You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2012/11/10 08:57:55 UTC
svn commit: r1407728 - /spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf

Author: khopesh
Date: Sat Nov 10 07:57:54 2012
New Revision: 1407728

URL: http://svn.apache.org/viewvc?rev=1407728&view=rev
Log:
auto-generated rules

Modified:
    spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf

Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1407728&r1=1407727&r2=1407728&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Sat Nov 10 07:57:54 2012
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf	v 20121192
+## khop-sc-neighbors.cf	v 201211102
 ## Khopesh's syndication of SpamCop's top offenders and top offending networks.
 ## 
 ## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -20,7 +20,7 @@
 
 # http://spamcop.net/w3m?action=map;mask=4294967295;net=0;sort=56
 # Due to the massive block size, this rule only examines the last untrusted
-header __KHOP_SC_CIDR8  X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b(?:1(?:13|86)|41|2)(?:\.[012]?\d{1,2}){3}\b) /
+header __KHOP_SC_CIDR8  X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b(?:1(?:13|22)|41|2)(?:\.[012]?\d{1,2}){3}\b) /
 # and gets cleaned up a bit
 meta	 KHOP_SC_CIDR8	__KHOP_SC_CIDR8 && !(__VIA_ML||__freemail_safe||__RCVD_IN_DNSWL||RCVD_IN_HOSTKARMA_WL)
 describe KHOP_SC_CIDR8  Relay CIDR /8 is among worst in SpamCop
@@ -39,7 +39,7 @@ score	 KHOP_SC_CIDR8	0.3 0.1 0.3 0.1
 # 12.1449/0.0139 0.999 20100410  net, solo=12.1966/0.0197@0.998, ->.2 .1 .3 .2
 # 10.3554/0.0112 0.999 20110227@510k  solo=10.3717/0.0119@0.999, ->.3 .1 .3 .1
 
-header __KHOP_SC_TOP_CIDR8  X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b1(?:17|22|78|90)(?:\.[012]?\d{1,2}){3}\b) /
+header __KHOP_SC_TOP_CIDR8  X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b1(?:17|78|86|90)(?:\.[012]?\d{1,2}){3}\b) /
 meta	 KHOP_SC_TOP_CIDR8  __KHOP_SC_TOP_CIDR8 && !(__VIA_ML||__freemail_safe||__RCVD_IN_DNSWL||RCVD_IN_HOSTKARMA_WL)
 describe KHOP_SC_TOP_CIDR8  Relay CIDR /8 leads SpamCop in worst /8s
 tflags	 KHOP_SC_TOP_CIDR8  nopublish
@@ -92,7 +92,7 @@ score	 KHOP_SC_TOP_CIDR16  2.0 0.3 2.0 0
 
 
 # http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header	 KHOP_SC_CIDR24  Received =~ /(?-xism:\b(?:1(?:(?:99\.127\.10|42\.11\.19)3|1(?:3\.197\.88|8\.97\.95)|86\.202\.21)|(?:221\.133\.13|50\.192\.5)0|(?:61\.191\.1|98\.139\.)91|77\.221\.113|84\.90\.98)\.[012]?\d{1,2}\b)/
+header	 KHOP_SC_CIDR24  Received =~ /(?-xism:\b(?:1(?:1(?:3\.197\.88|5\.85\.184|9\.70\.227|8\.97\.95)|(?:99\.127\.10|42\.11\.19)3|86\.202\.21)|2(?:21\.133\.130|13\.230\.92)|50\.192\.50|69\.175\.43|98\.139\.91)\.[012]?\d{1,2}\b)/
 describe KHOP_SC_CIDR24  Relay CIDR /24 is among worst in SpamCop
 tflags	 KHOP_SC_CIDR24  nopublish
 score	 KHOP_SC_CIDR24  0.1 0 0.1 0
@@ -111,7 +111,7 @@ score	 KHOP_SC_CIDR24  0.1 0 0.1 0
 # 0.4157/0.5009 0.454 20110227  something is wrong here! -> .1 0 .1 0
 
 
-header	 KHOP_SC_TOP_CIDR24  Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:149\.78|97\.24)|5\.85\.184|9\.70\.227)|(?:93\.164\.13|86\.202\.2)1)|2(?:0(?:(?:3\.194\.11|8\.184\.7)5|2\.231\.248)|1(?:0\.168\.50|7\.71\.248))|8(?:4\.235\.9[12]|8\.198\.110)|5\.135\.124|70\.39\.165)\.[012]?\d{1,2}\b)/
+header	 KHOP_SC_TOP_CIDR24  Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:149\.78|97\.24)|0\.52\.0)|(?:93\.164\.13|86\.202\.2)1)|2(?:0(?:3\.194\.11|8\.184\.7)5|1(?:0\.168\.50|7\.71\.248))|8(?:4\.235\.9[12]|8\.198\.110|3\.149\.3)|91\.149\.157|5\.135\.124|70\.39\.165)\.[012]?\d{1,2}\b)/
 describe KHOP_SC_TOP_CIDR24  Relay CIDR /24 leads SpamCop in worst /24s
 tflags	 KHOP_SC_TOP_CIDR24  nopublish
 score	 KHOP_SC_TOP_CIDR24  2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score	 KHOP_SC_TOP_CIDR24  2.7 0.5 2.7 0
 
 
 # http://www.spamcop.net/w3m?action=hoshame
-header	 KHOP_SC_TOP200  Received =~ /(?-xism:\b(?:1(?:9(?:5\.(?:1(?:3(?:5\.145\.186|8\.195\.125)|7(?:8\.114\.15|5\.76\.58)|91\.1(?:66\.25|84\.82)|61\.9\.2)|2(?:52\.108\.15|9\.81\.30)|56\.126\.141|88\.90\.3)|3\.1(?:64\.131\.(?:148|205)|24\.133\.216)|4\.(?:158\.206\.250|38\.104\.44)|9\.(?:238\.187\.12|127\.103\.1)8|0\.(?:107\.139\.10|94\.172\.28)|6\.217\.241\.62)|1(?:8\.(?:1(?:25\.223\.15|61\.50\.73)|97\.196\.163)|2\.1(?:49\.78\.(?:10[0134]|98)|84\.54\.176)|4\.(?:32\.(?:195\.186|240\.89)|29\.98\.20)|3\.1(?:62\.160\.231|97\.88\.226)|5\.(?:66\.85\.110|74\.70\.15)|9\.70\.227\.1(?:3[79]|41)|7\.7\.103\.67)|8(?:8\.(?:1(?:65\.236\.163|25\.161\.90)|252\.0\.237)|9\.(?:101\.129\.237|39\.35\.168)|3\.10(?:1\.53\.236|6\.53\.179)|4\.1(?:72\.243\.23|\.27\.248))|2(?:4\.(?:(?:125\.130\.15|49\.40\.11)4|217\.216\.60)|2\.1(?:60\.162\.242|54\.37\.21)|5\.1(?:30\.50\.15|78\.176\.)4|1\.183\.9\.225|3\.30\.174\.38)|7(?:4\.12(?:1\.(?:18\.254|247\.2)|0\.237\.125)|3\.(?:227\.168\.254|44\.136\.92)|8\.(?:15
 0\.32\.9|63\.105\.1)9|7\.192\.255\.160|6\.9\.119\.45)|4(?:2\.11\.(?:193\.1(?:2[02]|05|11)|221\.10)|\.139\.85\.101)|09\.69\.64\.171)|2(?:1(?:2\.(?:1(?:56\.(?:(?:91\.1|83\.)42|115\.31|58\.230)|7\.24\.17)|2(?:27\.141\.114|44\.255\.15))|3\.(?:1(?:42\.1(?:38\.21|43\.2)|71\.61\.17)8|251\.186\.229)|1\.(?:214\.16(?:0\.214|1\.228)|194\.191\.253|60\.8\.60)|9\.(?:14(?:4\.245\.59|7\.208\.34)|94\.154\.116)|0\.(?:168\.50\.16|56\.23\.100)|7\.71\.248\.129)|0(?:2\.(?:1(?:42\.2(?:17\.131|03\.19)|09\.143\.98|31\.234\.15)|(?:62\.104\.11|43\.182\.)5|29\.8(?:0\.23|6\.4))|0\.(?:29\.231\.100|72\.11\.132|68\.76\.69)|(?:4\.244\.123\.16|9\.172\.60\.22)9|1\.(?:238\.246\.20|161\.11\.46)|3\.1(?:84\.143\.49|55\.102\.2)|8\.43\.50\.2)|2(?:1\.1(?:33\.130\.93|59\.215\.31)|2\.255\.128\.147|0\.84\.54\.248|3\.27\.17\.124)|7\.123\.1\.2)|8(?:3\.(?:1(?:4(?:\.12\.218|0\.8\.14)|(?:7\.242|8\.234)\.202|2\.3\.107)|241\.1\.204|3\.103\.227)|0\.(?:9(?:1\.185\.92|3\.217\.3)|81\.243\.131|48\.31\.186)|2\.(?:19(?:2\.78\.107|4\
 .93\.191)|77\.55\.151)|5\.(?:(?:236\.38|64\.76)\.17|15\.226\.12)1|7\.(?:106\.134\.254|204\.66\.148)|1\.(?:190\.145\.211|23\.106\.75)|9\.(?:119\.92\.126|206\.35\.87)|4\.(?:204\.13\.70|90\.98\.93)|8\.198\.110\.206|6\.57\.251\.55)|9(?:1\.(?:1(?:21\.(?:1(?:4(?:7\.144|5\.21)|69\.118|77\.159)|98\.123)|4(?:9\.157\.177|3\.36\.50)|88\.233\.134)|209\.128\.134)|4\.(?:23\.(?:2(?:10\.111|38\.78)|71\.55)|73\.250\.48|100\.6\.36)|5\.(?:173\.185\.(?:120|42)|0\.165\.82)|2\.61\.65\.154)|6(?:1\.(?:19\.(?:252\.111|97\.69)|246\.6\.85|30\.127\.2)|6\.1(?:35\.(?:48\.20|59\.22)|99\.184\.114)|2\.(?:193\.242\.14|233\.202\.13)6|4\.(?:40\.100\.224|50\.173\.217)|9\.(?:175\.43\.226|90\.120\.188)|7\.103\.112\.218)|7(?:7\.(?:120\.103\.221|252\.105\.102|95\.130\.144)|(?:4\.126\.19\.13|8\.46\.64\.2)0|9\.1(?:74\.204\.13|89\.106\.7)4)|5(?:\.(?:135\.124\.1(?:37|45)|9\.105\.16)|0\.1(?:92\.50\.233|4\.163\.91)|8\.68\.2\.214)|3(?:1\.(?:2(?:10\.127\.104|07\.84\.26)|47\.248\.106)|7\.(?:128\.104\.81|59\.76\.97))|4(?:6\.
