You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/03/18 07:57:36 UTC
svn commit: r1457659 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Mon Mar 18 06:57:36 2013
New Revision: 1457659
URL: http://svn.apache.org/r1457659
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1457659&r1=1457658&r2=1457659&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Mon Mar 18 06:57:36 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201303172
+## khop-sc-neighbors.cf v 201303182
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -74,7 +74,7 @@ score KHOP_SC_CIDR16 1.0 0.2 1.0 0.2
# crap, still empty 20100410 bad scrape, script failed to populate rule
# crap, still empty 20110227 this is due to safety net exclusions -> 1 .2 1 .2
-header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b85\.105(?:\.[012]?\d{1,2}){2}\b)/
+header KHOP_SC_TOP_CIDR16 Received =~ /___ FAILED TO POPULATE ___/
describe KHOP_SC_TOP_CIDR16 Relay CIDR /16 leads SpamCop in worst /16s
tflags KHOP_SC_TOP_CIDR16 nopublish
score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0.4
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:0(?:1\.101\.145|3\.9\.156)|(?:76\.31\.15|20\.128\.)2|12\.217\.161|99\.229\.250|44\.76\.38)|21(?:3\.23(?:0\.128|3\.64)|7\.2(?:00\.184|3\.8))|66\.35\.79)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:(?:76\.31\.15|20\.128\.)2|44\.76\.[23]8|01\.101\.145|12\.217\.161|99\.229\.250)|21(?:3\.230\.128|7\.200\.184)|(?:66\.35\.7|75\.102\.)9)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:216\.130|97\.24)|0\.52\.8)|2(?:5\.(?:60\.156|91\.11)|0\.84\.13)|03\.9\.156|44\.76\.28|97\.252\.0)|2(?:1(?:7\.23\.[25]|0\.21\.225)|00\.77\.172)|8(?:0\.36\.130|9\.218\.68)|31\.7\.125|41\.254\.1|75\.102\.9)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:216\.130|97\.24)|0\.52\.8)|2(?:5\.(?:60\.156|91\.11)|0\.84\.13)|03\.9\.156|97\.252\.0)|2(?:1(?:7\.23\.[258]|0\.21\.225)|00\.77\.172)|8(?:0\.36\.130|9\.218\.68)|31\.7\.125)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:21(?:7\.(?:225\.146|161\.58)|6\.130\.34)|149\.78\.104|97\.24\.158|78\.6\.131)|6\.(?:213\.249\.40|12\.230\.46)|3\.160\.226\.129|5\.249\.63\.164|9\.30\.132\.130|0\.14\.46\.47)|2(?:1\.(?:1(?:56\.65\.1(?:65|87)|24\.124\.79|4\.17\.220)|22\.127\.17)|4\.1(?:2(?:4\.43\.206|5\.156\.52)|65\.228\.18|36\.228\.3)|5\.(?:91\.11\.8[789]|63\.65\.45)|0\.132\.132\.119)|9(?:2\.(?:1(?:57\.212\.15[012]|74\.84\.47)|227\.137\.55)|9\.(?:229\.250\.(?:144|235)|58\.163\.56)|5\.1(?:28\.253\.152|3\.200\.218)|0\.1(?:77\.198\.9|95\.191\.8)8)|7(?:3\.(?:2(?:54\.216\.1(?:38|40)|45\.6\.178)|189\.26\.140)|6\.(?:31\.152\.1(?:0[18]|1[36]|23)|53\.233\.76)|8\.1(?:24\.128\.26|51\.86\.1)|5\.196\.73\.189)|8(?:8\.(?:16(?:5\.1(?:90\.1(?:4[18]|30)|49\.(?:17|24)|25\.81)|8\.46\.53)|252\.0\.237)|0\.211\.179\.30|1\.134\.0\.116|5\.2\.12\.77)|4(?:(?:9\.255\.3\.15|\.139\.190\.9)8|4\.76\.(?:28\.103|38\.39))|0(?:9\.251\.28\.154|3\.3\.188\.13)|53\.127\.236\.15|\.234\.
