You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/04/27 08:57:21 UTC
svn commit: r1476504 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Sat Apr 27 06:57:21 2013
New Revision: 1476504
URL: http://svn.apache.org/r1476504
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1476504&r1=1476503&r2=1476504&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Sat Apr 27 06:57:21 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201304262
+## khop-sc-neighbors.cf v 201304272
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:03\.(?:30\.72|9\.156)|63\.177\.112|80\.225\.131|99\.180\.113|12\.90\.197|21\.54\.54)|2(?:04\.45\.139|22\.236\.16)|6(?:5\.181\.127|6\.199\.228)|58\.25(?:3\.216|4\.168)|46\.53\.195)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:(?:99\.180\.11|12\.97\.3)3|03\.(?:30\.72|9\.156)|63\.177\.112|80\.225\.131|21\.54\.54)|6(?:5\.181\.127|6\.199\.228|4\.235\.49)|58\.25(?:3\.216|4\.168)|204\.45\.139|46\.53\.195)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.(?:128\.2|84\.13)|5\.60\.156)|1(?:2\.9(?:0\.90|7\.33)|0\.52\.16)|78\.172\.(?:1(?:8[36]|53)|229)|03\.20\.37)|2(?:1(?:3\.230\.128|0\.21\.225)|08\.82\.114|\.139\.178)|80\.36\.130|70\.32\.34)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:2\.9(?:0\.(?:197|90)|7\.33)|0\.52\.16)|2(?:0\.(?:128\.2|84\.13)|5\.60\.156)|78\.172\.(?:1(?:8[36]|53)|229)|03\.20\.37)|2(?:1(?:3\.230\.128|0\.21\.225)|08\.82\.114|\.139\.178)|80\.36\.130|70\.32\.34)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:9(?:0\.90\.1[6789]|7\.33\.45)|217\.218\.218|186\.46\.107)|5\.(?:249\.63\.164|88\.119\.132|71\.238\.71|94\.87\.218)|4\.(?:141\.253\.134|207\.113\.55)|9\.1(?:84\.214\.18|93\.93\.25)|0\.165\.125\.152|7\.211\.91\.147)|7(?:8\.(?:(?:163\.105\.5|63\.165\.21)2|207\.158\.230)|6\.(?:53\.2(?:0\.16[56]|33\.76)|31\.207\.18[67])|3\.2(?:12\.240\.245|08\.133\.67)|4\.1(?:38\.172\.50|42\.104\.5)|5\.(?:196\.73\.18|45\.10\.13)9|7\.67\.96\.244)|9(?:9\.(?:180\.113\.(?:10[02]|98)|30\.136\.12[34]|255\.11\.29)|(?:5\.128\.253\.15|0\.25\.218\.10)2|2\.(?:210\.232\.28|95\.60\.193)|3\.255\.143\.63)|2(?:1\.(?:1(?:81\.2(?:37\.251|51\.188)|4\.17\.220)|254\.228\.25|78\.152\.51)|3\.1(?:10\.183\.106|6\.252\.77)|4\.243\.124\.206|2\.154\.24\.254)|8(?:8\.(?:127\.230\.28|40\.127\.86)|0\.225\.131\.176|2\.237\.2\.115|7\.4\.80\.188)|0(?:8\.174\.195\.182|3\.9\.157\.181|6\.241\.3\.217)|63\.17(?:7\.112\.(?:1[01]0|2)|9\.238\.168)|5(?:3\.127\.236\.15|8\.255\.