 1(?:05\.100\.58|85\.2\.220)|1\.137\.24\.4))\b)/
+header	 KHOP_SC_TOP200  Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:1(?:49\.78\.(?:10[014]|98)|73\.126\.48|84\.54\.176)|216\.56\.12)|8\.(?:1(?:25\.223\.15|61\.50\.73)|(?:97\.196\.16|40\.37\.3)3)|5\.(?:7(?:8\.162\.118|4\.70\.15)|66\.85\.110|91\.214\.21)|3\.1(?:6(?:0\.112\.107|2\.160\.231)|97\.88\.226)|4\.(?:32\.(?:195\.186|240\.89)|29\.98\.20)|6\.3(?:4\.112\.228|9\.122\.66)|7\.(?:6\.223\.83|7\.103\.67)|9\.70\.227\.139)|9(?:5\.(?:1(?:3(?:5\.145\.186|8\.195\.125)|(?:91\.184\.8|61\.9\.)2|75\.76\.58)|2(?:52\.108\.15|9\.81\.30)|88\.90\.3)|0\.(?:(?:2(?:11\.120\.1|01\.101\.)5|107\.139\.1)0|65\.204\.53|94\.172\.28)|3\.164\.131\.(?:148|205)|6\.217\.241\.62|9\.127\.103\.18|4\.38\.104\.44)|2(?:4\.(?:(?:125\.130\.15|49\.40\.11)4|217\.216\.60)|3\.(?:1(?:43\.194\.195|94\.12\.181)|30\.74\.25)|5\.1(?:78\.(?:223\.177|176\.4)|30\.50\.154)|1\.(?:183\.(?:186\.120|9\.225)|52\.152\.2)|2\.1(?:60\.162\.242|18\.17\.148))|8(?:2\.2(?:1(?:9\.140\.111|1\.234\.73)|08\.37\.161)|9\.(?:(?:39\.35\.16|61\.35\.14)8
 |101\.129\.237)|3\.10(?:1\.53\.236|6\.53\.179)|8\.(?:252\.0\.237|78\.96\.23)|0\.235\.183\.250|7\.177\.201\.205|4\.1\.27\.248)|7(?:3\.(?:44\.(?:244\.149|136\.92)|227\.168\.254)|4\.12(?:0\.237\.125|1\.18\.254)|7\.192\.255\.160|5\.203\.171\.31|8\.150\.32\.99|6\.9\.119\.45)|42\.11\.(?:193\.1(?:2[02]|05|11)|221\.10)|0(?:8\.174\.198\.185|9\.86\.137\.67)|59\.224\.236\.88|\.214\.168\.146)|2(?:1(?:2\.(?:156\.(?:8(?:3\.42|5\.70)|58\.230|91\.142)|2(?:27\.141\.114|44\.255\.15)|0\.139\.194)|1\.(?:2(?:14\.160\.214|23\.170\.178|01\.160\.2)|194\.191\.253|60\.8\.60)|0\.(?:2(?:06\.148\.154|23\.77\.196)|168\.50\.16|56\.23\.100)|9\.(?:8(?:5\.43\.205|4\.1\.93)|147\.208\.34|94\.154\.116)|7\.71\.248\.129|8\.248\.44\.196)|0(?:2\.(?:1(?:0(?:5\.134\.55|9\.143\.98)|42\.2(?:17\.131|03\.19)|31\.234\.15)|29\.(?:190\.221|80\.23)|62\.104\.115)|0\.(?:72\.11\.132|68\.76\.69)|1\.161\.11\.46|8\.43\.50\.2)|2(?:2\.(?:1(?:74\.255\.238|04\.143\.76)|255\.128\.147)|1\.1(?:33\.130\.93|59\.215\.31)|0\.84\.54\.248|3\.2
 7\.17\.124)|7\.123\.(?:5\.30|1\.2))|8(?:3\.(?:1(?:4(?:\.12\.218|0\.8\.14)|(?:7\.242|8\.234)\.202|2\.3\.107)|3\.103\.227)|(?:5\.(?:15\.226\.12|64\.76\.17)|2\.77\.55\.15)1|4\.(?:111\.88\.162|204\.13\.70|90\.98\.93)|8\.19(?:8\.110\.206|9\.145\.235)|1\.(?:190\.145\.211|9\.23\.226)|7\.204\.66\.148|9\.79\.111\.126|6\.57\.251\.55)|9(?:1\.1(?:(?:21\.147\.14|88\.233\.13)4|49\.157\.177|39\.236\.32)|(?:5\.(?:173\.185\.4|0\.165\.8)|3\.125\.34\.1)2|4\.(?:23\.(?:210\.111|71\.55)|73\.250\.48)|2\.(?:255\.242\.18|61\.65\.15)4)|6(?:1\.(?:19\.(?:125\.10|97\.6)9|62\.92\.198|30\.127\.2)|2\.2(?:33\.202\.136|8\.6\.52)|7\.103\.112\.218|4\.50\.173\.217|9\.175\.43\.226|5\.34\.231\.10|6\.135\.59\.22|8\.50\.133\.89)|7(?:7\.(?:1(?:06\.232\.178|20\.103\.221)|252\.105\.102)|(?:2\.35\.20\.13|5\.18\.71\.22)1|9\.1(?:74\.204\.13|89\.106\.7)4|0\.73\.8\.99|8\.29\.4\.78)|5(?:9\.(?:124\.20\.250|24\.129\.212|37\.168\.16)|0\.1(?:92\.50\.233|4\.163\.91)|8\.(?:75\.26\.15|68\.2\.21)4|\.135\.124\.1(?:30|45|59))|4(?:1\.