6\.81)|2(?:1(?:7\.2(?:3\.(?:8\.1(?:8[56]|19|60)|12\.1(?:4[24]|94)|2\.1(?:2[89]|05)|5\.(?:3[57]|64))|00\.184\.87)|1\.(?:1(?:15\.127\.244|89\.88\.180)|206\.121\.66|38\.184\.253|99\.212\.154|63\.82\.175)|0\.(?:2(?:10\.110\.226|45\.89\.69)|183\.11\.151|51\.44\.199)|3\.(?:2(?:30\.128\.226|51\.186\.229)|55\.72\.14)|6\.(?:45\.55\.20[14]|83\.60\.76)|8\.(?:194\.91\.238|38\.13\.31)|2\.(?:77\.203\.50|49\.70\.48))|0(?:2\.(?:1(?:(?:13\.65\.22|42\.203\.1)9|29\.124\.168|58\.39\.250|04\.22\.42)|71\.136\.200|44\.53\.64)|0\.(?:142\.133\.21|47\.10\.209|79\.27\.60)|3\.(?:144\.170\.98|239\.21\.72)|1\.(?:195\.239\.27|45\.114\.3)|7\.148\.183\.202)|2(?:2\.(?:(?:234\.222\.16|75\.151\.24)0|174\.255\.238)|1\.(?:214\.208\.226|149\.123\.40)|0\.(?:73\.130\.66|93\.111\.47))|7\.251\.160\.226)|6(?:6\.(?:1(?:99\.254\.(?:5[689]|61)|15\.88\.126)|(?:225\.128\.7|84\.50\.13)3|35\.79\.(?:19[479]|20[04]))|1\.(?:1(?:10\.67\.125|38\.104\.30)|41\.148\.62)|2\.1(?:62\.1(?:67\.138|79\.205)|48\.137\.138)|7\.2(?:29\.70\.12
4|35\.80\.241)|0\.244\.186\.180|8\.112\.23\.163)|7(?:8\.(?:1(?:54\.214\.140|28\.76\.159)|97\.96\.33)|5\.1(?:02\.9\.(?:2(?:09|38)|71)|86\.145\.159)|2\.(?:9\.96\.21[268]|35\.20\.131)|7\.(?:106\.232\.178|41\.1\.12)|0\.34\.203\.21)|8(?:9\.218\.68\.(?:1(?:22|38|46|54)|34)|(?:0\.36\.130\.13|5\.214\.157\.7)5|4\.(?:15\.191\.254|54\.160\.128)|1\.172\.34\.189|3\.14\.26\.98|\.33\.183\.1)|9(?:3\.(?:159\.160\.164|95\.184\.236)|4\.24(?:2\.243\.7[18]|5\.155\.9)|1\.(?:121\.184\.1|235\.126\.9)2|0\.83\.184\.211)|5(?:9\.(?:90\.(?:192\.173|206\.95)|60\.7\.146)|8\.2(?:27\.21\.27|54\.168\.0)|\.39\.25\.(?:[12]7|6)|4\.247\.41\.229)|4(?:1\.(?:2(?:08\.106\.244|22\.70\.242)|137\.2[04]\.4|74\.167\.29)|6\.137\.44\.44)|37\.2(?:06\.210\.130|29\.210\.95))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:9(?:2\.(?:1(?:57\.212\.15[012]|74\.84\.47)|227\.137\.55)|9\.(?:229\.250\.(?:144|235)|58\.163\.56)|(?:4\.158\.204\.25|3\.93\.12\.1)0|5\.1(?:28\.253\.152|3\.200\.218)|0\.1(?:77\.198\.9|95\.191\.8)8|8\.23\.143\.(?:116|37))|1(?:2\.(?:21(?:7\.(?:225\.146|161\.58)|6\.130\.34)|149\.78\.104|97\.24\.158|78\.6\.131)|6\.(?:213\.249\.40|12\.230\.46)|3\.160\.226\.129|5\.249\.63\.164|8\.26\.204\.182|0\.14\.46\.47)|2(?:1\.