You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/05/31 08:57:19 UTC
svn commit: r1488112 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Fri May 31 06:57:19 2013
New Revision: 1488112
URL: http://svn.apache.org/r1488112
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1488112&r1=1488111&r2=1488112&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Fri May 31 06:57:19 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201305302
+## khop-sc-neighbors.cf v 201305312
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -74,7 +74,7 @@ score KHOP_SC_CIDR16 1.0 0.2 1.0 0.2
# crap, still empty 20100410 bad scrape, script failed to populate rule
# crap, still empty 20110227 this is due to safety net exclusions -> 1 .2 1 .2
-header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b(?:1(?:13\.16|78\.12)7|222\.252|37\.45)(?:\.[012]?\d{1,2}){2}\b)/
+header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b(?:222\.252|37\.45)(?:\.[012]?\d{1,2}){2}\b)/
describe KHOP_SC_TOP_CIDR16 Relay CIDR /16 leads SpamCop in worst /16s
tflags KHOP_SC_TOP_CIDR16 nopublish
score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0.4
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:1\.(?:181\.251|54\.54)|0\.(?:128\.2|84\.13))|84\.82\.(?:10|2)9|73\.212\.250|12\.90\.197|03\.30\.72)|58\.25(?:3\.216|4\.168)|46\.53\.195|66\.96\.213)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:1\.(?:181\.251|54\.54)|0\.128\.2)|84\.82\.(?:1(?:09|20)|29)|73\.212\.250|12\.90\.197|03\.30\.72)|5(?:8\.254\.168|\.39\.220)|46\.53\.195|66\.96\.213)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:90\.90\.2[0123]|186\.46\.107|216\.102\.98)|5\.(?:88\.(?:119\.132|247\.131)|22\.80\.197)|4\.(?:207\.113\.55|46\.193\.148)|8\.(?:114\.77\.116|97\.196\.163)|9\.19(?:2\.252\.1|3\.93\.25)|0\.45\.1(?:36\.181|40\.89)|3\.31\.42\.30|7\.20\.3\.231)|8(?:4\.82\.(?:1(?:5(?:9\.237|4\.51)|20\.235|09\.14)|29\.3[34])|8\.(?:1(?:27\.230\.28|68\.46\.53)|252\.0\.237)|0\.(?:225\.131\.176|176\.11\.202)|9\.(?:108\.118\.194|39\.35\.168)|3\.101\.38\.202)|7(?:3\.(?:192\.144\.105|212\.250\.230)|8\.(?:148\.210\.173|211\.46\.190)|4\.36\.167\.116|7\.1\.223\.103)|9(?:5\.1(?:38\.195\.125|91\.184\.82)|(?:0\.82\.89\.15|4\.106\.16\.)6|8\.23\.145\.114|9\.255\.11\.29)|2(?:1\.(?:181\.2(?:37\.251|51\.188)|78\.180\.19)|2\.165\.225\.177|3\.0\.199\.126)|0(?:8\.(?:174\.62\.168|62\.62\.235)|3\.9\.15(?:7\.181|6\.89)|9\.195\.23\.55)|3(?:0\.255\.190\.22|3\.242\.115\.4)4|51\.84\.131\.107|49\.255\.3\.158|\.234\.3\.13)|2(?:1(?:0\.(?:2(?:1\.225\.2(?:3[059]|4[24]|
27|53)|45\.89\.69)|5(?:1\.44\.199|6\.23\.100))|3\.(?:1(?:71\.39\.154|32\.241\.7|86\.39\.43)|230\.128\.226|81\.164\.57)|1\.(?:1(?:36\.104\.20|47\.211\.1)6|54\.17\.201)|9\.(?:68\.209\.240|80\.238\.185)|7\.(?:198\.3\.238|24\.246\.35)|6\.153\.136\.125|8\.234\.108\.13|2\.6\.152\.211)|0(?:8\.(?:82\.114\.(?:5[13579]|4[4579]|2[359])|71\.172\.(?:8[45789]|9[1234])|113\.254\.39)|3\.(?:(?:93\.108\.14|155\.102\.)2|2(?:55\.15\.146|10\.83\.23))|0\.(?:(?:142\.133\.2|94\.77\.)1|7(?:2\.11\.132|9\.27\.60))|2\.(?:1(?:42\.203\.19|58\.39\.250)|71\.136\.200)|1\.(?:22\.7\.225|45\.114\.3))|2(?:0\.(?:130\.231\.172|94\.235\.200)|1\.1(?:94\.128\.22[34]|32\.35\.7)|2\.174\.155\.19)|4\.127\.201\.172)|6(?:1\.(?:1(?:64\.42\.158|10\.156\.4)|7(?:8\.109\.61|0\.83\.58)|252\.138\.195|98\.131\.141)|6\.(?:199\.224\.(?:[68]|1[01234568]|20)|96\.213\.13[48]|84\.49\.9)|(?:(?:2\.13\.171|9\.65\.43)\.4|0\.247\.79\.22)6|4\.(?:120\.1(?:70\.138|81\.94)|71\.130\.190)|8\.115\.192\.7)|8(?:(?:1\.(?:15\.172\.14|23\.106\.7)|0\.(?
