|74\.167\.29)|6\.137\.44\.44))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work
@@ -146,14 +146,14 @@ score KHOP_SC_TOP200 4 0 4 0 # unneces
# Spamhaus DROP, http://www.spamhaus.org/drop/
-header KHOP_SPAMHAUS_DROP X-Spam-Relays-Untrusted =~ /(?-xism: (?:by|ip)=(?:(?:2(?:0(?:4\.(?:1(?:0(?:6\.(?:1(?:[3456789]\d|2[89])|2(?:2[0123]|[01]\d))|7\.208)|5(?:5\.1(?:4[0123]|2[89]|3\d)|2\.2(?:2[456789]|3[01]))|87\.(?:2(?:[01234]\d|5[01234])|1(?:5[56789]|[6789]\d))|94\.1(?:8[456789]|9[01])|47\.2(?:5[012345]|4\d)|26\.24[45]|30\.167)|2(?:3(?:7\.(?:1(?:7[012345]|3[6789]|4[0123]|6[89])|2(?:3[23456789]|4[01234567]))|6\.(?:[0456789]|[12]\d?|3[01]?))|25\.(?:159|210))|44\.(?:2(?:0[01234567]|2[456789]|3\d)|19[23456789])|5(?:7\.(?:1[6789]|3[01]|2\d)|2\.255)|89\.224)|5\.(?:1(?:4(?:4\.(?:[023456789]|1(?:[012345]|7[6789]|9[01]|8\d)?)|2\.10[4567])|7(?:5\.1(?:[678]\d|9[01])|2\.24[4567])|37\.(?:[023456789]|1[012345]?)|89\.7[123]|59\.180)|2(?:03\.(?:[0456789]|2(?:[016789]|2[456789]?|5[012345]?|[34]\d?)?|3[01]?|1\d?)|3(?:3\.2(?:2[456789]|3\d)|5\.(?:6[456789]|7\d)|6\.189)|14\.1(?:[345]\d|2[89])))|6\.(?:2(?:2(?:7\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|6\.(?:[0789]|[12345]\d?|6[0123]
?)|4\.1(?:[678]\d|9[01]))|0(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|1\.(?:6[0123]|4[89]|5\d)|9\.(?:9[012345]|8\d)))|1(?:23\.1(?:[345]\d|2[89])|97\.(?:2[89]|175))|81\.(?:[0456789]|[12]\d?|3[01]?))|7\.(?:1(?:8(?:3\.(?:2(?:2[0123]|[01]\d)|19[23456789])|9\.(?:[0456789]|[12]\d?|3[01]?))|10\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d))|2(?:2\.(?:2(?:5[012345]|[01234]\d)|19[23456789])|54\.1(?:3[012345]|2[89]))|32\.1(?:[345]\d|2[89]))|9\.(?:1(?:4(?:8\.(?:6[456789]|9[012345]|[78]\d)|5\.(?:[0456789]|[12]\d?|3[01]?))|82\.(?:6[456789]|9[012345]|[78]\d)|98\.1(?:7[6789]|9[01]|8\d))|95\.(?:2(?:2[0123]|[01]\d)|19[23456789])|51\.(?:3[23456789]|4[01234567]))|0\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|22\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|105\.(?:3[23456789]|4[01234567])|3\.1(?:4[0123]|2[89]|3\d))|8\.(?:8(?:1\.1(?:3[6789]|4[0123])|5\.3[23456789])|9(?:3\.(?:10[0123]|9[6789])|0\.[01234567])|70\.1(?:7[012345]|6[89])|117\.(?:9[012345]|8\d))|1\.7(?:1\.(?:[023456789]|1[012345]?)|7\.(?
