You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/11/19 07:57:24 UTC
svn commit: r1543319 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Tue Nov 19 06:57:24 2013
New Revision: 1543319
URL: http://svn.apache.org/r1543319
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1543319&r1=1543318&r2=1543319&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Tue Nov 19 06:57:24 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201311182
+## khop-sc-neighbors.cf v 201311192
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -21,7 +21,7 @@ meta __KHOP_SC_EXCLUSIONS __VIA_ML || __
# http://spamcop.net/w3m?action=map;mask=4294967295;net=0;sort=56
# Due to the massive block size, this rule only examines the last untrusted
-header __KHOP_SC_CIDR8 X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b1(?:1[37]|23|90)(?:\.[012]?\d{1,2}){3}\b) /
+header __KHOP_SC_CIDR8 X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b(?:1(?:1[37]|90)|2)(?:\.[012]?\d{1,2}){3}\b) /
# and gets cleaned up a bit
meta KHOP_SC_CIDR8 __KHOP_SC_CIDR8 && !__KHOP_SC_EXCLUSIONS
describe KHOP_SC_CIDR8 Relay CIDR /8 is among worst in SpamCop
@@ -101,7 +101,7 @@ score KHOP_SC_TOP_CIDR16 0.6 0.2 0.7 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:98\.(?:24\.17[34]|101\.11)|07\.6\.132)|21(?:7\.13\.154|8\.92\.249|3\.139\.7)|58\.254\.1(?:68|72)|85\.204\.147|93\.171\.48)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:98\.(?:24\.17[34]|101\.11)|07\.6\.132)|21(?:6\.231\.138|7\.13\.154|3\.139\.7)|5(?:8\.254\.1(?:68|72)|\.39\.217)|93\.171\.48)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.6 0 0.6 0
@@ -122,7 +122,7 @@ score KHOP_SC_CIDR24 0.6 0 0.6 0
# 0.4428/0 1.000 20130705@376k resume scores -> .6 0 .6 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:(?:1\.17\.12|4\.95\.15)5|0\.84\.13)|7(?:7\.223\.136|5\.43\.125)|9(?:8\.24\.175|9\.96\.82)|58\.255\.[37]|10\.52\.[02])|7(?:5\.75\.241|7\.81\.106)|213\.132\.241|86\.57\.188|5\.39\.217)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:(?:1\.17\.12|4\.95\.15)5|0\.84\.13)|9(?:(?:2\.199\.1|8\.24\.17)5|9\.96\.82)|5(?:7\.250\.9[89]|8\.255\.[37])|7(?:7\.223\.136|5\.43\.125)|10\.52\.[02])|21(?:3\.132\.241|0\.48\.249)|7(?:5\.75\.241|7\.81\.106)|86\.57\.188)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0.5
@@ -142,7 +142,7 @@ score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:9(?:8\.(?:24\.1(?:7(?:4\.16[37]|5\.[234]|3\.80)|80\.91)|101\.11\.158|50\.201\.196)|9\.96\.82\.(?:[456789]|1[0123689]|20?)|3\.200\.126\.14|0\.82\.89\.156|2\.30\.85\.227|5\.29\.81\.30)|2(?:4\.(?:95\.155\.(?:5[2389]|27|32)|42\.13\.230|160\.35\.2)|1\.(?:17\.125\.(?:1[012345679]|20)|22\.127\.17)|5\.(?:88\.123\.244|46\.24\.62)|2\.182\.28\.245)|1(?:2\.(?:2(?:20\.67\.130|17\.161\.3)|184\.172\.244)|(?:6\.112\.66\.10|8\.244\.239\.)2|9\.(?:193\.93\.25|254\.66\.7)|0\.189\.168\.171|4\.247\.23\.66)|58\.255\.(?:3\.(?:2(?:0[123456789]|1[0123458]|2[012346])|199)|7\.(?:7[0123456]|6[6789]))|7(?:5\.(?:43\.125\.7[4678]|196\.65\.153)|2\.245\.44\.122|3\.200\.90\.196)|4(?:2\.54\.166\.195|8\.223\.59\.187|1\.0\.61\.166|\.63\.74\.204)|8(?:3\.1(?:06\.150\.78|36\.146\.99)|5\.12\.46\.104)|0(?:1\.8\.115\.253|7\.6\.132\.34|8\.44\.210\.8)|\.2(?:09\.216|34\.38)\.106|33\.242\.9\.101)|2(?:1(?:1\.(?:1(?:1(?:1\.250\.177|5\.89\.141|9\.86\.145)|7(?:4\.215\.100|6\.76\.1