:36\.130\.13|70\.2\.18))5|3\.(?:18\.234\.202|238\.208\.55|3\.103\.227)|7\.(?:106\.242\.230|236\.232\.231)|5\.214\.90\.114)|7(?:2\.(?:42\.224\.(?:1[012346789]|2[024]|7)|35\.20\.131)|6\.74\.186\.237|8\.136\.93\.251|4\.9\.203\.186)|4(?:6\.(?:32\.23(?:2\.144|3\.22|4\.78)|182\.24\.130)|9\.159\.221\.6|1\.137\.24\.4)|5(?:8\.2(?:54\.168\.(?:5[6789]|6[013])|37\.102\.214)|\.39\.220\.254)|37\.(?:206\.210\.13|122\.211\.2)0|9(?:4\.249\.59\.13|5\.48\.24\.10))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:186\.(?:46\.107|16\.5)|90\.90\.2[0123]|216\.102\.98)|5\.(?:88\.(?:119\.132|247\.131)|22\.80\.197|90\.96\.85)|0\.45\.(?:1(?:36\.181|40\.89)|244\.54)|4\.(?:207\.113\.55|46\.193\.148)|8\.(?:114\.77\.116|97\.196\.163)|9\.19(?:2\.252\.1|3\.93\.25)|6\.118\.180\.183|7\.20\.3\.231)|8(?:8\.(?:1(?:27\.230\.28|68\.46\.53)|64\.184\.126|252\.0\.237)|4\.82\.(?:1(?:5(?:9\.237|4\.51)|20\.235|09\.14)|29\.3[34])|(?:0\.176\.11|3\.101\.38)\.202|9\.39\.35\.168)|7(?:3\.(?:44\.144\.14[89]|192\.144\.105|212\.250\.230)|8\.(?:1(?:48\.210\.173|51\.86\.1)|211\.46\.190)|7\.(?:229\.172\.195|1\.223\.103)|4\.36\.167\.116)|9(?:5\.1(?:38\.195\.125|91\.184\.82)|9\.(?:168\.141\.98|255\.11\.29)|0\.195\.191\.88|2\.162\.24\.71|4\.106\.16\.6)|2(?:1\.(?:181\.251\.188|78\.180\.19)|3\.(?:0\.199\.126|18\.206\.39)|2\.165\.225\.177|0\.50\.86\.3)|0(?:8\.(?:61\.55\.16[79]|174\.62\.168)|3\.9\.15(?:7\.181|6\.89))|3(?:0\.255\.190\.22|3\.242\.115\.4)4|\.2(?:09\.1
63\.|34\.3\.1)3|51\.84\.131\.107|49\.255\.3\.158)|2(?:1(?:1\.(?:1(?:36\.104\.20|91\.168\.16|47\.211\.1)6|222\.53\.83|54\.17\.201)|3\.(?:1(?:71\.39\.154|32\.241\.7|86\.39\.43)|230\.128\.226|81\.164\.57)|9\.(?:68\.209\.240|80\.238\.185)|0\.(?:245\.89\.69|56\.23\.100)|7\.(?:198\.3\.238|24\.246\.35)|6\.153\.136\.125|8\.234\.108\.13|2\.6\.152\.211)|0(?:8\.(?:82\.114\.(?:5[13579]|4[4579]|2[35])|71\.172\.(?:8[456789]|9[134])|113\.254\.39)|0\.(?:(?:142\.133\.2|94\.77\.)1|7(?:2\.11\.132|9\.27\.60))|2\.(?:1(?:42\.203\.19|58\.39\.250)|71\.136\.200)|1\.(?:2(?:39\.108\.248|2\.7\.225)|45\.114\.3)|3\.(?:255\.15\.146|155\.102\.2))|2(?:0\.(?:130\.231\.172|94\.235\.200)|2\.174\.155\.19|3\.26\.193\.53)|4\.127\.201\.172)|6(?:1\.(?:1(?:64\.42\.158|10\.156\.4)|252\.138\.195|98\.131\.141|70\.83\.58)|6\.(?:199\.224\.(?:[68]|1[023456789]|20)|96\.213\.13[48]|84\.49\.9)|4\.(?:120\.1(?:70\.138|81\.94)|71\.130\.190)|2\.13\.171\.46|8\.115\.192\.7)|8(?:(?:1\.(?:15\.172\.14|23\.106\.7)|0\.36\.130\.13)5|3\.
(?:18\.234\.202|238\.208\.55|3\.103\.227)|9\.(?:207\.129\.(?:39|74)|121\.199\.94)|7\.(?:106\.242\.230|236\.232\.231)|4\.235\.57\.122|5\.214\.90\.114)|5(?:\.(?:3(?:9\.220\.2(?:48|54)|4\.37\.203)|159\.229\.244)|8\.2(?:54\.168\.(?:6[013]|5[89])|37\.102\.214)|9\.10\.7\.16)|7(?:2\.(?:42\.224\.(?:1[0246789]|2[0124]|7)|35\.20\.131)|8\.(?:136\.93\.251|90\.3\.10)|4\.9\.203\.186)|4(?:6\.(?:32\.23(?:2\.144|3\.22|4\.78)|182\.24\.130)|9\.159\.221\.6|1\.137\.24\.4)|9(?:4\.249\.59\.13|5\.48\.24\.10)|37\.206\.210\.130)\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work