1\.250)|49\.255\.3\.158)|2(?:1(?:0\.(?:21(?:\.225\.2(?:5[01234]|2[789]|[34]\d)|0\.115\.249)|168\.50\.16|51\.44\.199)|1\.(?:2(?:41\.161\.131|06\.121\.66)|33\.121\.196|58\.255\.121|115\.68\.32)|8\.(?:1(?:45\.71\.192|94\.91\.238)|2(?:2\.17\.235|\.0\.60))|7\.(?:200\.184\.87|198\.3\.238)|3\.2(?:30\.128\.226|21\.9\.13))|0(?:8\.82\.114\.(?:4[3456789]|5[013579]|29)|9\.223\.3(?:5\.16[24]|6\.226)|0\.142\.133\.21|3\.255\.15\.146|4\.45\.139\.184|1\.22\.7\.225)|2(?:2\.(?:1(?:22\.79\.121|74\.163\.2)|236\.16\.14)|(?:0\.94\.235\.20|1\.163\.170\.1)0)|\.139\.178\.(?:184|81)|7\.54\.248\.223)|5(?:8\.25(?:3\.216\.1(?:3[023468]|28|40)|4\.168\.(?:5[6789]|6[012]))|\.39\.216\.(?:37|58|86)|0\.74\.242\.227|4\.228\.53\.251)|6(?:1\.(?:16(?:4\.42\.158|6\.55\.153)|98\.131\.141)|6\.199\.228\.(?:19[68]|20[02])|4\.235\.49\.20[248]|5\.181\.127\.10[68])|7(?:9\.1(?:10\.131\.173|88\.87\.18)|0\.32\.34\.(?:7[01246]|69)|2\.46\.152\.13[12]|7\.106\.232\.178|8\.47\.186\.105)|8(?:7\.2(?:22\.247\.192|36\.232\.231)|1\.16
9\.156\.136|9\.222\.171\.219|0\.36\.130\.135|4\.15\.191\.254)|9(?:1\.121\.(?:234\.4[15]|184\.131|46\.86)|3\.157\.148\.102|4\.102\.53\.200|5\.71\.126\.175)|3(?:1\.41\.112\.60|7\.59\.36\.217)|41\.137\.24\.4)\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:5\.(?:2(?:49\.63\.164|2\.80\.197)|88\.119\.132|71\.238\.71|94\.87\.218)|2\.(?:9(?:0\.90\.1[6789]|7\.33\.45)|217\.218\.218|186\.46\.107)|4\.(?:141\.253\.134|207\.113\.55)|9\.1(?:84\.214\.18|93\.93\.25)|7\.2(?:11\.91\.147|0\.3\.231))|7(?:6\.(?:53\.2(?:0\.1(?:6[59]|70)|33\.76)|31\.207\.186)|8\.(?:(?:163\.105\.5|63\.165\.21)2|207\.158\.230)|4\.1(?:38\.172\.50|42\.104\.5)|5\.(?:196\.73\.18|45\.10\.13)9|3\.208\.133\.67)|9(?:9\.(?:180\.113\.(?:10[02]|9[89])|30\.136\.12[34]|255\.11\.29)|5\.1(?:91\.1(?:66\.25|84\.82)|28\.253\.152)|2\.(?:210\.232\.28|95\.60\.193)|0\.25\.218\.102|3\.255\.143\.63)|2(?:1\.(?:1(?:81\.2(?:37\.251|51\.188)|4\.17\.220)|254\.228\.25|78\.152\.51)|3\.1(?:10\.183\.106|6\.252\.77)|4\.243\.124\.206)|8(?:(?:8\.127\.230\.2|7\.4\.80\.18)8|0\.225\.131\.176|2\.237\.2\.115)|63\.17(?:7\.112\.(?:1[01]0|2)|9\.238\.168)|53\.127\.236\.15|49\.255\.3\.158)|2(?:1(?:0\.(?:21(?:\.225\.2(?:5[01234]|2[789]|[34]\d)|0\.115\.24
9)|168\.50\.16|51\.44\.199)|1\.(?:2(?:41\.161\.131|06\.121\.66)|(?:147\.211\.1|33\.121\.19)6)|8\.(?:1(?:45\.71\.192|94\.91\.238)|2(?:2\.17\.235|\.0\.60))|7\.(?:200\.184\.87|198\.3\.238)|3\.2(?:30\.128\.226|21\.9\.13)|2\.6\.152\.211)|0(?:8\.82\.114\.(?:5[01234579]|4[456789])|2\.(?:142\.203\.19|71\.136\.200)|1\.(?:195\.239\.27|22\.7\.225)|6\.190\.129\.2[02]|9\.223\.35\.16[24]|0\.142\.133\.21|3\.255\.15\.146|4\.45\.139\.184)|2(?:2\.(?:1(?:22\.79\.121|74\.163\.2)|236\.16\.14)|0\.94\.235\.200)|\.139\.178\.(?:184|81))|6(?:6\.(?:199\.228\.(?:19[68]|20[02])|84\.50\.133)|1\.(?:164\.42\.158|98\.131\.141)|4\.235\.49\.20[248]|5\.181\.127\.10[68]|9\.90\.120\.188)|5(?:8\.2(?:5(?:3\.216\.1(?:3[02468]|28|40)|4\.168\.(?:5[6789]|6[0123]))|27\.21\.27)|0\.74\.242\.227|4\.228\.53\.251|\.39\.216\.58)|8(?:(?:0\.36\.130\.13|3\.238\.208\.5)5|7\.2(?:22\.247\.192|36\.232\.231)|1\.169\.156\.136|9\.222\.171\.219|4\.54\.160\.128)|7(?:9\.1(?:10\.131\.173|88\.87\.18)|0\.32\.34\.(?:7[0123456]|69)|8\.47\.186
\.105|2\.35\.20\.131)|9(?:1\.121\.(?:234\.4[15]|184\.131|46\.86)|4\.102\.53\.200|5\.71\.126\.175)|3(?:1\.(?:210\.47\.23|41\.112\.6)|7\.206\.210\.13)0|4(?:2\.113\.107\.151|1\.137\.24\.4))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work