:1(?:1[01]|0\d)|9[6789])|\.2(?:2[0123]|0[89]|1\d))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|3\.3(?:1\.8[89]|4\.7[01])|2\.61\.108)|1(?:6\.(?:1(?:51\.(?:19[23456789]|20[01234567])|62\.1(?:1[23456789]|2[01234567]))|212\.(?:2(?:2[0123]|[01]\d)|19[23456789]))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|3\.109\.(?:2(?:2[0123]|0[89]|1\d)|9[6789]))|[23456789]?\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|9(?:1\.(?:2(?:0(?:0\.(?:1(?:6[4567]|7[6789])|2(?:4[89]|5[01]))|9\.(?:1(?:8[346]|4)|(?:[45]|23)8|63)|1\.(?:(?:12)?[4567]|23[6789])|3\.(?:2[0123]|9[2345])|4\.4[01234567]|8\.(?:162|228))|1(?:2\.(?:1(?:23|35|98)|2(?:01|20)|4[15]|65)|3\.(?:1(?:7[45]|26)|2(?:17|9)|9[34]|72)|7\.(?:1(?:62|78)|2(?:00|49))|1\.(?:22|6)[4567]|6\.(?:190|7?3)|0\.17[2345])|2(?:9\.(?:6[0123]|248)|0\.(?:35|62|90)|8\.(?:132|39)|3\.77)|3(?:0\.1(?:4[37]|10)|(?:8\.8|5\.)2|6\.12[01]|1\.156|9\.24)|4(?:(?:0\.16|3\.11)5|2\.217))|19(?:3\.1(?:9[2345]|1[01]
)|5\.(?:25[45]|1[01])|8\.1(?:09|27)|7\.9[6789]|4\.[01]))|4\.(?:1(?:5(?:4\.1(?:[345678]\d|2[89]|9[01])|8\.2(?:5[012345]|4\d))|3[01]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|6(?:3\.(?:1(?:4[679]|5[01])|24[034567])|0\.12[123]|1\.247)|232\.2(?:5[012345]|4[89]))|3\.1(?:20\.(?:3[23456789]|6[0123]|[45]\d)|7(?:5\.2(?:5[012345]|4\d)|4\.164)|68\.(?:2[012345]|1[89]))|5\.(?:21(?:[67]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|5\.14[0123])|64\.(?:1[13]|9[89]))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|6(?:4\.(?:1(?:12\.(?:1(?:[012345678]\d?|9[01]?)?|[23456789]\d?|0)|5\.(?:[023456789]|1[012345]?)|85\.2(?:2[456789]|3\d))|44\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|234\.2(?:2[456789]|3\d))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|7\.21(?:[18]\.2(?:2[0123]|0[89]|1\d)|3\.1(?:4[0123]|2[89]|3\d))|2\.1(?:22\.(?:3[23456789]|7[23])|82\.15[23456789])|3\.141\.(?:3[23456789]|6[0123]|[45]\d)|6\.231\.(?:6[456789]|7\d))|8(?:1\.(?:4\.(?:[0789]|[12345]\d?|6[0123]?)|162\.1(?:[345
678]\d|2[89]|9[01])|22\.15[23])|5\.(?:202\.(?:1(?:9[23456789]|7[012345]|6\d)|20[01234567])|12(?:0\.9[45]|1\.39))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|4\.22\.(?:1(?:2[01234567]|[01]\d)|9[6789])|8\.135\.(?:1[6789]|3[01]|2\d)|9\.(?:114\.97?|45\.14)|6\.55\.(?:21[01]|140))|3(?:1\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|42\.1(?:[345]\d|2[89])|222\.20[01234567]|1(?:4\.10|1\.4)3)|7\.(?:2(?:46\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|30\.212)|1(?:48\.2(?:1[6789]|2[0123])|39\.49))|0?\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|7(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|9\.110\.(?:1(?:[678]\d?|9[01]?)|6[0123]|[25]\d|3[01]|4[89])|7\.90\.(?:[0789]|[12345]\d?|6[0123]?)|2\.13\.(?:1[6789]|3[01]|2\d)|4\.123\.(?:10[0123]|9[6789])|8\.31\.1(?:8[456789]|9[01]))|5(?:\.(?:(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])|7[2345]|132)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|62\.(?:2(?:5[012345]|[01234]\d)|1(?:[3456789]\d