98)|47\.211\.16)|44\.103\.11)|0\.(?:1(?:83\.179\.45|3\.80\.212|7\.248\.78)|245\.89\.69|93\.48\.211)|3\.1(?:(?:71\.39\.15|95\.77\.11)4|3(?:2\.241\.13|9\.7\.95))|9\.(?:1(?:39\.38\.49|47\.172\.2)|240\.39\.201)|8\.(?:92\.249\.162|38\.147\.17)|7\.(?:13\.154\.15|8\.255\.24)5|6\.231\.13(?:6\.17|8\.13)4|2\.67\.215\.1[19]2)|0(?:2\.(?:1(?:(?:29\.216\.6|58\.39\.25)0|42\.203\.19)|71\.136\.200|234\.40\.41|53\.13\.187)|3\.(?:171\.233\.243|234\.111\.248)|1\.1(?:16\.199\.34|95\.239\.27)|0\.(?:142\.133\.21|79\.27\.60)|4\.77\.0\.7[35])|2(?:2\.(?:2(?:55\.144\.220|40\.250\.7)|122\.(?:227\.10|79\.103))|1\.2(?:3(?:2\.247\.27|4\.24\.46)|14\.208\.226)|0\.68\.224\.45)|4\.153\.129\.102)|6(?:0\.(?:190\.216\.1(?:33|51)|251\.31\.134)|1\.1(?:06\.235\.180|33\.125\.162)|8\.6(?:4\.161\.11[56]|5\.140\.12)|9\.198\.197\.156|5\.60\.15\.173|7\.90\.21\.150)|5(?:9\.1(?:2(?:5\.124\.216|4\.115\.88)|08\.68\.135|51\.37\.8)|\.39\.217\.(?:1(?:9[27]|88)|201))|7(?:7\.(?:81\.106\.(?:5[67]|7[01]|39|63)|106\.232\.178)|2\.35\.20\.131
|4\.9\.203\.186)|8(?:3\.(?:18\.234\.202|238\.208\.55|3\.103\.227)|2\.117\.194\.229|5\.204\.147\.86)|9(?:3\.159\.160\.164|4\.77\.199\.148)|37\.123\.98\.115|49\.218\.45\.18)\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:9(?:8\.(?:24\.1(?:7(?:4\.16[37]|5\.[234]|3\.80)|80\.91)|101\.11\.158|50\.201\.196)|9\.96\.82\.(?:[3456789]|1[0123689]|2[01]?)|2\.(?:199\.15\.174|30\.85\.227)|3\.200\.126\.14|0\.82\.89\.156|5\.29\.81\.30)|2(?:1\.(?:1(?:7\.125\.(?:1[012345679]|20)|81\.252\.228)|22\.127\.17)|4\.(?:95\.155\.(?:5[2389]|27|32)|42\.13\.230)|5\.(?:88\.123\.244|46\.24\.62)|2\.182\.28\.245)|1(?:2\.(?:184\.172\.244|220\.67\.130)|6\.1(?:12\.66\.102|93\.90\.26)|9\.(?:193\.93\.25|254\.66\.7)|4\.247\.23\.66|8\.244\.239\.2)|58\.255\.(?:3\.(?:2(?:0[123456789]|1[0123458]|2[012346])|199)|7\.(?:6[6789]|8[01]|7\d))|4(?:2\.54\.166\.195|8\.223\.59\.187|1\.0\.61\.166|\.63\.74\.204)|7(?:5\.(?:43\.125\.7[4678]|196\.65\.153)|3\.200\.90\.196)|0(?:7\.6\.132\.34|8\.44\.210\.8)|83\.1(?:06\.150\.78|36\.146\.99)|\.2(?:09\.216|34\.38)\.106|33\.242\.9\.101)|2(?:1(?:1\.(?:1(?:1(?:1\.250\.177|5\.89\.141|9\.86\.145)|7(?:4\.215\.100|6\.76\.198)|47\.211\.16)|230\.74\.17|44\.103\.11)|0\
.(?:1(?:83\.179\.45|3\.80\.212|7\.248\.78)|245\.89\.69|93\.48\.211)|3\.1(?:(?:71\.39\.15|95\.77\.11)4|3(?:2\.241\.13|9\.7\.95))|8\.(?:92\.249\.162|38\.147\.17)|9\.(?:240\.39\.201|139\.38\.49)|6\.231\.13(?:6\.17|8\.13)4|2\.67\.215\.1(?:[19]2|76)|7\.13\.154\.155)|0(?:2\.(?:1(?:(?:29\.216\.6|58\.39\.25)0|42\.203\.19)|71\.136\.200|234\.40\.41|53\.13\.187)|3\.(?:171\.233\.243|211\.133\.244)|1\.1(?:16\.199\.34|95\.239\.27)|0\.(?:142\.133\.21|79\.27\.60)|4\.77\.0\.7[35])|2(?:2\.(?:2(?:55\.144\.220|40\.250\.7)|122\.(?:227\.10|79\.103))|1\.2(?:3(?:2\.247\.27|4\.24\.46)|14\.208\.226))|4\.153\.129\.102)|6(?:0\.(?:190\.216\.1(?:33|51)|251\.31\.134)|1\.1(?:06\.235\.180|33\.125\.162)|8\.6(?:4\.161\.11[56]|5\.140\.12)|9\.198\.197\.156|5\.60\.15\.173|7\.90\.21\.150)|5(?:9\.1(?:(?:24\.115\.8|51\.37\.)8|08\.68\.135)|\.39\.217\.(?:1(?:9[27]|88)|201))|8(?:3\.(?:18\.234\.202|238\.208\.55|3\.103\.227)|2\.117\.194\.229|5\.204\.147\.86)|7(?:7\.(?:81\.106\.(?:5[67]|7[01]|63)|106\.232\.178)|2\.35\.20\.131)|9
(?:3\.159\.160\.164|4\.77\.199\.148)|37\.123\.98\.115|49\.218\.45\.18)\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work