 (?:137\.2[04]\.4|228\.15\.196)|6\.1(?:46\.56\.3|85\.2\.22)0)|31\.178\.125\.220)\b)/
 describe KHOP_SC_TOP200  Relay listed in SpamCop top 200 spammer IPs
 tflags	 KHOP_SC_TOP200  nopublish
 score	 KHOP_SC_TOP200  4 0 4 0	# unnecessary if DNSBLs work
@@ -146,14 +146,14 @@ score	 KHOP_SC_TOP200  4 0 4 0	# unneces
 
 
 # Spamhaus DROP, http://www.spamhaus.org/drop/
-header	 KHOP_SPAMHAUS_DROP	X-Spam-Relays-Untrusted =~ /(?-xism: (?:by|ip)=(?:(?:1(?:9(?:9\.(?:2(?:4(?:8\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|6\.(?:21[35]|137)|5\.138)|6\.(?:1(?:2[01234567]|[01]\d)|9[6789])|00\.(?:6[456789]|9[012345]|[78]\d)|30\.(?:6[456789]|10[0123]|[789]\d)|54\.(?:3[23456789]|4[01234567])|12\.(?:1(?:1[01]|0\d)|9[6789]))|1(?:9(?:6\.(?:2(?:2[0123]|[01]\d)|19[23456789])|8\.1(?:8[01234589]|[67]\d|9[01]))|6(?:5\.(?:3[23456789]|6[0123]|[45]\d)|6\.20[0123])|85\.(?:19[23456789]|20[01234567])|20\.163)|8(?:4\.(?:6[456789]|9[012345]|[78]\d)|8\.(?:3[23456789]|5[01]|4\d)|9\.(?:1[6789]|3[01]|2\d))|3(?:4\.1(?:[345678]\d|2[89]|9[01])|3\.145)|5(?:8\.2(?:5[012345]|4[89])|\.15[23])|46\.(?:3[23456789]|6[0123]|[45]\d)|71\.(?:19[23456789]|20[01234567])|9\.(?:2[456789]|3[01])|60\.102)|8\.(?:1(?:8(?:1\.(?:6[456789]|9[012345]|[78]\d)|3\.(?:3[23456789]|6[0123]|[45]\d)|6\.25)|51\.(?:1(?:2[01234567]|5[2345]|[01]\d)|6[456789]|[789]\d)|3\.(?:[023456789]|1[012345]?)|62\.2(?:2[0
 123]|0[89]|1\d))|2(?:0(?:5\.(?:6[456789]|9[012345]|[78]\d)|\.(?:1[6789]|3[01]|2\d)|4\.[01234567])|3\.(?:3[23456789]|4[01234567]))|4(?:5\.(?:3[23456789]|4[01234567])|8\.(?:1[6789]|3[01]|2\d))|96\.2(?:2[456789]|3\d)|57\.(?:6[456789]|7\d))|2\.(?:2(?:2(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|9\.(?:3[23456789]|6[0123]|[45]\d))|19\.(?:2(?:1[012345]|0\d)|1[23456789]\d)|6\.25)|1(?:71\.(?:6[456789]|9[012345]|[78]\d)|12\.1(?:1[23456789]|2[01234567])|01\.2(?:0[01234567]|4\d)|60\.44|97\.87)|43\.1(?:5[3456789]|7[56789]|8[01234]|60)|31\.21[23]|67\.16|86\.85)|3\.(?:1(?:0(?:5\.(?:1(?:[24]1|[58]4)|2(?:07|45))|4\.(?:1(?:10|53|76|2)|[39]4|41)|6\.3[2345]|7\.1[6789])|6(?:\.(?:100|213)|9\.25[01])|1(?:0\.136|1\.235)|78\.172|48\.47)|2(?:0(?:1\.19[23]|0\.167)|2(?:7\.24[01]|8\.145)|3(?:8\.[0123]|\.126)|7\.2(?:3[23]|4[67])|43\.166)|4(?:3\.134|6\.211|1\.38)|0\.212)|5\.(?:1(?:4(?:9\.(?:88|90)|\.11[23])|9(?:1\.10[23]|0\.157)|8(?:4\.8[67]|2\.57)|14\.[89]|62\.[67])|2(?:2(?:6\.(?:197|220)|5\.17[6
 789])|8\.1[01]|\.21[23]|46\.200)|8(?:8\.(?:19[01]|22[67])|5\.204)|9(?:3\.(?:18[45]|20[89])|5\.155)|5(?:4\.17[01]|\.161)|78\.10[89]|43\.128)|4\.(?:1(?:1(?:0\.16[0123]|6\.14[67])|\.(?:22[01]|184)|26\.(?:193|251)|65\.[45]|40\.229)|2(?:8\.4[4567]|42\.[23]|9\.185)|6(?:0\.2(?:05|42)|3\.14[4567])|5(?:4\.15[6789]|0\.116)|0\.221|44\.4)|6\.32\.2(?:1[6789]|2[0123]))|5(?:7\.2(?:3(?:2\.(?:1(?:[3456789]|2[01234567]?|[01]\d?)?|(?:[01]?\d?\d|2[0-4]\d|25[0-5])|[23456789]\d?|0)|1\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|26\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|(?:(?:1\.1|9\.2)23|0\.1(?:26|41)|2\.147|5\.190)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|7(?:6\.(?:1(?:07\.7[23456789]|12\.8[01234567])|47\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|98\.(?:5[6789]|6[0123]))|0\.(?:1(?:06|13|20)|67)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|8\.159\.1(?:7[6789]|9[01]|8\d)|1\.25\.190)|1(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.(?:44\.1(?:4[0123]|2[89]|3\d)|232\.1(?:7[012345]|6\d))|6\.19(?:9\.1(?:[345]\d|2[89])|7\
 .15[23456789])|3\.20\.1(?:[678]\d|9[01]))|4(?:(?:8\.(?:1(?:05|78)|248)|(?:0\.17|7\.5)0|3\.(?:135|49))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.192\.(?:[06789]|[125]\d?|3[01]?|4[89]?)|1\.136\.(?:1[67]|2[27])|6\.185\.2(?:18|54))|6(?:7\.(?:2(?:8\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|24\.(?:[0456789]|[12]\d?|3[01]?))|97\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|2\.125\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|2(?:(?:1\.4|9\.7)6\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|8\.1(?:68|99)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2\.202\.(?:1(?:2[01234567]|[01]\d)|9[6789]))|3(?:4\.(?:1(?:27|72)|2(?:09|3)|33)|2\.(?:145|232)|0\.2(?:01|22)|6\.228|9\.167|8\.43)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0(?:3\.(?:10\.(?:6[89]|7[01])|246\.7[2345])|9\.94\.2(?:2[0123]|0[89]|1\d))|8(?:8\.2(?:47\.(?:135|230)|11\.2[45])|6\.190\.2(?:2[456789]|3[01])))|2(?:0(?:4\.(?:1(?:0(?:6\.(?:1(?:[3456789]\d|2[89])|2(?:2[0123]|[01]\d))|7\.208)|5(?:5\.1(?:4[0123]|2[89]|3\d)|2\.2(?:2[456789]|3[01]))|87\.(?:2(?:[01234]\d|5[01234])|1(?:5[56789]|[6789]\d
 ))|4(?:7\.2(?:5[012345]|4\d)|\.[01234567])|94\.1(?:8[456789]|9[01])|26\.24[45]|30\.167)|2(?:36\.(?:[0456789]|[12]\d?|3[01]?)|25\.(?:159|210))|44\.(?:2(?:0[01234567]|2[456789]|3\d)|19[23456789])|5(?:7\.(?:1[6789]|3[01]|2\d)|2\.255)|89\.224)|5\.(?:1(?:4(?:4\.(?:[023456789]|1(?:[012345]|7[6789]|9[01]|8\d)?)|2\.10[4567])|7(?:5\.1(?:[678]\d|9[01])|2\.24[4567])|37\.(?:[023456789]|1[012345]?)|89\.7[123]|59\.180)|2(?:03\.(?:[0456789]|2(?:[016789]|2[456789]?|5[012345]?|[34]\d?)?|3[01]?|1\d?)|3(?:3\.2(?:2[456789]|3\d)|5\.(?:6[456789]|7\d)|6\.189)|14\.1(?:[345]\d|2[89])))|9\.(?:1(?:4(?:8\.(?:6[456789]|9[012345]|[78]\d)|5\.(?:[0456789]|[12]\d?|3[01]?))|82\.(?:6[456789]|9[012345]|[78]\d)|98\.1(?:7[6789]|9[01]|8\d))|95\.(?:2(?:2[0123]|[01]\d)|19[23456789])|205\.(?:19[23456789]|2[0123]\d)|51\.(?:3[23456789]|4[01234567]))|6\.(?:2(?:0(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|1\.(?:6[0123]|4[89]|5\d)|9\.(?:9[012345]|8\d))|2(?:7\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|4\.1(?:[
