You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/04/23 08:57:19 UTC
svn commit: r1470828 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Tue Apr 23 06:57:18 2013
New Revision: 1470828
URL: http://svn.apache.org/r1470828
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1470828&r1=1470827&r2=1470828&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Tue Apr 23 06:57:18 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201304222
+## khop-sc-neighbors.cf v 201304232
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:2\.9(?:0\.197|7\.33)|9\.192\.252|0\.52\.17)|0(?:3\.(?:30\.72|9\.156)|8\.174\.195)|2(?:0\.84\.13|1\.54\.54)|88\.40\.127|58\.255\.1)|204\.45\.139|81\.169\.156|46\.53\.195|72\.46\.152)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:(?:12\.90\.19|88\.40\.12)7|0(?:8\.174\.195|3\.30\.72)|2(?:0\.84\.13|1\.54\.54))|2(?:17\.200\.184|04\.45\.139)|58\.25(?:3\.216|4\.168)|81\.169\.156|46\.53\.195|72\.46\.152)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:2\.9(?:0\.90|7\.33)|0\.52\.16)|78\.172\.(?:1(?:5[234]|8[36])|229)|20\.(?:128\.2|84\.13)|99\.241\.187)|2(?:1(?:3\.230\.128|0\.21\.225)|08\.82\.114|\.139\.178)|66\.199\.228|80\.36\.130|5\.39\.216)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:2\.9(?:0\.90|7\.33)|0\.52\.1[67])|78\.172\.(?:1(?:5[234]|8[36])|229)|20\.(?:128\.2|84\.13)|99\.241\.187)|2(?:1(?:3\.230\.128|0\.21\.225)|08\.82\.114|\.139\.178)|66\.199\.228|80\.36\.130|5\.39\.216)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:21(?:6\.181\.110|7\.218\.218)|1(?:86\.46\.107|64\.62\.8)|90\.90\.1[6789])|5\.(?:2(?:38\.129\.149|49\.63\.164)|(?:88\.247\.13|71\.238\.7)1|31\.153\.215)|(?:4\.141\.253\.13|0\.170\.36\.)4|8\.(?:219\.232\.243|129\.166\.86)|9\.1(?:84\.214\.18|92\.252\.1)|7\.20\.3\.231)|9(?:5\.(?:1(?:91\.1(?:66\.25|84\.82)|28\.253\.152|38\.195\.125)|29\.81\.30)|9\.(?:2(?:41\.187\.233|55\.11\.29)|19\.117\.228)|3\.(?:255\.143\.63|37\.152\.240)|4\.(?:177\.40\.195|213\.122\.34)|8\.(?:46\.147\.198|50\.164\.217))|7(?:6\.(?:31\.36\.(?:2(?:08|16)|197)|53\.233\.76)|3\.2(?:12\.240\.245|00\.90\.196)|8\.(?:207\.158\.230|33\.38\.178)|4\.142\.104\.5|5\.45\.10\.139|7\.67\.96\.244)|8(?:8\.(?:12(?:7\.230\.28|8\.99\.94)|252\.0\.237|40\.127\.86)|0\.(?:2(?:25\.131\.176|11\.179\.30)|182\.167\.68)|7\.(?:32\.52\.161|4\.80\.188))|2(?:1\.(?:1(?:81\.237\.251|4\.17\.220)|22\.127\.17)|(?:(?:4\.243|5\.129)\.124\.2|3\.110\.183\.1)06)|0(?:8\.174\.195\.(?:1(?:65|79
|82|93)|227)|9\.123\.100\.56|3\.9\.157\.181|6\.241\.3\.217)|5(?:8\.255\.1\.2(?:4[56]|5[02])|3\.127\.236\.15)|4(?:6\.0\.79\.19[78]|9\.255\.3\.158)|63\.177\.112\.2)|2(?:1(?:1\.(?:2(?:0(?:6\.1(?:21\.66|33\.94)|2\.3\.156)|41\.161\.131|38\.245\.28)|1(?:06\.90\.165|47\.211\.16|74\.179\.80|15\.68\.32)|58\.255\.121)|0\.(?:2(?:1\.225\.2(?:3[289]|4[25]|5[04]|28)|45\.89\.69)|1(?:17\.6\.152|68\.50\.16)|91\.133\.143|51\.44\.199)|8\.(?:1(?:45\.71\.192|94\.91\.238)|2(?:2\.17\.235|\.0\.60)|38\.12\.150)|3\.(?:230\.128\.226|81\.164\.57)|7\.(?:200\.184\.87|17\.35\.146)|6\.153\.136\.125|2\.6\.152\.211)|0(?:0\.(?:7(?:2\.11\.132|9\.27\.60)|247\.100\.178|142\.133\.21)|2\.(?:142\.203\.19|71\.136\.200|44\.53\.64)|1\.(?:195\.239\.27|22\.7\.225|45\.114\.3)|8\.82\.114\.(?:4[13578]|2[1389]|3[79]|50)|4\.45\.139\.184)|22\.(?:122\.79\.121|236\.16\.14))|6(?:6\.(?:199\.22(?:8\.(?:19[45678]|20[02])|7\.11[78])|84\.50\.133)|1\.(?:1(?:6(?:4\.42\.158|6\.55\.153)|9\.97\.69)|80\.254\.220)|7\.214\.170\.197|9\.90\.12