|2[89])))|8\.83\.(?:[89]|1[01]))|[04]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1(?:(?:9(?:9\.(?:2(?:4(?:8\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|6\.(?:21[35]|137)|5\.138)|6\.(?:1(?:2[01234567]|[01]\d)|9[6789])|00\.(?:6[456789]|9[012345]|[78]\d)|30\.(?:6[456789]|10[0123]|[789]\d)|54\.(?:3[23456789]|4[01234567])|12\.(?:1(?:1[01]|0\d)|9[6789]))|1(?:9(?:6\.(?:2(?:2[0123]|[01]\d)|19[23456789])|8\.1(?:8[01234589]|[67]\d|9[01]))|6(?:5\.(?:3[23456789]|6[0123]|[45]\d)|6\.20[0123])|85\.(?:19[23456789]|20[01234567])|20\.163)|8(?:4\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|8\.(?:3[23456789]|5[01]|4\d)|9\.(?:1[6789]|3[01]|2\d))|3(?:4\.1(?:[345678]\d|2[89]|9[01])|3\.145)|5(?:8\.2(?:5[012345]|4[89])|\.15[23])|46\.(?:3[23456789]|6[0123]|[45]\d)|71\.(?:19[23456789]|20[01234567])|9\.(?:2[456789]|3[01])|60\.102)|8\.(?:1(?:8(?:1\.(?:6[456789]|9[012345]|[78]\d)|3\.(?:3[23456789]|6[0123]|[45]\d)|6\.25)|51\.(?:1(?:2[01234567]|
5[2345]|[01]\d)|6[456789]|[789]\d)|3\.(?:[023456789]|1[012345]?)|62\.2(?:2[0123]|0[89]|1\d)|76\.(?:6[0123]|4[89]|5\d))|2(?:0(?:5\.(?:6[456789]|9[012345]|[78]\d)|\.(?:1[6789]|3[01]|2\d)|4\.[01234567])|3\.(?:3[23456789]|4[01234567]))|4(?:5\.(?:3[23456789]|4[01234567])|8\.(?:1[6789]|3[01]|2\d))|96\.2(?:2[456789]|3\d)|57\.(?:6[456789]|7\d))|2\.(?:2(?:2(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|9\.(?:3[23456789]|6[0123]|[45]\d))|19\.(?:2(?:1[012345]|0\d)|1[23456789]\d)|6\.25)|1(?:71\.(?:6[456789]|9[012345]|[78]\d)|12\.1(?:1[23456789]|2[01234567])|01\.2(?:0[01234567]|4\d)|60\.44|97\.87)|43\.1(?:5[3456789]|7[56789]|8[01234]|60)|67\.16[0123]?|31\.21[23]|86\.85)|3\.(?:1(?:0(?:5\.(?:1(?:[58]4|41)|2(?:07|45))|4\.(?:1(?:10|76|2)|[39]4|41)|6\.3[2345]|7\.1[6789]|8\.178)|78\.1(?:2[0123]|72)|1(?:0\.136|1\.235)|6\.(?:100|213)|38\.17[2345]|48\.47)|2(?:0(?:1\.19[23]|0\.167)|2(?:7\.24[01]|8\.145)|(?:43\.16|3\.12)6|7\.23[23])|4(?:3\.134|6\.211|1\.38)|0\.212)|5\.(?:1(?:4(?:9\.(?:88|90)|\
.11[23])|9(?:1\.10[23]|0\.157)|8(?:4\.8[67]|2\.57)|14\.[89]|62\.[67])|2(?:2(?:6\.(?:197|220)|5\.17[6789])|8\.1[01]|\.21[23]|46\.200)|8(?:8\.(?:19[01]|22[67])|5\.204)|9(?:3\.(?:18[45]|20[89])|5\.155)|5(?:4\.16[23]|\.161)|78\.10[89])|4\.(?:1(?:1(?:0\.16[0123]|6\.14[67])|\.(?:22[01]|184)|26\.(?:193|251)|65\.[45]|40\.229)|5(?:4\.15[6789]|0\.116)|6(?:3\.14[4567]|0\.242)|2(?:42\.[23]|9\.185)|44\.4)|(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|6\.(?:194|246))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|(?:3(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|4\.(?:1(?:27|72)|2(?:09|3)|33)|2\.(?:145|232)|0\.2(?:01|22)|6\.228|9\.167|8\.43)|5(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|7\.2(?:3[12]|26)|9\.(?:141|223)|0\.1(?:26|41)|1\.123|2\.147|5\.190)|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1(?:6\.1(?:9(?:9\.1(?:[345]\d|2[89])|7\.15[23456789])|4[4567]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.(?:44\.1(?:4[0123]|2[89]|3\d)|232\.1(?:7[012