 678]\d|9[01])))|81\.(?:[0456789]|[12]\d?|3[01]?)|197\.(?:2[89]|175))|8\.(?:9(?:3\.(?:1(?:4[456789]|0[0123]|5[01])|9[6789])|0\.[01234567])|8(?:1\.1(?:3[6789]|4[0123])|5\.3[23456789])|70\.1(?:7[012345]|6[89])|117\.(?:9[012345]|8\d))|7\.(?:18(?:3\.(?:2(?:2[0123]|[01]\d)|19[23456789])|9\.(?:[0456789]|[12]\d?|3[01]?))|22\.(?:2(?:5[012345]|[01234]\d)|19[23456789])|32\.1(?:[345]\d|2[89]))|0\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|22\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|105\.(?:3[23456789]|4[01234567])|3\.1(?:4[0123]|2[89]|3\d))|1\.7(?:1\.(?:[023456789]|1[012345]?)|\.2(?:2[0123]|0[89]|1\d))|3\.3(?:1\.8[89]|4\.7[01])|2\.61\.108)|1(?:6\.(?:212\.(?:2(?:2[0123]|[01]\d)|19[23456789])|151\.(?:19[23456789]|20[01234567]))|3\.109\.(?:2(?:2[0123]|0[89]|1\d)|9[6789])))|9(?:1\.(?:2(?:1(?:2\.(?:1(?:07|23|35|98)|2(?:01|20)|4[15]|65)|3\.(?:1(?:7[45]|57)|2(?:17|9)|9[34]|72)|7\.(?:1(?:62|78)|2(?:00|49))|1\.(?:6[4567]|8[89]|9[01])|6\.(?:1(?:22|90|1)|7?3)|0\.17[2345])|0(?:0\.(?:1(?:6[4567]|7[6789])|2
 (?:4[012389]|5[01]))|9\.(?:1(?:8[346]|4)|(?:[45]|23)8|63)|1\.(?:(?:12)?[4567]|23[6789])|4\.4[01234567]|8\.(?:162|228)|3\.9[2345]|6\.20[01])|3(?:0\.1(?:1[01]|4[37])|8\.(?:18[01]|82)|9\.(?:15|24)|6\.12[01]|7\.9[123]|5\.2)|2(?:9\.(?:15[6789]|4[67]|248)|8\.(?:132|39)|0\.(?:62|90)|3\.77)|4(?:0\.16|3\.11)5)|19(?:3\.1(?:9[2345]|1[01])|(?:6\.21|7\.9)[6789]|5\.(?:25[45]|1[01])|4\.(?:[01]|21[45])|8\.1(?:09|27)))|4\.(?:1(?:5(?:4\.1(?:[345678]\d|2[89]|9[01])|8\.2(?:5[012345]|4\d))|3[01]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|6(?:3\.(?:1(?:4[679]|5[01])|24[0134567])|0\.12[123]|1\.247)|232\.2(?:5[012345]|4[89]))|3\.1(?:20\.(?:3[23456789]|6[0123]|[45]\d)|7(?:5\.2(?:5[012345]|4\d)|4\.164)|68\.(?:2[012345]|1[89]))|5\.(?:21(?:[67]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|5\.14[0123])|64\.(?:3[789]|1[13]|9[89])))|6(?:4\.(?:1(?:12\.(?:1(?:[012345678]\d?|9[01]?)?|[23456789]\d?|0)|5\.(?:[023456789]|1[012345]?))|44\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|7\.21(?:[18]\.2(?:2[0123]|0[89]|1\d)|3\.1(?:4[0123]|2[89]|3\d)
 )|2\.1(?:22\.(?:3[23456789]|7[23])|82\.15[23456789])|3\.141\.(?:3[23456789]|6[0123]|[45]\d)|8\.232\.(?:1(?:1[01]|0\d)|9[6789])|6\.231\.(?:6[456789]|7\d))|8(?:5\.(?:202\.(?:1(?:9[23456789]|7[012345]|6\d)|20[01234567])|12(?:0\.9[45]|1\.39))|4\.22\.(?:1(?:2[01234567]|[01]\d)|9[6789])|8\.135\.(?:1[6789]|3[01]|2\d)|9\.(?:114\.97?|45\.14)|6\.55\.(?:21[01]|140)|1\.22\.15[23])|7(?:9\.1(?:10\.(?:1(?:[678]\d?|9[01]?)|6[0123]|[25]\d|3[01]|4[89])|74\.(?:[0456789]|[12]\d?|3[01]?))|2\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|13\.(?:1[6789]|3[01]|2\d))|8\.31\.1(?:8[456789]|9[01]))|5(?:8\.83\.(?:[89]|1[01])|\.34\.242))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|3(?:1\.(?:(?:1(?:(?:4\.10|1\.4)3|35\.[01234567]|84\.242)|42\.1(?:[345]\d|2[89])|222\.20[01234567])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.0\.0)|7\.(?:148\.2(?:1[6789]|2[0123])|230\.212|9\.58)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|09\.0\.0\.0)\b)/
+header	 KHOP_SPAMHAUS_DROP	X-Spam-Relays-Untrusted =~ /(?-xism: (?:by|ip)=(?:1(?:(?:9(?:9\.(?:2(?:4(?:8\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|6\.(?:21[35]|137)|5\.138)|6\.(?:1(?:2[01234567]|[01]\d)|9[6789])|00\.(?:6[456789]|9[012345]|[78]\d)|30\.(?:6[456789]|10[0123]|[789]\d)|54\.(?:3[23456789]|4[01234567])|12\.(?:1(?:1[01]|0\d)|9[6789]))|1(?:9(?:6\.(?:2(?:2[0123]|[01]\d)|19[23456789])|8\.1(?:8[01234589]|[67]\d|9[01]))|6(?:5\.(?:3[23456789]|6[0123]|[45]\d)|6\.20[0123])|85\.(?:19[23456789]|20[01234567])|20\.163)|8(?:4\.(?:6[456789]|9[012345]|[78]\d)|8\.(?:3[23456789]|5[01]|4\d)|9\.(?:1[6789]|3[01]|2\d))|3(?:4\.1(?:[345678]\d|2[89]|9[01])|3\.145)|5(?:8\.2(?:5[012345]|4[89])|\.15[23])|46\.(?:3[23456789]|6[0123]|[45]\d)|71\.(?:19[23456789]|20[01234567])|9\.(?:2[456789]|3[01])|60\.102)|8\.(?:1(?:8(?:1\.(?:6[456789]|9[012345]|[78]\d)|3\.(?:3[23456789]|6[0123]|[45]\d)|6\.25)|51\.(?:1(?:2[01234567]|5[2345]|[01]\d)|6[456789]|[789]\d)|3\.(?:[023456789]|1[012345]?)|62\.2(?:2[0
 123]|0[89]|1\d))|2(?:0(?:5\.(?:6[456789]|9[012345]|[78]\d)|\.(?:1[6789]|3[01]|2\d)|4\.[01234567])|3\.(?:3[23456789]|4[01234567]))|4(?:5\.(?:3[23456789]|4[01234567])|8\.(?:1[6789]|3[01]|2\d))|96\.2(?:2[456789]|3\d)|57\.(?:6[456789]|7\d))|2\.(?:2(?:2(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|9\.(?:3[23456789]|6[0123]|[45]\d))|19\.(?:2(?:1[012345]|0\d)|1[23456789]\d)|6\.25)|1(?:71\.(?:6[456789]|9[012345]|[78]\d)|12\.1(?:1[23456789]|2[01234567])|01\.2(?:0[01234567]|4\d)|60\.44|97\.87)|43\.1(?:5[3456789]|7[56789]|8[01234]|60)|31\.21[23]|67\.16|86\.85)|3\.(?:1(?:0(?:5\.(?:1(?:[24]1|[58]4)|2(?:07|45))|4\.(?:1(?:10|53|76|2)|[39]4|41)|6\.3[2345]|7\.1[6789])|6(?:\.(?:100|213)|9\.25[01])|1(?:0\.136|1\.235)|78\.172|48\.47)|2(?:0(?:1\.19[23]|0\.167)|2(?:7\.24[01]|8\.145)|3(?:8\.[0123]|\.126)|7\.2(?:3[23]|4[67])|43\.166)|4(?:3\.134|6\.211|1\.38)|0\.212)|5\.(?:1(?:4(?:9\.(?:88|90)|\.11[23])|9(?:1\.10[23]|0\.157)|8(?:4\.8[67]|2\.57)|14\.[89]|62\.[67])|2(?:2(?:6\.(?:197|220)|5\.17[6
 789])|8\.1[01]|\.21[23]|46\.200)|8(?:8\.(?:19[01]|22[67])|5\.204)|9(?:3\.(?:18[45]|20[89])|5\.155)|5(?:4\.17[01]|\.161)|78\.10[89]|43\.128)|4\.(?:1(?:1(?:0\.16[0123]|6\.14[67])|\.(?:22[01]|184)|26\.(?:193|251)|65\.[45]|40\.229)|2(?:8\.4[4567]|42\.[23]|9\.185)|6(?:0\.2(?:05|42)|3\.14[4567])|5(?:4\.15[6789]|0\.116)|0\.221|44\.4)|6\.32\.2(?:1[6789]|2[0123]))|5(?:7\.2(?:3(?:2\.(?:1(?:[3456789]|2[01234567]?|[01]\d?)?|(?:[01]?\d?\d|2[0-4]\d|25[0-5])|[23456789]\d?|0)|1\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|26\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|(?:(?:1\.1|9\.2)23|0\.1(?:26|41)|2\.147|5\.190)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|1(?:\.(?:1(?:[3456789]|2[01234567]?|[01]\d?)?|[23456789]\d?|0)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.(?:44\.1(?:4[0123]|2[89]|3\d)|232\.1(?:7[012345]|6\d))|6\.19(?:9\.1(?:[345]\d|2[89])|7\.15[23456789])|3\.20\.1(?:[678]\d|9[01]))|7(?:6\.(?:1(?:07\.7[23456789]|12\.8[01234567])|47\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|98\.(?:5[6789]|6[0123]))|0\.(?:1(?:06|13|20)|67)\.(?:[01]?
