You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2014/02/01 08:57:30 UTC
svn commit: r1563380 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Sat Feb 1 07:57:30 2014
New Revision: 1563380
URL: http://svn.apache.org/r1563380
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1563380&r1=1563379&r2=1563380&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Sat Feb 1 07:57:30 2014
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201401312
+## khop-sc-neighbors.cf v 20140212
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -101,7 +101,7 @@ score KHOP_SC_TOP_CIDR16 0.6 0.2 0.7 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:(?:73\.212\.20|92\.208\.18)5|84\.(?:22\.197|82\.179)|01\.9\.207)|6(?:1\.163\.101|0\.29\.104|9\.94\.158)|2(?:19\.238\.181|21\.232\.247)|(?:91\.214\.13|75\.144\.8)1)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:84\.(?:22\.197|82\.179)|73\.212\.205|01\.9\.207)|2(?:19\.238\.181|21\.232\.247)|6(?:1\.163\.101|0\.29\.104)|91\.21(?:4\.131|8\.115)|82\.118\.20)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.6 0 0.6 0
@@ -122,7 +122,7 @@ score KHOP_SC_CIDR24 0.6 0 0.6 0
# 0.4428/0 1.000 20130705@376k resume scores -> .6 0 .6 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:0(?:3\.2(?:46\.195|53\.76)|1\.50\.12)|2(?:0\.(?:143\.55|84\.13)|5\.93\.77)|1(?:8\.244\.239|6\.112\.66)|8(?:1\.66\.157|4\.22\.53)|73\.208\.(?:186|215)|98\.143\.150|57\.14\.103)|9(?:1\.218\.245|4\.20\.224)|(?:221\.238\.2|74\.91\.3)1)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.(?:143\.55|84\.13)|5\.93\.77)|1(?:8\.244\.239|6\.112\.66)|0(?:3\.246\.195|1\.50\.12)|73\.208\.(?:186|215)|98\.143\.150|84\.22\.53)|9(?:1\.218\.245|4\.20\.224)|(?:221\.238\.2|74\.91\.3)1|69\.94\.158)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0.5
@@ -142,7 +142,7 @@ score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:8\.(?:1(?:63\.156\.109|29\.166\.86)|2(?:17\.180\.116|44\.239\.2)|4(?:6\.127\.36|1\.157\.3)|97\.186\.94)|2\.(?:216\.(?:105\.90|86\.253|46\.75)|90\.(?:131\.6[4567]|239\.211)|184\.172\.244)|0\.45\.1(?:(?:36\.18|56\.10)1|40\.89)|6\.(?:255\.241\.111|112\.66\.102)|9\.(?:42\.147\.114|193\.93\.25)|7\.(?:6\.130\.159|19\.75\.42)|3\.160\.156\.68|5\.88\.119\.132|4\.247\.23\.66)|8(?:4\.(?:22\.(?:1(?:97\.216|52\.8)|53\.(?:190?|201))|82\.1(?:7(?:1\.234|9\.117)|23\.85)|107\.159\.154)|(?:7\.162\.253\.25|3\.86\.207\.13)0|5\.25\.15(?:0\.212|1\.70))|0(?:1\.(?:(?:235\.159\.25|14\.252\.3)3|50\.12\.132|9\.207\.119)|3\.(?:20\.7\.(?:161|225)|9\.223\.110)|6\.245\.2(?:40\.205|50\.6)|9\.3\.159\.178)|9(?:8\.143\.1(?:50\.2(?:4[0789]|5[012]|39)|28\.1(?:39|44))|0\.(?:107\.140\.76|90\.193\.202)|3\.109\.69\.1(?:4[59]|50)|2\.208\.185\.1[67]9)|2(?:1\.1(?:81\.237\.251|51\.122\.38)|5\.(?:88\.123\.244|93\.77\.125)|4\.(?:54\.230\.123|160\.35\.2)|3\.64\.199\.2(?:22|
