You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/06/14 08:57:16 UTC
svn commit: r1492967 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Fri Jun 14 06:57:16 2013
New Revision: 1492967
URL: http://svn.apache.org/r1492967
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1492967&r1=1492966&r2=1492967&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Fri Jun 14 06:57:16 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201306132
+## khop-sc-neighbors.cf v 201306142
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:(?:18\.129\.1|92\.119\.)66|0(?:1\.101\.152|3\.9\.158)|21\.54\.54|58\.255\.2)|2(?:17\.200\.184|4\.127\.201)|6(?:4\.250\.118|6\.199\.227)|58\.253\.216)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:3\.230\.128|7\.200\.184|0\.21\.225)|04\.188\.246|4\.127\.201)|1(?:0(?:1\.101\.152|3\.9\.158)|2(?:0\.128\.2|1\.54\.54))|6(?:4\.250\.118|6\.199\.227))\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.(?:128\.2|84\.13)|5\.60\.156)|51\.84\.131|83\.221\.12|03\.9\.158|12\.90\.90)|2(?:08\.(?:71\.172|82\.114)|10\.21\.225)|6(?:6\.199\.224|5\.60\.15)|37\.122\.20[89]|79\.106\.109)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:5\.60\.156|0\.84\.13)|5(?:1\.84\.131|8\.255\.2)|83\.221\.12|92\.119\.66|03\.9\.158|12\.90\.90)|6(?:6\.199\.224|5\.60\.15)|208\.(?:71\.172|82\.114)|37\.122\.20[89]|79\.106\.109)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:2(?:1(?:6\.(?:(?:181\.11|30\.5)0|55\.162)|7\.161\.3)|20\.224\.59)|1(?:86\.(?:46\.107|16\.5)|64\.62\.8)|90\.90\.(?:4[0145679]|51))|4\.(?:2(?:(?:07\.113\.5|4\.218\.11)5|7\.191\.127)|(?:4(?:5\.237\.15|7\.147\.24)|39\.67\.7)5)|9\.(?:1(?:9(?:2\.252\.1|3\.93\.25)|49\.148\.150)|97\.151\.151)|8\.(?:129\.166\.86|97\.196\.163|41\.157\.7)|(?:6\.124\.12|0\.45\.13)8\.138|3\.(?:162\.97\.184|0\.85\.249)|5\.(?:88\.247\.131|90\.96\.85)|7\.20\.3\.231)|9(?:5\.(?:1(?:38\.195\.125|91\.184\.82)|29\.81\.30)|2\.1(?:63\.193\.(?:205|62)|87\.102\.212)|9\.(?:255\.11\.29|48\.160\.47)|3\.194\.92\.242|8\.84\.69\.217|4\.106\.16\.6)|2(?:1\.(?:2(?:54\.171\.15|2\.127\.17)|181\.251\.188)|3\.(?:110\.175\.202|201\.60\.83)|2\.165\.225\.177|4\.124\.236\.90|0\.50\.86\.3)|8(?:8\.(?:1(?:27\.230\.28|68\.46\.53)|252\.0\.237)|4\.(?:146\.107\.68|82\.154\.51)|0\.211\.162\.254|3\.81\.152\.228|7\.120\.127\.27)|7(?:8\.(?:2(?:11\.46\.184|0\.148\.11)|163\.105\.52)
|7\.(?:80\.102\.214|1\.223\.103)|5\.197\.121\.20)|0(?:3\.9\.15(?:8\.1(?:47|65)|7\.181|6\.89)|9\.236\.89\.141)|(?:51\.84\.131\.10|4\.33\.121\.6)7|33\.242\.115\.44|\.220\.158\.3)|2(?:1(?:1\.(?:1(?:(?:91\.168\.16|47\.211\.1)6|1(?:1\.250\.177|5\.68\.32)|72\.242\.74)|2(?:22\.53\.83|32\.154\.6)|54\.17\.20[01])|0\.(?:2(?:10\.123\.(?:244|47)|45\.89\.69)|5(?:1\.44\.199|6\.23\.100)|117\.6\.135)|3\.(?:2(?:30\.128\.226|51\.186\.229)|1(?:71\.39\.154|32\.241\.7))|7\.(?:200\.184\.87|198\.3\.238)|2\.(?:199\.78\.42|6\.152\.211)|8\.1(?:45\.135\.13|59\.9\.)7)|0(?:8\.(?:82\.114\.(?:4[45679]|5[13579]|2[35])|71\.172\.(?:8[456789]|9[1234])|113\.254\.39)|2\.(?:1(?:42\.203\.19|58\.39\.250)|71\.136\.200)|0\.(?:14(?:8\.125\.247|2\.133\.21)|72\.11\.132)|4\.(?:188\.246\.28|68\.120\.213)|6\.217\.105\.67|9\.190\.73\.158|1\.45\.114\.3)|2(?:(?:2\.253\.182\.13|1\.143\.50\.21)9|0\.(?:94\.235\.200|178\.97\.2)|3\.26\.193\.53)|4\.127\.201\.172)|6(?:1\.(?:2(?:52\.138\.195|8\.114\.33)|(?:164\.42\.1|70\.83\.)58|32\