 \d?\d|2[0-4]\d|25[0-5])|8\.159\.1(?:7[6789]|9[01]|8\d)|1\.25\.190)|4(?:(?:8\.(?:1(?:05|78)|248)|(?:0\.17|7\.5)0|3\.(?:135|49))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.192\.(?:[06789]|[125]\d?|3[01]?|4[89]?)|1\.136\.(?:1[67]|2[27])|6\.185\.2(?:18|54))|6(?:7\.(?:2(?:8\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|24\.(?:[0456789]|[12]\d?|3[01]?))|97\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|2\.125\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|2(?:(?:1\.4|9\.7)6\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|8\.1(?:68|99)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2\.202\.(?:1(?:2[01234567]|[01]\d)|9[6789]))|3(?:4\.(?:1(?:27|72)|2(?:09|3)|33)|2\.(?:145|232)|0\.2(?:01|22)|6\.228|9\.167|8\.43)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|8(?:8\.2(?:47\.(?:135|230)|11\.2[45])|6\.190\.2(?:2[456789]|3[01])))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0(?:(?:3\.(?:10\.(?:6[89]|7[01])|246\.7[2345])|9\.94\.2(?:2[0123]|0[89]|1\d))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.0\.0\.0))|(?:2(?:0(?:4\.(?:1(?:0(?:6\.(?:1(?:[3456789]\d|2[89])|2(?:2[0123]|[01]\d))|7\.208
 )|5(?:5\.1(?:4[0123]|2[89]|3\d)|2\.2(?:2[456789]|3[01]))|87\.(?:2(?:[01234]\d|5[01234])|1(?:5[56789]|[6789]\d))|4(?:7\.2(?:5[012345]|4\d)|\.[01234567])|94\.1(?:8[456789]|9[01])|26\.24[45]|30\.167)|2(?:36\.(?:[0456789]|[12]\d?|3[01]?)|25\.(?:159|210))|44\.(?:2(?:0[01234567]|2[456789]|3\d)|19[23456789])|5(?:7\.(?:1[6789]|3[01]|2\d)|2\.255)|89\.224)|5\.(?:1(?:4(?:4\.(?:[023456789]|1(?:[012345]|7[6789]|9[01]|8\d)?)|2\.10[4567])|7(?:5\.1(?:[678]\d|9[01])|2\.24[4567])|37\.(?:[023456789]|1[012345]?)|89\.7[123]|59\.180)|2(?:03\.(?:[0456789]|2(?:[016789]|2[456789]?|5[012345]?|[34]\d?)?|3[01]?|1\d?)|3(?:3\.2(?:2[456789]|3\d)|5\.(?:6[456789]|7\d)|6\.189)|14\.1(?:[345]\d|2[89])))|9\.(?:1(?:4(?:8\.(?:6[456789]|9[012345]|[78]\d)|5\.(?:[0456789]|[12]\d?|3[01]?))|82\.(?:6[456789]|9[012345]|[78]\d)|98\.1(?:7[6789]|9[01]|8\d))|95\.(?:2(?:2[0123]|[01]\d)|19[23456789])|205\.(?:19[23456789]|2[0123]\d)|51\.(?:3[23456789]|4[01234567]))|6\.(?:2(?:0(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)
 |1\.(?:6[0123]|4[89]|5\d)|9\.(?:9[012345]|8\d))|2(?:7\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|4\.1(?:[678]\d|9[01])))|81\.(?:[0456789]|[12]\d?|3[01]?)|197\.(?:2[89]|175))|8\.(?:9(?:3\.(?:1(?:4[456789]|0[0123]|5[01])|9[6789])|0\.[01234567])|8(?:1\.1(?:3[6789]|4[0123])|5\.3[23456789])|70\.1(?:7[012345]|6[89])|117\.(?:9[012345]|8\d))|7\.(?:18(?:3\.(?:2(?:2[0123]|[01]\d)|19[23456789])|9\.(?:[0456789]|[12]\d?|3[01]?))|22\.(?:2(?:5[012345]|[01234]\d)|19[23456789])|32\.1(?:[345]\d|2[89]))|0\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|22\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|105\.(?:3[23456789]|4[01234567])|3\.1(?:4[0123]|2[89]|3\d))|1\.7(?:1\.(?:[023456789]|1[012345]?)|\.2(?:2[0123]|0[89]|1\d))|3\.3(?:1\.8[89]|4\.7[01])|2\.61\.108)|1(?:6\.(?:212\.(?:2(?:2[0123]|[01]\d)|19[23456789])|151\.(?:19[23456789]|20[01234567]))|3\.109\.(?:2(?:2[0123]|0[89]|1\d)|9[6789])))|6(?:4\.(?:1(?:12\.(?:1(?:[012345678]\d?|9[01]?)?|[23456789]\d?|0)|5\.(?:[023456789]|1[012345]?))|44\.(?:[01]?\d?\d|2[0
 -4]\d|25[0-5]))|7\.21(?:[18]\.2(?:2[0123]|0[89]|1\d)|3\.1(?:4[0123]|2[89]|3\d))|2\.1(?:22\.(?:3[23456789]|7[23])|82\.15[23456789])|3\.141\.(?:3[23456789]|6[0123]|[45]\d)|8\.232\.(?:1(?:1[01]|0\d)|9[6789])|6\.231\.(?:6[456789]|7\d))|8(?:5\.(?:202\.(?:1(?:9[23456789]|7[012345]|6\d)|20[01234567])|12(?:0\.9[45]|1\.39))|4\.22\.(?:1(?:2[01234567]|[01]\d)|9[6789])|8\.135\.(?:1[6789]|3[01]|2\d)|9\.(?:114\.97?|45\.14)|6\.55\.(?:21[01]|140)|1\.22\.15[23])|7(?:9\.1(?:10\.(?:1(?:[678]\d?|9[01]?)|6[0123]|[25]\d|3[01]|4[89])|74\.(?:[0456789]|[12]\d?|3[01]?))|2\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|13\.(?:1[6789]|3[01]|2\d))|8\.31\.1(?:8[456789]|9[01]))|3(?:1\.(?:1(?:(?:4\.10|1\.4)3|35\.[01234567]|84\.242)|42\.1(?:[345]\d|2[89])|222\.20[01234567])|7\.(?:148\.2(?:1[6789]|2[0123])|230\.212|9\.58))|5(?:8\.83\.(?:[89]|1[01])|\.34\.242))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|9(?:(?:1\.(?:2(?:1(?:2\.(?:1(?:07|23|35|98)|2(?:01|20)|4[15]|65)|3\.(?:1(?:7[45]|57)|2(?:17|9)|9[34]|72)|7\.(?:1(?:62|7
 8)|2(?:00|49))|1\.(?:6[4567]|8[89]|9[01])|6\.(?:1(?:22|90|1)|7?3)|0\.17[2345])|0(?:0\.(?:1(?:6[4567]|7[6789])|2(?:4[012389]|5[01]))|9\.(?:1(?:8[346]|4)|(?:[45]|23)8|63)|1\.(?:(?:12)?[4567]|23[6789])|4\.4[01234567]|8\.(?:162|228)|3\.9[2345]|6\.20[01])|3(?:0\.1(?:1[01]|4[37])|8\.(?:18[01]|82)|9\.(?:15|24)|6\.12[01]|7\.9[123]|5\.2)|2(?:9\.(?:15[6789]|4[67]|248)|8\.(?:132|39)|0\.(?:62|90)|3\.77)|4(?:0\.16|3\.11)5)|19(?:3\.1(?:9[2345]|1[01])|(?:6\.21|7\.9)[6789]|5\.(?:25[45]|1[01])|4\.(?:[01]|21[45])|8\.1(?:09|27)))|4\.(?:1(?:5(?:4\.1(?:[345678]\d|2[89]|9[01])|8\.2(?:5[012345]|4\d))|3[01]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|6(?:3\.(?:1(?:4[679]|5[01])|24[0134567])|0\.12[123]|1\.247)|232\.2(?:5[012345]|4[89]))|3\.1(?:20\.(?:3[23456789]|6[0123]|[45]\d)|7(?:5\.2(?:5[012345]|4\d)|4\.164)|68\.(?:2[012345]|1[89]))|5\.(?:21(?:[67]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|5\.14[0123])|64\.(?:3[789]|1[13]|9[89])))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.0\.0\.0))\b)/
 describe KHOP_SPAMHAUS_DROP	Relay listed in Spamhaus Don't Route Or Peer List
 tflags	 KHOP_SPAMHAUS_DROP	nopublish
 score	 KHOP_SPAMHAUS_DROP	1 0.2 1 0.2