345]|6\d))|3\.20\.1(?:[678]\d|9[01])|9\.42\.4[0123])|4(?:\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|192\.(?:4[89]|5\d))|(?:8\.(?:1(?:05|78)|248)|(?:0\.17|7\.5)0|3\.(?:135|49))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1\.136\.(?:1[67]|2[27])|6\.185\.254)|7(?:(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.(?:1(?:06|13|20)|67)|6\.47)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|3\.2(?:05\.(?:[06789]|5[012345]?|[1234]\d?)|49\.1(?:[678]\d|9[01]))|8\.159\.1(?:7[6789]|9[01]|8\d)|1\.25\.190)|2(?:(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|8\.1(?:68|99))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|(?:1\.4|9\.7)6\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|2\.202\.(?:1(?:2[01234567]|[01]\d)|9[6789]))|8(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|6\.190\.2(?:2[456789]|3[01])|8\.247\.(?:135|230)))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|6(?:(?:7\.(?:2(?:8\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|24\.(?:[0456789]|[12]\d?|3[01]?))|97\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|(?:1\.232|2\.125)\.(?:[01]
?\d?\d|2[0-4]\d|25[0-5]))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.0\.0))|0(?:(?:3\.(?:1(?:4\.2(?:0[89]|1[01])|0\.(?:6[89]|7[01]))|2(?:46\.7[2345]|\.4[4567])|7\.20[4567])|9\.94\.2(?:2[0123]|0[89]|1\d))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.0\.0))))\b)/
+header KHOP_SPAMHAUS_DROP X-Spam-Relays-Untrusted =~ /___ FAILED TO POPULATE ___/
describe KHOP_SPAMHAUS_DROP Relay listed in Spamhaus Don't Route Or Peer List
tflags KHOP_SPAMHAUS_DROP nopublish
score KHOP_SPAMHAUS_DROP 1 0.2 1 0.2
# spam/ham s/o corpus
# 0.0349/0.0029 0.924 20110227@510k
-header KHOP_SPAMHAUS_DROP_LE X-Spam-Relays-External =~ /^[^]]*(?-xism: (?:by|ip)=(?:(?:2(?:0(?:4\.(?:1(?:0(?:6\.(?:1(?:[3456789]\d|2[89])|2(?:2[0123]|[01]\d))|7\.208)|5(?:5\.1(?:4[0123]|2[89]|3\d)|2\.2(?:2[456789]|3[01]))|87\.(?:2(?:[01234]\d|5[01234])|1(?:5[56789]|[6789]\d))|94\.1(?:8[456789]|9[01])|47\.2(?:5[012345]|4\d)|26\.24[45]|30\.167)|2(?:3(?:7\.(?:1(?:7[012345]|3[6789]|4[0123]|6[89])|2(?:3[23456789]|4[01234567]))|6\.(?:[0456789]|[12]\d?|3[01]?))|25\.(?:159|210))|44\.(?:2(?:0[01234567]|2[456789]|3\d)|19[23456789])|5(?:7\.(?:1[6789]|3[01]|2\d)|2\.255)|89\.224)|5\.(?:1(?:4(?:4\.(?:[023456789]|1(?:[012345]|7[6789]|9[01]|8\d)?)|2\.10[4567])|7(?:5\.1(?:[678]\d|9[01])|2\.24[4567])|37\.(?:[023456789]|1[012345]?)|89\.7[123]|59\.180)|2(?:03\.(?:[0456789]|2(?:[016789]|2[456789]?|5[012345]?|[34]\d?)?|3[01]?|1\d?)|3(?:3\.2(?:2[456789]|3\d)|5\.(?:6[456789]|7\d)|6\.189)|14\.1(?:[345]\d|2[89])))|6\.(?:2(?:2(?:7\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|6\.(?:[0789]|[12345]\d?