.38\.3)|6\.199\.22(?:4\.(?:[2345679]|1[13])|7\.19[578])|4\.(?:250\.118\.15[23]|71\.130\.190)|5\.60\.15\.18[46]|0\.251\.11\.26|8\.115\.192\.7)|8(?:(?:1\.(?:15\.172\.14|23\.106\.7)|2\.192\.90\.23)5|(?:7\.97\.215\.6|8\.198\.1\.17)7|3\.(?:238\.208\.55|3\.103\.227)|4\.235\.57\.122|6\.64\.171\.198)|7(?:2\.(?:35\.20\.131|42\.224\.25|55\.188\.73)|(?:7\.106\.232\.17|1\.188\.63\.8)8|6\.74\.186\.237|4\.9\.203\.186)|5(?:\.(?:39\.220\.24[08]|159\.229\.246|245\.95\.203|79\.81\.2)|8\.151\.149\.118)|9(?:5\.(?:(?:215\.63\.11|86\.4\.7)9|48\.24\.10)|2\.253\.123\.95|6\.9\.138\.233)|37\.(?:122\.2(?:0(?:8\.169|9\.74)|11\.242)|(?:206\.210\.13|46\.224\.25)0)|41\.137\.24\.4)\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:2(?:1(?:6\.181\.110|7\.228\.234)|20\.224\.59)|1(?:86\.(?:46\.107|16\.5)|64\.62\.8)|90\.90\.(?:4[159]|51))|4\.(?:2(?:(?:07\.113\.5|4\.218\.11)5|7\.191\.127)|(?:4(?:5\.237\.15|7\.147\.24)|39\.67\.7)5)|0\.(?:45\.(?:138\.138|244\.44)|165\.125\.152)|9\.(?:19(?:2\.252\.1|3\.93\.25)|97\.151\.151)|8\.(?:129\.166\.86|97\.196\.163|41\.157\.7)|3\.(?:162\.97\.184|0\.85\.249)|5\.(?:88\.247\.131|90\.96\.85)|7\.(?:20\.3\.231|6\.128\.27)|6\.124\.128\.138)|9(?:2\.1(?:87\.10(?:1\.125|2\.212)|63\.193\.(?:205|62))|5\.(?:1(?:38\.195\.125|91\.184\.82)|29\.81\.30)|8\.(?:50\.164\.218|84\.69\.217)|3\.194\.92\.242|9\.255\.11\.29|4\.106\.16\.6)|2(?:1\.(?:2(?:54\.171\.15|2\.127\.17)|181\.251\.188)|3\.(?:110\.175\.202|201\.60\.83)|2\.165\.225\.177|4\.124\.236\.90|0\.50\.86\.3)|7(?:8\.(?:1(?:58\.218\.240|63\.105\.52)|2(?:11\.46\.184|0\.148\.11))|7\.(?:80\.102\.214|1\.223\.103)|5\.197\.121\.20)|8(?:8\.(?:1(?:27\.230\.28|68\.46\.53)|252\.0\.23
7)|0\.2(?:11\.162\.254|25\.131\.176)|3\.81\.152\.228|7\.120\.127\.27)|0(?:3\.9\.15(?:8\.1(?:47|65)|7\.181|6\.89)|9\.236\.89\.141)|5(?:8\.255\.2\.6[4689]|1\.84\.131\.107)|33\.242\.115\.44|4\.33\.121\.67|\.220\.158\.3)|2(?:1(?:1\.(?:1(?:(?:91\.168\.16|47\.211\.1)6|1(?:1\.250\.177|5\.68\.32)|72\.242\.74)|2(?:22\.53\.83|32\.154\.6)|54\.17\.20[01])|0\.(?:2(?:10\.123\.(?:244|47)|45\.89\.69)|5(?:1\.44\.199|6\.23\.100)|117\.6\.135)|3\.(?:1(?:71\.39\.154|32\.241\.7)|230\.128\.226)|9\.(?:145\.110\.118|80\.238\.185)|7\.(?:200\.184\.87|198\.3\.238)|2\.(?:199\.78\.42|6\.152\.211)|8\.1(?:45\.135\.13|59\.9\.)7)|0(?:8\.(?:82\.114\.(?:4[45679]|5[13579]|2[35])|71\.172\.(?:8[4579]|9[1234]))|2\.(?:1(?:42\.203\.19|58\.39\.250)|71\.136\.200)|4\.(?:188\.246\.28|68\.120\.213)|0\.(?:142\.133\.21|72\.11\.132)|3\.(?:255\.15\.146|155\.102\.2)|6\.217\.105\.67|9\.190\.73\.158|1\.45\.114\.3)|2(?:2\.2(?:53\.182\.139|36\.16\.14)|0\.(?:94\.235\.200|178\.97\.2)|1\.143\.50\.219|3\.26\.193\.53)|4\.127\.201\.172
|\.50\.142\.206)|6(?:6\.199\.22(?:4\.(?:[3456789]|1[013])|7\.19[57])|1\.(?:(?:164\.42\.1|70\.83\.)58|230\.90\.19)|4\.(?:250\.118\.15[23]|71\.130\.190)|5\.60\.15\.18[46]|0\.251\.11\.26|8\.115\.192\.7)|8(?:(?:1\.(?:15\.172\.14|23\.106\.7)|2\.192\.90\.23)5|(?:7\.97\.215\.6|8\.198\.1\.17)7|3\.(?:238\.208\.55|3\.103\.227)|4\.235\.57\.122|6\.64\.171\.198)|7(?:2\.(?:35\.20\.131|42\.224\.25|55\.188\.73)|(?:7\.106\.232\.17|1\.188\.63\.8)8|6\.74\.186\.237|4\.9\.203\.186)|9(?:5\.(?:(?:215\.63\.11|86\.4\.7)9|48\.24\.10)|1\.(?:187\.96\.104|214\.83\.2)|2\.253\.123\.95|4\.189\.183\.70)|37\.(?:(?:206\.210\.13|46\.224\.25)0|122\.20(?:8\.169|9\.74))|5(?:\.(?:39\.220\.24[08]|245\.95\.203)|8\.151\.149\.118)|4(?:6\.151\.196\.98|1\.137\.24\.4))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work