 #   spam/ham     s/o   corpus
 # 0.0349/0.0029 0.924  20110227@510k
 
-header	 KHOP_SPAMHAUS_DROP_LE	X-Spam-Relays-External =~ /^[^]]*(?-xism: (?:by|ip)=(?:(?:1(?:9(?:9\.(?:2(?:4(?:8\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|6\.(?:21[35]|137)|5\.138)|6\.(?:1(?:2[01234567]|[01]\d)|9[6789])|00\.(?:6[456789]|9[012345]|[78]\d)|30\.(?:6[456789]|10[0123]|[789]\d)|54\.(?:3[23456789]|4[01234567])|12\.(?:1(?:1[01]|0\d)|9[6789]))|1(?:9(?:6\.(?:2(?:2[0123]|[01]\d)|19[23456789])|8\.1(?:8[01234589]|[67]\d|9[01]))|6(?:5\.(?:3[23456789]|6[0123]|[45]\d)|6\.20[0123])|85\.(?:19[23456789]|20[01234567])|20\.163)|8(?:4\.(?:6[456789]|9[012345]|[78]\d)|8\.(?:3[23456789]|5[01]|4\d)|9\.(?:1[6789]|3[01]|2\d))|3(?:4\.1(?:[345678]\d|2[89]|9[01])|3\.145)|5(?:8\.2(?:5[012345]|4[89])|\.15[23])|46\.(?:3[23456789]|6[0123]|[45]\d)|71\.(?:19[23456789]|20[01234567])|9\.(?:2[456789]|3[01])|60\.102)|8\.(?:1(?:8(?:1\.(?:6[456789]|9[012345]|[78]\d)|3\.(?:3[23456789]|6[0123]|[45]\d)|6\.25)|51\.(?:1(?:2[01234567]|5[2345]|[01]\d)|6[456789]|[789]\d)|3\.(?:[023456789]|1[012345]?)|62\
 .2(?:2[0123]|0[89]|1\d))|2(?:0(?:5\.(?:6[456789]|9[012345]|[78]\d)|\.(?:1[6789]|3[01]|2\d)|4\.[01234567])|3\.(?:3[23456789]|4[01234567]))|4(?:5\.(?:3[23456789]|4[01234567])|8\.(?:1[6789]|3[01]|2\d))|96\.2(?:2[456789]|3\d)|57\.(?:6[456789]|7\d))|2\.(?:2(?:2(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|9\.(?:3[23456789]|6[0123]|[45]\d))|19\.(?:2(?:1[012345]|0\d)|1[23456789]\d)|6\.25)|1(?:71\.(?:6[456789]|9[012345]|[78]\d)|12\.1(?:1[23456789]|2[01234567])|01\.2(?:0[01234567]|4\d)|60\.44|97\.87)|43\.1(?:5[3456789]|7[56789]|8[01234]|60)|31\.21[23]|67\.16|86\.85)|3\.(?:1(?:0(?:5\.(?:1(?:[24]1|[58]4)|2(?:07|45))|4\.(?:1(?:10|53|76|2)|[39]4|41)|6\.3[2345]|7\.1[6789])|6(?:\.(?:100|213)|9\.25[01])|1(?:0\.136|1\.235)|78\.172|48\.47)|2(?:0(?:1\.19[23]|0\.167)|2(?:7\.24[01]|8\.145)|3(?:8\.[0123]|\.126)|7\.2(?:3[23]|4[67])|43\.166)|4(?:3\.134|6\.211|1\.38)|0\.212)|5\.(?:1(?:4(?:9\.(?:88|90)|\.11[23])|9(?:1\.10[23]|0\.157)|8(?:4\.8[67]|2\.57)|14\.[89]|62\.[67])|2(?:2(?:6\.(?:197|220)
 |5\.17[6789])|8\.1[01]|\.21[23]|46\.200)|8(?:8\.(?:19[01]|22[67])|5\.204)|9(?:3\.(?:18[45]|20[89])|5\.155)|5(?:4\.17[01]|\.161)|78\.10[89]|43\.128)|4\.(?:1(?:1(?:0\.16[0123]|6\.14[67])|\.(?:22[01]|184)|26\.(?:193|251)|65\.[45]|40\.229)|2(?:8\.4[4567]|42\.[23]|9\.185)|6(?:0\.2(?:05|42)|3\.14[4567])|5(?:4\.15[6789]|0\.116)|0\.221|44\.4)|6\.32\.2(?:1[6789]|2[0123]))|5(?:7\.2(?:3(?:2\.(?:1(?:[3456789]|2[01234567]?|[01]\d?)?|(?:[01]?\d?\d|2[0-4]\d|25[0-5])|[23456789]\d?|0)|1\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|26\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|(?:(?:1\.1|9\.2)23|0\.1(?:26|41)|2\.147|5\.190)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|7(?:6\.(?:1(?:07\.7[23456789]|12\.8[01234567])|47\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|98\.(?:5[6789]|6[0123]))|0\.(?:1(?:06|13|20)|67)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|8\.159\.1(?:7[6789]|9[01]|8\d)|1\.25\.190)|1(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.(?:44\.1(?:4[0123]|2[89]|3\d)|232\.1(?:7[012345]|6\d))|6\.19(?:9\.1(?:[345]\d|2
 [89])|7\.15[23456789])|3\.20\.1(?:[678]\d|9[01]))|4(?:(?:8\.(?:1(?:05|78)|248)|(?:0\.17|7\.5)0|3\.(?:135|49))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.192\.(?:[06789]|[125]\d?|3[01]?|4[89]?)|1\.136\.(?:1[67]|2[27])|6\.185\.2(?:18|54))|6(?:7\.(?:2(?:8\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|24\.(?:[0456789]|[12]\d?|3[01]?))|97\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|2\.125\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|2(?:(?:1\.4|9\.7)6\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|8\.1(?:68|99)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2\.202\.(?:1(?:2[01234567]|[01]\d)|9[6789]))|3(?:4\.(?:1(?:27|72)|2(?:09|3)|33)|2\.(?:145|232)|0\.2(?:01|22)|6\.228|9\.167|8\.43)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0(?:3\.(?:10\.(?:6[89]|7[01])|246\.7[2345])|9\.94\.2(?:2[0123]|0[89]|1\d))|8(?:8\.2(?:47\.(?:135|230)|11\.2[45])|6\.190\.2(?:2[456789]|3[01])))|2(?:0(?:4\.(?:1(?:0(?:6\.(?:1(?:[3456789]\d|2[89])|2(?:2[0123]|[01]\d))|7\.208)|5(?:5\.1(?:4[0123]|2[89]|3\d)|2\.2(?:2[456789]|3[01]))|87\.(?:2(?:[01234]\d|5[01234])|1(?:5[56789]|
 [6789]\d))|4(?:7\.2(?:5[012345]|4\d)|\.[01234567])|94\.1(?:8[456789]|9[01])|26\.24[45]|30\.167)|2(?:36\.(?:[0456789]|[12]\d?|3[01]?)|25\.(?:159|210))|44\.(?:2(?:0[01234567]|2[456789]|3\d)|19[23456789])|5(?:7\.(?:1[6789]|3[01]|2\d)|2\.255)|89\.224)|5\.(?:1(?:4(?:4\.(?:[023456789]|1(?:[012345]|7[6789]|9[01]|8\d)?)|2\.10[4567])|7(?:5\.1(?:[678]\d|9[01])|2\.24[4567])|37\.(?:[023456789]|1[012345]?)|89\.7[123]|59\.180)|2(?:03\.(?:[0456789]|2(?:[016789]|2[456789]?|5[012345]?|[34]\d?)?|3[01]?|1\d?)|3(?:3\.2(?:2[456789]|3\d)|5\.(?:6[456789]|7\d)|6\.189)|14\.1(?:[345]\d|2[89])))|9\.(?:1(?:4(?:8\.(?:6[456789]|9[012345]|[78]\d)|5\.(?:[0456789]|[12]\d?|3[01]?))|82\.(?:6[456789]|9[012345]|[78]\d)|98\.1(?:7[6789]|9[01]|8\d))|95\.(?:2(?:2[0123]|[01]\d)|19[23456789])|205\.(?:19[23456789]|2[0123]\d)|51\.(?:3[23456789]|4[01234567]))|6\.(?:2(?:0(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|1\.(?:6[0123]|4[89]|5\d)|9\.(?:9[012345]|8\d))|2(?:7\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|
 4\.1(?:[678]\d|9[01])))|81\.(?:[0456789]|[12]\d?|3[01]?)|197\.(?:2[89]|175))|8\.(?:9(?:3\.(?:1(?:4[456789]|0[0123]|5[01])|9[6789])|0\.[01234567])|8(?:1\.1(?:3[6789]|4[0123])|5\.3[23456789])|70\.1(?:7[012345]|6[89])|117\.(?:9[012345]|8\d))|7\.(?:18(?:3\.(?:2(?:2[0123]|[01]\d)|19[23456789])|9\.(?:[0456789]|[12]\d?|3[01]?))|22\.(?:2(?:5[012345]|[01234]\d)|19[23456789])|32\.1(?:[345]\d|2[89]))|0\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|22\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|105\.(?:3[23456789]|4[01234567])|3\.1(?:4[0123]|2[89]|3\d))|1\.7(?:1\.(?:[023456789]|1[012345]?)|\.2(?:2[0123]|0[89]|1\d))|3\.3(?:1\.8[89]|4\.7[01])|2\.61\.108)|1(?:6\.(?:212\.(?:2(?:2[0123]|[01]\d)|19[23456789])|151\.(?:19[23456789]|20[01234567]))|3\.109\.(?:2(?:2[0123]|0[89]|1\d)|9[6789])))|9(?:1\.(?:2(?:1(?:2\.(?:1(?:07|23|35|98)|2(?:01|20)|4[15]|65)|3\.(?:1(?:7[45]|57)|2(?:17|9)|9[34]|72)|7\.(?:1(?:62|78)|2(?:00|49))|1\.(?:6[4567]|8[89]|9[01])|6\.(?:1(?:22|90|1)|7?3)|0\.17[2345])|0(?:0\.(?:1(?:6[4567]|7[