|6[0123]?)|4\.1(?:[678]\d|9[01]))|0(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|1\.(?:6[0123]|4[89]|5\d)|9\.(?:9[012345]|8\d)))|1(?:23\.1(?:[345]\d|2[89])|97\.(?:2[89]|175))|81\.(?:[0456789]|[12]\d?|3[01]?))|7\.(?:1(?:8(?:3\.(?:2(?:2[0123]|[01]\d)|19[23456789])|9\.(?:[0456789]|[12]\d?|3[01]?))|10\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d))|2(?:2\.(?:2(?:5[012345]|[01234]\d)|19[23456789])|54\.1(?:3[012345]|2[89]))|32\.1(?:[345]\d|2[89]))|9\.(?:1(?:4(?:8\.(?:6[456789]|9[012345]|[78]\d)|5\.(?:[0456789]|[12]\d?|3[01]?))|82\.(?:6[456789]|9[012345]|[78]\d)|98\.1(?:7[6789]|9[01]|8\d))|95\.(?:2(?:2[0123]|[01]\d)|19[23456789])|51\.(?:3[23456789]|4[01234567]))|0\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|22\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|105\.(?:3[23456789]|4[01234567])|3\.1(?:4[0123]|2[89]|3\d))|8\.(?:8(?:1\.1(?:3[6789]|4[0123])|5\.3[23456789])|9(?:3\.(?:10[0123]|9[6789])|0\.[01234567])|70\.1(?:7[012345]|6[89])|117\.(?:9[012345]|8\d))|1\.7(?:1\.(?:[023456789]|1[012345]
?)|7\.(?:1(?:1[01]|0\d)|9[6789])|\.2(?:2[0123]|0[89]|1\d))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|3\.3(?:1\.8[89]|4\.7[01])|2\.61\.108)|1(?:6\.(?:1(?:51\.(?:19[23456789]|20[01234567])|62\.1(?:1[23456789]|2[01234567]))|212\.(?:2(?:2[0123]|[01]\d)|19[23456789]))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|3\.109\.(?:2(?:2[0123]|0[89]|1\d)|9[6789]))|[23456789]?\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|9(?:1\.(?:2(?:0(?:0\.(?:1(?:6[4567]|7[6789])|2(?:4[89]|5[01]))|9\.(?:1(?:8[346]|4)|(?:[45]|23)8|63)|1\.(?:(?:12)?[4567]|23[6789])|3\.(?:2[0123]|9[2345])|4\.4[01234567]|8\.(?:162|228))|1(?:2\.(?:1(?:23|35|98)|2(?:01|20)|4[15]|65)|3\.(?:1(?:7[45]|26)|2(?:17|9)|9[34]|72)|7\.(?:1(?:62|78)|2(?:00|49))|1\.(?:22|6)[4567]|6\.(?:190|7?3)|0\.17[2345])|2(?:9\.(?:6[0123]|248)|0\.(?:35|62|90)|8\.(?:132|39)|3\.77)|3(?:0\.1(?:4[37]|10)|(?:8\.8|5\.)2|6\.12[01]|1\.156|9\.24)|4(?:(?:0\.16|3\.11)5|2\.217))|19(?:3\.1(?:9[234
5]|1[01])|5\.(?:25[45]|1[01])|8\.1(?:09|27)|7\.9[6789]|4\.[01]))|4\.(?:1(?:5(?:4\.1(?:[345678]\d|2[89]|9[01])|8\.2(?:5[012345]|4\d))|3[01]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|6(?:3\.(?:1(?:4[679]|5[01])|24[034567])|0\.12[123]|1\.247)|232\.2(?:5[012345]|4[89]))|3\.1(?:20\.(?:3[23456789]|6[0123]|[45]\d)|7(?:5\.2(?:5[012345]|4\d)|4\.164)|68\.(?:2[012345]|1[89]))|5\.(?:21(?:[67]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|5\.14[0123])|64\.(?:1[13]|9[89]))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|6(?:4\.(?:1(?:12\.(?:1(?:[012345678]\d?|9[01]?)?|[23456789]\d?|0)|5\.(?:[023456789]|1[012345]?)|85\.2(?:2[456789]|3\d))|44\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|234\.2(?:2[456789]|3\d))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|7\.21(?:[18]\.2(?:2[0123]|0[89]|1\d)|3\.1(?:4[0123]|2[89]|3\d))|2\.1(?:22\.(?:3[23456789]|7[23])|82\.15[23456789])|3\.141\.(?:3[23456789]|6[0123]|[45]\d)|6\.231\.(?:6[456789]|7\d))|8(?:1\.(?:4\.(?:[0789]|[12345]\d?|6[0123]?)|162\.