37))|7(?:3\.2(?:08\.(?:186\.8[3456]|215\.164)|12\.205\.158)|2\.245\.18\.102|5\.124\.121\.47|7\.67\.82\.111)|\.2(?:09\.216\.114|34\.38\.106)|63\.177\.132\.1(?:44|65))|2(?:1(?:1\.(?:1(?:7(?:4\.(?:178\.175|215\.100)|2\.251\.168)|15\.(?:71\.(?:18|35)|68\.133))|23(?:8\.133\.138|2\.154\.6)|(?:44\.103\.1|54\.17\.20)1)|9\.(?:238\.181\.120|147\.172\.2)|7\.1(?:3\.154\.155|46\.252\.9)|8\.234\.1(?:08\.13|7\.176)|0\.183\.179\.(?:4[45]|38)|6\.107\.159\.97|3\.139\.7\.95)|2(?:1\.2(?:3(?:2\.247\.27|8\.21\.251|4\.24\.46)|14\.2(?:08\.226|14\.187)|04\.223\.38)|0\.(?:1(?:27\.225\.130|64\.162\.22)|231\.105\.174|68\.224\.45)|2\.(?:122\.227\.10|200\.182\.65|35\.61\.196)|3\.130\.7\.(?:69|76))|0(?:3\.(?:23(?:9\.(?:125\.3|45\.20)2|8\.64\.250)|146\.140\.77)|2\.(?:194\.119\.69|234\.40\.41|64\.73\.148))|7\.150\.45\.174)|9(?:1\.21(?:8\.(?:245\.(?:[456789]|2[012789]?|1\d|30?)|115\.(?:13[3456]|54))|4\.82\.25)|3\.(?:157\.148\.102|90\.102\.194)|4\.(?:228\.215\.135|77\.199\.148))|6(?:1\.(?:1(?:63\.101\.42|41\.21\.34)|
38\.186\.117)|0\.(?:190\.92\.234|29\.104\.197)|7\.196\.86\.(?:32|47)|6\.35\.85\.4[06])|4(?:6\.1(?:82\.92\.(?:[69]|1(?:37|73))|91\.237\.118)|1\.(?:137\.24\.4|63\.166\.3))|7(?:(?:7\.106\.232\.1|8\.29\.4\.)78|4\.91\.31\.2(?:29|30)|5\.144\.81\.177)|5(?:8\.2(?:37\.102\.214|46\.179\.82)|9\.(?:125\.240\.239|4\.113\.116))|3(?:1\.(?:207\.6\.24[47]|186\.87\.231)|7\.48\.66\.[23])|8(?:5\.185\.112\.8|1\.80\.52\.1))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:1(?:73\.175\.133|84\.172\.244)|90\.(?:131\.6[4567]|239\.211)|216\.(?:105\.90|46\.75))|8\.(?:2(?:17\.180\.116|44\.239\.2)|129\.166\.86|97\.186\.94)|0\.45\.1(?:(?:36\.18|56\.10)1|40\.89)|6\.(?:255\.241\.111|112\.66\.102)|7\.(?:6\.130\.159|19\.75\.42)|3\.160\.156\.68|5\.88\.119\.132|4\.247\.23\.66|9\.193\.93\.25)|8(?:4\.(?:22\.(?:1(?:97\.216|52\.8)|53\.(?:190?|201))|82\.1(?:7(?:1\.234|9\.117)|23\.85)|107\.159\.154)|(?:7\.162\.253\.25|3\.86\.207\.13)0|5\.25\.150\.212)|9(?:8\.143\.1(?:50\.2(?:4[0789]|5[012]|39)|28\.144)|0\.(?:107\.140\.76|90\.193\.202)|2\.208\.185\.(?:1[67]9|211)|3\.109\.69\.1(?:4[59]|50)|9\.204\.45\.181)|0(?:1\.(?:(?:235\.159\.25|14\.252\.3)3|9\.20(?:6\.207|7\.119)|50\.12\.132)|6\.245\.2(?:40\.205|50\.6)|3\.9\.223\.110|9\.3\.159\.178)|2(?:5\.(?:75\.235\.127|88\.123\.244|93\.77\.125)|1\.1(?:34\.238\.129|51\.122\.38)|4\.(?:54\.230\.123|160\.35\.2)|3\.64\.199\.237)|7(?:3\.2(?:08\.(?:186\.8[3456]|215\.164)|12\.
205\.158)|5\.124\.121\.47|7\.67\.82\.111)|\.2(?:09\.216\.114|34\.38\.106)|63\.177\.132\.1(?:44|65))|2(?:1(?:1\.(?:1(?:15\.(?:71\.(?:18|35)|68\.133)|74\.215\.100)|23(?:8\.133\.138|2\.154\.6)|(?:44\.103\.1|54\.17\.20)1)|9\.(?:238\.181\.120|147\.172\.2)|(?:2\.220\.9\.23|3\.139\.7\.9)5|7\.1(?:3\.154\.155|46\.252\.9)|8\.234\.1(?:08\.13|7\.176)|0\.183\.179\.4[45]|6\.107\.159\.97)|2(?:1\.2(?:3(?:2\.247\.27|8\.21\.251|4\.24\.46)|14\.2(?:08\.226|14\.187)|04\.223\.38)|0\.(?:1(?:27\.225\.130|64\.162\.22)|231\.105\.174|68\.224\.45)|2\.(?:122\.227\.10|200\.182\.65)|3\.130\.7\.(?:69|76))|0(?:3\.(?:23(?:9\.(?:125\.3|45\.20)2|8\.64\.250)|146\.140\.77)|2\.(?:194\.119\.69|234\.40\.41))|7\.151\.127\.13)|9(?:1\.218\.(?:115\.(?:1(?:6[012345678]|3[3456]|09|10)|54)|24(?:5\.(?:[3456789]|2\d?|1\d)|4\.4))|3\.(?:157\.148\.102|90\.102\.194)|4\.(?:228\.215\.135|77\.199\.148))|6(?:1\.(?:1(?:06\.235\.180|63\.101\.42|41\.21\.34)|38\.186\.117)|0\.(?:190\.92\.234|29\.104\.197)|7\.196\.86\.(?:32|47)|6\.35\.85\.46)|4(
?:6\.1(?:82\.92\.(?:1(?:37|73)|6)|91\.237\.118)|1\.(?:137\.24\.4|63\.166\.3))|7(?:(?:7\.106\.232\.1|8\.29\.4\.)78|4\.91\.31\.2(?:29|30)|5\.144\.81\.177)|5(?:9\.(?:125\.240\.239|4\.113\.116)|8\.237\.102\.214)|3(?:7\.(?:157\.196\.54|48\.66\.3)|1\.207\.6\.247)|8(?:5\.185\.112\.8|1\.80\.52\.1))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work