 6789])|2(?:4[012389]|5[01]))|9\.(?:1(?:8[346]|4)|(?:[45]|23)8|63)|1\.(?:(?:12)?[4567]|23[6789])|4\.4[01234567]|8\.(?:162|228)|3\.9[2345]|6\.20[01])|3(?:0\.1(?:1[01]|4[37])|8\.(?:18[01]|82)|9\.(?:15|24)|6\.12[01]|7\.9[123]|5\.2)|2(?:9\.(?:15[6789]|4[67]|248)|8\.(?:132|39)|0\.(?:62|90)|3\.77)|4(?:0\.16|3\.11)5)|19(?:3\.1(?:9[2345]|1[01])|(?:6\.21|7\.9)[6789]|5\.(?:25[45]|1[01])|4\.(?:[01]|21[45])|8\.1(?:09|27)))|4\.(?:1(?:5(?:4\.1(?:[345678]\d|2[89]|9[01])|8\.2(?:5[012345]|4\d))|3[01]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|6(?:3\.(?:1(?:4[679]|5[01])|24[0134567])|0\.12[123]|1\.247)|232\.2(?:5[012345]|4[89]))|3\.1(?:20\.(?:3[23456789]|6[0123]|[45]\d)|7(?:5\.2(?:5[012345]|4\d)|4\.164)|68\.(?:2[012345]|1[89]))|5\.(?:21(?:[67]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|5\.14[0123])|64\.(?:3[789]|1[13]|9[89])))|6(?:4\.(?:1(?:12\.(?:1(?:[012345678]\d?|9[01]?)?|[23456789]\d?|0)|5\.(?:[023456789]|1[012345]?))|44\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|7\.21(?:[18]\.2(?:2[0123]|0[89]|1\d)|3\.1(?:4[0123]|2[
 89]|3\d))|2\.1(?:22\.(?:3[23456789]|7[23])|82\.15[23456789])|3\.141\.(?:3[23456789]|6[0123]|[45]\d)|8\.232\.(?:1(?:1[01]|0\d)|9[6789])|6\.231\.(?:6[456789]|7\d))|8(?:5\.(?:202\.(?:1(?:9[23456789]|7[012345]|6\d)|20[01234567])|12(?:0\.9[45]|1\.39))|4\.22\.(?:1(?:2[01234567]|[01]\d)|9[6789])|8\.135\.(?:1[6789]|3[01]|2\d)|9\.(?:114\.97?|45\.14)|6\.55\.(?:21[01]|140)|1\.22\.15[23])|7(?:9\.1(?:10\.(?:1(?:[678]\d?|9[01]?)|6[0123]|[25]\d|3[01]|4[89])|74\.(?:[0456789]|[12]\d?|3[01]?))|2\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|13\.(?:1[6789]|3[01]|2\d))|8\.31\.1(?:8[456789]|9[01]))|5(?:8\.83\.(?:[89]|1[01])|\.34\.242))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|3(?:1\.(?:(?:1(?:(?:4\.10|1\.4)3|35\.[01234567]|84\.242)|42\.1(?:[345]\d|2[89])|222\.20[01234567])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.0\.0)|7\.(?:148\.2(?:1[6789]|2[0123])|230\.212|9\.58)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|09\.0\.0\.0)\b)/
+header	 KHOP_SPAMHAUS_DROP_LE	X-Spam-Relays-External =~ /^[^]]*(?-xism: (?:by|ip)=(?:1(?:(?:9(?:9\.(?:2(?:4(?:8\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|6\.(?:21[35]|137)|5\.138)|6\.(?:1(?:2[01234567]|[01]\d)|9[6789])|00\.(?:6[456789]|9[012345]|[78]\d)|30\.(?:6[456789]|10[0123]|[789]\d)|54\.(?:3[23456789]|4[01234567])|12\.(?:1(?:1[01]|0\d)|9[6789]))|1(?:9(?:6\.(?:2(?:2[0123]|[01]\d)|19[23456789])|8\.1(?:8[01234589]|[67]\d|9[01]))|6(?:5\.(?:3[23456789]|6[0123]|[45]\d)|6\.20[0123])|85\.(?:19[23456789]|20[01234567])|20\.163)|8(?:4\.(?:6[456789]|9[012345]|[78]\d)|8\.(?:3[23456789]|5[01]|4\d)|9\.(?:1[6789]|3[01]|2\d))|3(?:4\.1(?:[345678]\d|2[89]|9[01])|3\.145)|5(?:8\.2(?:5[012345]|4[89])|\.15[23])|46\.(?:3[23456789]|6[0123]|[45]\d)|71\.(?:19[23456789]|20[01234567])|9\.(?:2[456789]|3[01])|60\.102)|8\.(?:1(?:8(?:1\.(?:6[456789]|9[012345]|[78]\d)|3\.(?:3[23456789]|6[0123]|[45]\d)|6\.25)|51\.(?:1(?:2[01234567]|5[2345]|[01]\d)|6[456789]|[789]\d)|3\.(?:[023456789]|1[012345]?)|62\
 .2(?:2[0123]|0[89]|1\d))|2(?:0(?:5\.(?:6[456789]|9[012345]|[78]\d)|\.(?:1[6789]|3[01]|2\d)|4\.[01234567])|3\.(?:3[23456789]|4[01234567]))|4(?:5\.(?:3[23456789]|4[01234567])|8\.(?:1[6789]|3[01]|2\d))|96\.2(?:2[456789]|3\d)|57\.(?:6[456789]|7\d))|2\.(?:2(?:2(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|9\.(?:3[23456789]|6[0123]|[45]\d))|19\.(?:2(?:1[012345]|0\d)|1[23456789]\d)|6\.25)|1(?:71\.(?:6[456789]|9[012345]|[78]\d)|12\.1(?:1[23456789]|2[01234567])|01\.2(?:0[01234567]|4\d)|60\.44|97\.87)|43\.1(?:5[3456789]|7[56789]|8[01234]|60)|31\.21[23]|67\.16|86\.85)|3\.(?:1(?:0(?:5\.(?:1(?:[24]1|[58]4)|2(?:07|45))|4\.(?:1(?:10|53|76|2)|[39]4|41)|6\.3[2345]|7\.1[6789])|6(?:\.(?:100|213)|9\.25[01])|1(?:0\.136|1\.235)|78\.172|48\.47)|2(?:0(?:1\.19[23]|0\.167)|2(?:7\.24[01]|8\.145)|3(?:8\.[0123]|\.126)|7\.2(?:3[23]|4[67])|43\.166)|4(?:3\.134|6\.211|1\.38)|0\.212)|5\.(?:1(?:4(?:9\.(?:88|90)|\.11[23])|9(?:1\.10[23]|0\.157)|8(?:4\.8[67]|2\.57)|14\.[89]|62\.[67])|2(?:2(?:6\.(?:197|220)
 |5\.17[6789])|8\.1[01]|\.21[23]|46\.200)|8(?:8\.(?:19[01]|22[67])|5\.204)|9(?:3\.(?:18[45]|20[89])|5\.155)|5(?:4\.17[01]|\.161)|78\.10[89]|43\.128)|4\.(?:1(?:1(?:0\.16[0123]|6\.14[67])|\.(?:22[01]|184)|26\.(?:193|251)|65\.[45]|40\.229)|2(?:8\.4[4567]|42\.[23]|9\.185)|6(?:0\.2(?:05|42)|3\.14[4567])|5(?:4\.15[6789]|0\.116)|0\.221|44\.4)|6\.32\.2(?:1[6789]|2[0123]))|5(?:7\.2(?:3(?:2\.(?:1(?:[3456789]|2[01234567]?|[01]\d?)?|(?:[01]?\d?\d|2[0-4]\d|25[0-5])|[23456789]\d?|0)|1\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|26\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|(?:(?:1\.1|9\.2)23|0\.1(?:26|41)|2\.147|5\.190)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|1(?:\.(?:1(?:[3456789]|2[01234567]?|[01]\d?)?|[23456789]\d?|0)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.(?:44\.1(?:4[0123]|2[89]|3\d)|232\.1(?:7[012345]|6\d))|6\.19(?:9\.1(?:[345]\d|2[89])|7\.15[23456789])|3\.20\.1(?:[678]\d|9[01]))|7(?:6\.(?:1(?:07\.7[23456789]|12\.8[01234567])|47\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|98\.(?:5[6789]|6[0123]))|0\.(?:1(?:06|13|20)|67)\.