1(?:[345678]\d|2[89]|9[01])|22\.15[23])|5\.(?:202\.(?:1(?:9[23456789]|7[012345]|6\d)|20[01234567])|12(?:0\.9[45]|1\.39))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|4\.22\.(?:1(?:2[01234567]|[01]\d)|9[6789])|8\.135\.(?:1[6789]|3[01]|2\d)|9\.(?:114\.97?|45\.14)|6\.55\.(?:21[01]|140))|3(?:1\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|42\.1(?:[345]\d|2[89])|222\.20[01234567]|1(?:4\.10|1\.4)3)|7\.(?:2(?:46\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|30\.212)|1(?:48\.2(?:1[6789]|2[0123])|39\.49))|0?\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|7(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|9\.110\.(?:1(?:[678]\d?|9[01]?)|6[0123]|[25]\d|3[01]|4[89])|7\.90\.(?:[0789]|[12345]\d?|6[0123]?)|2\.13\.(?:1[6789]|3[01]|2\d)|4\.123\.(?:10[0123]|9[6789])|8\.31\.1(?:8[456789]|9[01]))|5(?:\.(?:(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])|7[2345]|132)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|62\.(?:2(?:5[012345]|[01234]\d)|1(?:[34
56789]\d|2[89])))|8\.83\.(?:[89]|1[01]))|[04]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1(?:(?:9(?:9\.(?:2(?:4(?:8\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|6\.(?:21[35]|137)|5\.138)|6\.(?:1(?:2[01234567]|[01]\d)|9[6789])|00\.(?:6[456789]|9[012345]|[78]\d)|30\.(?:6[456789]|10[0123]|[789]\d)|54\.(?:3[23456789]|4[01234567])|12\.(?:1(?:1[01]|0\d)|9[6789]))|1(?:9(?:6\.(?:2(?:2[0123]|[01]\d)|19[23456789])|8\.1(?:8[01234589]|[67]\d|9[01]))|6(?:5\.(?:3[23456789]|6[0123]|[45]\d)|6\.20[0123])|85\.(?:19[23456789]|20[01234567])|20\.163)|8(?:4\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|8\.(?:3[23456789]|5[01]|4\d)|9\.(?:1[6789]|3[01]|2\d))|3(?:4\.1(?:[345678]\d|2[89]|9[01])|3\.145)|5(?:8\.2(?:5[012345]|4[89])|\.15[23])|46\.(?:3[23456789]|6[0123]|[45]\d)|71\.(?:19[23456789]|20[01234567])|9\.(?:2[456789]|3[01])|60\.102)|8\.(?:1(?:8(?:1\.(?:6[456789]|9[012345]|[78]\d)|3\.(?:3[23456789]|6[0123]|[45]\d)|6\.25)|51\.(?:1(?:2[01
234567]|5[2345]|[01]\d)|6[456789]|[789]\d)|3\.(?:[023456789]|1[012345]?)|62\.2(?:2[0123]|0[89]|1\d)|76\.(?:6[0123]|4[89]|5\d))|2(?:0(?:5\.(?:6[456789]|9[012345]|[78]\d)|\.(?:1[6789]|3[01]|2\d)|4\.[01234567])|3\.(?:3[23456789]|4[01234567]))|4(?:5\.(?:3[23456789]|4[01234567])|8\.(?:1[6789]|3[01]|2\d))|96\.2(?:2[456789]|3\d)|57\.(?:6[456789]|7\d))|2\.(?:2(?:2(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|9\.(?:3[23456789]|6[0123]|[45]\d))|19\.(?:2(?:1[012345]|0\d)|1[23456789]\d)|6\.25)|1(?:71\.(?:6[456789]|9[012345]|[78]\d)|12\.1(?:1[23456789]|2[01234567])|01\.2(?:0[01234567]|4\d)|60\.44|97\.87)|43\.1(?:5[3456789]|7[56789]|8[01234]|60)|67\.16[0123]?|31\.21[23]|86\.85)|3\.(?:1(?:0(?:5\.(?:1(?:[58]4|41)|2(?:07|45))|4\.(?:1(?:10|76|2)|[39]4|41)|6\.3[2345]|7\.1[6789]|8\.178)|78\.1(?:2[0123]|72)|1(?:0\.136|1\.235)|6\.(?:100|213)|38\.17[2345]|48\.47)|2(?:0(?:1\.19[23]|0\.167)|2(?:7\.24[01]|8\.145)|(?:43\.16|3\.12)6|7\.23[23])|4(?:3\.134|6\.211|1\.38)|0\.212)|5\.(?:1(?:4(?:9\.(?:
88|90)|\.11[23])|9(?:1\.10[23]|0\.157)|8(?:4\.8[67]|2\.57)|14\.[89]|62\.[67])|2(?:2(?:6\.(?:197|220)|5\.17[6789])|8\.1[01]|\.21[23]|46\.200)|8(?:8\.(?:19[01]|22[67])|5\.204)|9(?:3\.(?:18[45]|20[89])|5\.155)|5(?:4\.16[23]|\.161)|78\.10[89])|4\.(?:1(?:1(?:0\.16[0123]|6\.14[67])|\.(?:22[01]|184)|26\.(?:193|251)|65\.[45]|40\.229)|5(?:4\.15[6789]|0\.116)|6(?:3\.14[4567]|0\.242)|2(?:42\.[23]|9\.185)|44\.4)|(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|6\.(?:194|246))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|(?:3(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|4\.(?:1(?:27|72)|2(?:09|3)|33)|2\.(?:145|232)|0\.2(?:01|22)|6\.228|9\.167|8\.43)|5(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|7\.2(?:3[12]|26)|9\.(?:141|223)|0\.1(?:26|41)|1\.123|2\.147|5\.190)|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1(?:6\.1(?:9(?:9\.1(?:[345]\d|2[89])|7\.15[23456789])|4[4567]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.(?:44\.1(?:4[0123]|2[89]|3\d)|232\.1
(?:7[012345]|6\d))|3\.20\.1(?:[678]\d|9[01])|9\.42\.4[0123])|4(?:\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|192\.(?:4[89]|5\d))|(?:8\.(?:1(?:05|78)|248)|(?:0\.17|7\.5)0|3\.(?:135|49))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1\.136\.(?:1[67]|2[27])|6\.185\.254)|7(?:(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.(?:1(?:06|13|20)|67)|6\.47)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|3\.2(?:05\.(?:[06789]|5[012345]?|[1234]\d?)|49\.1(?:[678]\d|9[01]))|8\.159\.1(?:7[6789]|9[01]|8\d)|1\.25\.190)|2(?:(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|8\.1(?:68|99))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|(?:1\.4|9\.7)6\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|2\.202\.(?:1(?:2[01234567]|[01]\d)|9[6789]))|8(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|6\.190\.2(?:2[456789]|3[01])|8\.247\.(?:135|230)))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|6(?:(?:7\.(?:2(?:8\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|24\.(?:[0456789]|[12]\d?|3[01]?))|97\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|(?:1\.232|2\.125)\
.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.0\.0))|0(?:(?:3\.(?:1(?:4\.2(?:0[89]|1[01])|0\.(?:6[89]|7[01]))|2(?:46\.7[2345]|\.4[4567])|7\.20[4567])|9\.94\.2(?:2[0123]|0[89]|1\d))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.0\.0))))\b)/
+header KHOP_SPAMHAUS_DROP_LE X-Spam-Relays-External =~ /^[^]]*___ FAILED TO POPULATE ___/
describe KHOP_SPAMHAUS_DROP_LE Relay listed in Spamhaus Don't Route Or Peer List
tflags KHOP_SPAMHAUS_DROP_LE nopublish
score KHOP_SPAMHAUS_DROP_LE 2 0 2 0 # adds to KHOP_SPAMHAUS_DROP