0\.188|4\.15\.155\.49)|7(?:2\.(?:46\.152\.13[12]|151\.52\.52|35\.20\.131|55\.179\.55)|9\.(?:1(?:10\.131\.173|88\.87\.18)|4\.220\.106)|7\.106\.232\.178|6\.74\.186\.237|8\.47\.186\.105|4\.9\.203\.186)|8(?:(?:0\.36\.130\.13|3\.238\.208\.5)5|4\.(?:15\.191\.254|54\.160\.128)|1\.169\.156\.136|7\.236\.232\.231|9\.222\.171\.219|8\.103\.37\.242)|5(?:\.(?:39\.216\.(?:8[1236]|7[69]|37|43|58)|255\.67\.15)|8\.2(?:54\.168\.(?:5[68]|6[02])|27\.21\.27)|0\.74\.242\.227)|9(?:5\.(?:51\.156\.218|71\.126\.175)|1\.121\.(?:184\.131|46\.86)|3\.157\.148\.102|0\.83\.184\.211|4\.102\.53\.200)|3(?:7\.(?:206\.210\.130|59\.36\.217)|1\.210\.47\.230)|41\.137\.24\.4)\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:9(?:5\.(?:1(?:91\.1(?:66\.25|84\.82)|28\.253\.152|38\.195\.125)|29\.81\.30)|9\.(?:2(?:41\.187\.233|55\.11\.29)|30\.136\.12[34]|19\.117\.228)|4\.(?:177\.40\.195|213\.122\.34)|8\.(?:46\.147\.198|50\.164\.217)|3\.255\.143\.63)|1(?:2\.(?:1(?:86\.46\.107|64\.62\.8)|90\.90\.1[6789]|217\.218\.218)|5\.(?:(?:88\.247\.13|71\.238\.7)1|249\.63\.164)|9\.1(?:84\.214\.18|92\.252\.1)|4\.141\.253\.134|8\.129\.166\.86|7\.20\.3\.231)|7(?:6\.(?:31\.36\.(?:2(?:08|16)|197)|53\.233\.76)|3\.2(?:12\.240\.245|00\.90\.196)|8\.(?:207\.158\.230|33\.38\.178)|4\.142\.104\.5|5\.45\.10\.139)|2(?:1\.(?:1(?:81\.237\.251|4\.17\.220)|78\.152\.51)|3\.1(?:10\.183\.106|6\.252\.77)|(?:4\.243|5\.129)\.124\.206)|8(?:8\.(?:127\.230\.28|252\.0\.237|40\.127\.86)|7\.(?:32\.52\.161|4\.80\.188)|0\.225\.131\.176)|0(?:8\.174\.195\.(?:1(?:65|82|93)|227)|9\.123\.100\.56|3\.9\.157\.181|6\.241\.3\.217)|4(?:6\.0\.79\.19[78]|9\.255\.3\.158)|58\.255\.1\.2(?:4[56]|5[02])|63\.177\
.112\.(?:110|2))|2(?:1(?:1\.(?:2(?:0(?:6\.1(?:21\.66|33\.94)|2\.3\.156)|41\.161\.131|38\.245\.28)|1(?:06\.90\.165|47\.211\.16|74\.179\.80|15\.68\.32)|58\.255\.121)|0\.(?:2(?:1\.225\.2(?:3[0245689]|4[235678]|5[0234]|28)|45\.89\.69)|1(?:17\.6\.152|68\.50\.16)|51\.44\.199)|8\.(?:1(?:45\.71\.192|94\.91\.238)|2(?:2\.17\.235|\.0\.60)|38\.12\.150)|3\.(?:230\.128\.226|81\.164\.57)|7\.(?:200\.184\.87|17\.35\.146)|6\.153\.136\.125|2\.6\.152\.211)|0(?:0\.(?:7(?:2\.11\.132|9\.27\.60)|247\.100\.178|142\.133\.21)|2\.(?:142\.203\.19|71\.136\.200|44\.53\.64)|8\.82\.114\.(?:4[1345678]|2[389]|3[79]|50)|1\.(?:195\.239\.27|22\.7\.225|45\.114\.3)|4\.45\.139\.184)|2(?:2\.(?:122\.79\.121|236\.16\.14)|0\.94\.235\.200)|\.139\.178\.81)|6(?:1\.(?:1(?:6(?:4\.42\.158|6\.55\.153)|9\.97\.69)|80\.254\.220|98\.131\.141)|6\.(?:199\.22(?:8\.(?:19[5678]|20[02])|7\.11[78])|84\.50\.133)|7\.214\.170\.197|9\.90\.120\.188|4\.15\.155\.49)|7(?:2\.(?:46\.152\.13[12]|151\.52\.52|35\.20\.131|55\.179\.55)|9\.1(?:10\.131\
.173|88\.87\.18)|7\.106\.232\.178|6\.74\.186\.237|8\.47\.186\.105)|5(?:8\.2(?:5(?:4\.168\.(?:5[68]|6[02])|3\.216\.136)|27\.21\.27)|\.(?:39\.216\.(?:8[1236]|7[69]|37|58)|255\.67\.15)|0\.74\.242\.227)|8(?:(?:0\.36\.130\.13|3\.238\.208\.5)5|4\.(?:15\.191\.254|54\.160\.128)|1\.169\.156\.136|7\.236\.232\.231|9\.222\.171\.219)|9(?:1\.121\.(?:184\.131|46\.86)|3\.157\.148\.102|4\.102\.53\.200|5\.51\.156\.218)|3(?:7\.(?:206\.210\.130|59\.36\.217)|1\.(?:210\.47\.23|41\.112\.6)0)|41\.137\.24\.4)\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work