 (?:[01]?\d?\d|2[0-4]\d|25[0-5])|8\.159\.1(?:7[6789]|9[01]|8\d)|1\.25\.190)|4(?:(?:8\.(?:1(?:05|78)|248)|(?:0\.17|7\.5)0|3\.(?:135|49))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.192\.(?:[06789]|[125]\d?|3[01]?|4[89]?)|1\.136\.(?:1[67]|2[27])|6\.185\.2(?:18|54))|6(?:7\.(?:2(?:8\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|24\.(?:[0456789]|[12]\d?|3[01]?))|97\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|2\.125\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|2(?:(?:1\.4|9\.7)6\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|8\.1(?:68|99)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2\.202\.(?:1(?:2[01234567]|[01]\d)|9[6789]))|3(?:4\.(?:1(?:27|72)|2(?:09|3)|33)|2\.(?:145|232)|0\.2(?:01|22)|6\.228|9\.167|8\.43)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|8(?:8\.2(?:47\.(?:135|230)|11\.2[45])|6\.190\.2(?:2[456789]|3[01])))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0(?:(?:3\.(?:10\.(?:6[89]|7[01])|246\.7[2345])|9\.94\.2(?:2[0123]|0[89]|1\d))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.0\.0\.0))|(?:2(?:0(?:4\.(?:1(?:0(?:6\.(?:1(?:[3456789]\d|2[89])|2(?:2[0123]|[01]\d)
 )|7\.208)|5(?:5\.1(?:4[0123]|2[89]|3\d)|2\.2(?:2[456789]|3[01]))|87\.(?:2(?:[01234]\d|5[01234])|1(?:5[56789]|[6789]\d))|4(?:7\.2(?:5[012345]|4\d)|\.[01234567])|94\.1(?:8[456789]|9[01])|26\.24[45]|30\.167)|2(?:36\.(?:[0456789]|[12]\d?|3[01]?)|25\.(?:159|210))|44\.(?:2(?:0[01234567]|2[456789]|3\d)|19[23456789])|5(?:7\.(?:1[6789]|3[01]|2\d)|2\.255)|89\.224)|5\.(?:1(?:4(?:4\.(?:[023456789]|1(?:[012345]|7[6789]|9[01]|8\d)?)|2\.10[4567])|7(?:5\.1(?:[678]\d|9[01])|2\.24[4567])|37\.(?:[023456789]|1[012345]?)|89\.7[123]|59\.180)|2(?:03\.(?:[0456789]|2(?:[016789]|2[456789]?|5[012345]?|[34]\d?)?|3[01]?|1\d?)|3(?:3\.2(?:2[456789]|3\d)|5\.(?:6[456789]|7\d)|6\.189)|14\.1(?:[345]\d|2[89])))|9\.(?:1(?:4(?:8\.(?:6[456789]|9[012345]|[78]\d)|5\.(?:[0456789]|[12]\d?|3[01]?))|82\.(?:6[456789]|9[012345]|[78]\d)|98\.1(?:7[6789]|9[01]|8\d))|95\.(?:2(?:2[0123]|[01]\d)|19[23456789])|205\.(?:19[23456789]|2[0123]\d)|51\.(?:3[23456789]|4[01234567]))|6\.(?:2(?:0(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|
 [789]\d)|1\.(?:6[0123]|4[89]|5\d)|9\.(?:9[012345]|8\d))|2(?:7\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|4\.1(?:[678]\d|9[01])))|81\.(?:[0456789]|[12]\d?|3[01]?)|197\.(?:2[89]|175))|8\.(?:9(?:3\.(?:1(?:4[456789]|0[0123]|5[01])|9[6789])|0\.[01234567])|8(?:1\.1(?:3[6789]|4[0123])|5\.3[23456789])|70\.1(?:7[012345]|6[89])|117\.(?:9[012345]|8\d))|7\.(?:18(?:3\.(?:2(?:2[0123]|[01]\d)|19[23456789])|9\.(?:[0456789]|[12]\d?|3[01]?))|22\.(?:2(?:5[012345]|[01234]\d)|19[23456789])|32\.1(?:[345]\d|2[89]))|0\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|22\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|105\.(?:3[23456789]|4[01234567])|3\.1(?:4[0123]|2[89]|3\d))|1\.7(?:1\.(?:[023456789]|1[012345]?)|\.2(?:2[0123]|0[89]|1\d))|3\.3(?:1\.8[89]|4\.7[01])|2\.61\.108)|1(?:6\.(?:212\.(?:2(?:2[0123]|[01]\d)|19[23456789])|151\.(?:19[23456789]|20[01234567]))|3\.109\.(?:2(?:2[0123]|0[89]|1\d)|9[6789])))|6(?:4\.(?:1(?:12\.(?:1(?:[012345678]\d?|9[01]?)?|[23456789]\d?|0)|5\.(?:[023456789]|1[012345]?))|44\.(?:[01]?\
 d?\d|2[0-4]\d|25[0-5]))|7\.21(?:[18]\.2(?:2[0123]|0[89]|1\d)|3\.1(?:4[0123]|2[89]|3\d))|2\.1(?:22\.(?:3[23456789]|7[23])|82\.15[23456789])|3\.141\.(?:3[23456789]|6[0123]|[45]\d)|8\.232\.(?:1(?:1[01]|0\d)|9[6789])|6\.231\.(?:6[456789]|7\d))|8(?:5\.(?:202\.(?:1(?:9[23456789]|7[012345]|6\d)|20[01234567])|12(?:0\.9[45]|1\.39))|4\.22\.(?:1(?:2[01234567]|[01]\d)|9[6789])|8\.135\.(?:1[6789]|3[01]|2\d)|9\.(?:114\.97?|45\.14)|6\.55\.(?:21[01]|140)|1\.22\.15[23])|7(?:9\.1(?:10\.(?:1(?:[678]\d?|9[01]?)|6[0123]|[25]\d|3[01]|4[89])|74\.(?:[0456789]|[12]\d?|3[01]?))|2\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|13\.(?:1[6789]|3[01]|2\d))|8\.31\.1(?:8[456789]|9[01]))|3(?:1\.(?:1(?:(?:4\.10|1\.4)3|35\.[01234567]|84\.242)|42\.1(?:[345]\d|2[89])|222\.20[01234567])|7\.(?:148\.2(?:1[6789]|2[0123])|230\.212|9\.58))|5(?:8\.83\.(?:[89]|1[01])|\.34\.242))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|9(?:(?:1\.(?:2(?:1(?:2\.(?:1(?:07|23|35|98)|2(?:01|20)|4[15]|65)|3\.(?:1(?:7[45]|57)|2(?:17|9)|9[34]|72)|7\.(?:
 1(?:62|78)|2(?:00|49))|1\.(?:6[4567]|8[89]|9[01])|6\.(?:1(?:22|90|1)|7?3)|0\.17[2345])|0(?:0\.(?:1(?:6[4567]|7[6789])|2(?:4[012389]|5[01]))|9\.(?:1(?:8[346]|4)|(?:[45]|23)8|63)|1\.(?:(?:12)?[4567]|23[6789])|4\.4[01234567]|8\.(?:162|228)|3\.9[2345]|6\.20[01])|3(?:0\.1(?:1[01]|4[37])|8\.(?:18[01]|82)|9\.(?:15|24)|6\.12[01]|7\.9[123]|5\.2)|2(?:9\.(?:15[6789]|4[67]|248)|8\.(?:132|39)|0\.(?:62|90)|3\.77)|4(?:0\.16|3\.11)5)|19(?:3\.1(?:9[2345]|1[01])|(?:6\.21|7\.9)[6789]|5\.(?:25[45]|1[01])|4\.(?:[01]|21[45])|8\.1(?:09|27)))|4\.(?:1(?:5(?:4\.1(?:[345678]\d|2[89]|9[01])|8\.2(?:5[012345]|4\d))|3[01]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|6(?:3\.(?:1(?:4[679]|5[01])|24[0134567])|0\.12[123]|1\.247)|232\.2(?:5[012345]|4[89]))|3\.1(?:20\.(?:3[23456789]|6[0123]|[45]\d)|7(?:5\.2(?:5[012345]|4\d)|4\.164)|68\.(?:2[012345]|1[89]))|5\.(?:21(?:[67]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|5\.14[0123])|64\.(?:3[789]|1[13]|9[89])))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.0\.0\.0))\b)/
 describe KHOP_SPAMHAUS_DROP_LE	Relay listed in Spamhaus Don't Route Or Peer List
 tflags	 KHOP_SPAMHAUS_DROP_LE	nopublish
 score	 KHOP_SPAMHAUS_DROP_LE	2 0 2 0 	# adds to KHOP_SPAMHAUS_DROP
@@ -163,7 +163,7 @@ score	 KHOP_SPAMHAUS_DROP_LE	2 0 2 0 	# 
 
 # PSBL-neighbors:  any /24 with 73+ (2/7, 29%) IPs in the PSBL (not SpamCop),
 # as obtained from rsync://psbl-mirror.surriel.com::psbl/psbl.txt
-header	 KHOP_PSBL_CIDR24	X-Spam-Relays-Untrusted =~ / (?:by|ip)=(?-xism:\b(?:1(?:2(?:(?:2\.201\.1|3\.54\.18)8|1\.63\.(?:1[6789]|22))|1(?:2\.215\.[46][45]|0\.52\.[0123]|5\.85\.184)|9(?:7\.252\.[01]|0\.121\.239)|86\.123\.13[35]|\.38\.16)|2(?:1(?:2\.96\.6[45]|7\.76\.69)|0(?:3\.194\.115|0\.85\.23)|23\.130\.213)|8(?:5\.26\.(?:18[34]|2[34]1)|3\.149\.(?:[23]|4?8)|4\.235\.9[12])|4(?:1\.(?:190\.3|254\.5)|6\.227\.191)|79\.1(?:06\.109|70\.53)|37\.110\.211)\.[012]?\d{1,2}\b)/
+header	 KHOP_PSBL_CIDR24	X-Spam-Relays-Untrusted =~ / (?:by|ip)=(?-xism:\b(?:1(?:2(?:(?:2\.201\.1|3\.54\.18)8|1\.63\.(?:1[678]|22)|0\.84\.13)|1(?:2\.215\.[46][45]|0\.52\.[0123]|5\.85\.184)|9(?:7\.252\.[01]|0\.121\.239)|86\.123\.13[35]|\.38\.16)|8(?:5\.26\.(?:18[34]|2[34]1)|3\.149\.(?:[239]|4?8)|4\.235\.9[12])|4(?:1\.(?:2(?:23\.162|54\.5)|190\.3)|6\.227\.191)|2(?:1(?:2\.96\.6[45]|7\.76\.69)|00\.85\.23)|79\.1(?:06\.109|70\.53)|37\.110\.211|61\.97\.173)\.[012]?\d{1,2}\b)/
 describe KHOP_PSBL_CIDR24	Relay's IP/24 CIDR contains many PSBL hits
 tflags	 KHOP_PSBL_CIDR24	nopublish
 score	 KHOP_PSBL_CIDR24	2 0.6 2 0.6