(?:1(?:56\.65\.1(?:65|87)|24\.124\.79|4\.17\.220)|22\.127\.17)|4\.12(?:4\.43\.206|5\.156\.52)|5\.91\.11\.8[789]|0\.132\.132\.119|2\.160\.13\.66)|7(?:6\.(?:31\.152\.(?:1(?:0[18]|1[36]|2[23])|97)|53\.233\.76)|3\.2(?:54\.216\.1(?:38|40)|45\.6\.178)|8\.(?:207\.158\.230|151\.86\.1)|5\.196\.73\.189)|8(?:8\.(?:1(?:6(?:5\.1(?:90\.1(?:4[18]|30)|49\.(?:17|24)|25\.81)|8\.46\.53)|90\.70\.61)|252\.0\.237)|0\.211\.179\.30|1\.134\.0\.116|5\.2\.12\.77)|4(?:(?:9\.255\.3\.15|\.139\.190\.9)8|4\.76\.(?:28\.103|38\.39))|0(?:3\.(?:9\.157\.1
68|3\.188\.13)|9\.251\.28\.154)|53\.127\.236\.15|63\.177\.112\.2)|2(?:1(?:7\.(?:2(?:3\.(?:2\.1(?:2[89]|05|30)|8\.1(?:8[56]|19|60)|12\.1(?:4[24]|94)|5\.(?:3[57]|64))|00\.184\.87)|118\.81\.18)|1\.(?:1(?:15\.127\.244|89\.88\.180)|206\.121\.66|38\.184\.253|99\.212\.154)|0\.(?:1(?:83\.11\.151|17\.6\.152)|210\.110\.226|51\.44\.199)|3\.(?:2(?:30\.128\.226|51\.186\.229)|55\.72\.14)|6\.(?:45\.55\.20[14]|83\.60\.76)|8\.(?:194\.91\.238|38\.13\.31)|2\.49\.70\.48)|0(?:2\.(?:1(?:(?:13\.65\.22|42\.203\.1)9|29\.124\.168|04\.22\.42)|71\.136\.200|44\.53\.64)|1\.(?:1(?:8\.145\.118|95\.239\.27)|22\.7\.225)|0\.(?:247\.100\.178|142\.133\.21|47\.10\.209)|7\.148\.183\.202|3\.144\.170\.98)|2(?:2\.(?:(?:234\.222\.16|75\.151\.24)0|174\.255\.238)|1\.(?:214\.208\.226|149\.123\.40)|0\.(?:73\.130\.66|93\.111\.47))|7\.251\.160\.226)|6(?:6\.(?:(?:225\.128\.7|84\.50\.13)3|35\.79\.(?:19[479]|20[04])|199\.254\.(?:5[689]|61))|2\.1(?:62\.1(?:67\.138|79\.205)|48\.137\.138)|1\.(?:1(?:38\.104\.30|55\.5\.4)|41\.148\
.62)|0\.244\.186\.180|7\.229\.70\.124|8\.112\.23\.163)|8(?:9\.(?:218\.68\.(?:1(?:22|38|46|54)|34)|34\.72\.74)|(?:0\.36\.130\.13|5\.214\.157\.7)5|4\.(?:15\.191\.254|54\.160\.128)|1\.172\.34\.189|3\.14\.26\.98|\.33\.183\.1)|7(?:8\.(?:1(?:28\.76\.15[49]|54\.214\.140)|97\.96\.33)|2\.(?:9\.96\.21[268]|35\.20\.131)|7\.(?:106\.232\.178|41\.1\.12)|5\.102\.9\.(?:238|71)|0\.34\.203\.21)|9(?:1\.(?:1(?:21\.184\.12|94\.57\.18)|235\.126\.92)|3\.(?:159\.160\.164|95\.184\.236)|4\.242\.243\.7[18]|0\.83\.184\.211)|5(?:9\.(?:90\.192\.173|60\.7\.146)|\.39\.25\.(?:[12]7|6)|4\.247\.41\.229|8\.227\.21\.27)|4(?:1\.(?:2(?:08\.106\.244|22\.70\.242)|137\.2[04]\.4)|6\.137\.44\.44)|3(?:7\.2(?:06\.210\.130|5\.36\.157)|6\.231\.72\.140))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work