You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2011/02/12 07:57:24 UTC
svn commit: r1070035 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Sat Feb 12 06:57:24 2011
New Revision: 1070035
URL: http://svn.apache.org/viewvc?rev=1070035&view=rev
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1070035&r1=1070034&r2=1070035&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Sat Feb 12 06:57:24 2011
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201102111
+## khop-sc-neighbors.cf v 201102121
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -72,7 +72,7 @@ score KHOP_SC_CIDR16 1.6 0.5 1.6 0.5
# 0 /0 0 20100409 (wha!?)
# crap, still empty 20100410 bad scrape, script failed to populate rule
-header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b118\.96(?:\.[012]?\d{1,2}){2}\b)/
+header KHOP_SC_TOP_CIDR16 Received =~ /___ FAILED TO POPULATE ___/
describe KHOP_SC_TOP_CIDR16 Relay CIDR /16 leads SpamCop in worst /16s
tflags KHOP_SC_TOP_CIDR16 nopublish
score KHOP_SC_TOP_CIDR16 2.0 0.5 2.0 0.5
@@ -89,7 +89,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.5 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:(?:3\.233|8\.248)\.64|7\.118\.81)|09\.212\.153)|1(?:78\.49\.255|87\.45\.193|21\.54\.54|95\.155\.1)|6(?:4\.202\.123|2\.183\.85|6\.87\.0)|9(?:5\.129\.166|1\.203\.67)|41\.(?:137\.24|254\.1)|85\.26\.2(?:25|34)|77\.232\.143|58\.64\.187)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:(?:13\.10\.16|87\.45\.19)3|78\.49\.255|21\.54\.54)|21(?:(?:(?:3\.233|8\.248)\.6|0\.48\.15)4|7\.118\.90)|8(?:5\.26\.2(?:25|34)|3\.149\.21)|9(?:5\.129\.166|1\.203\.67)|6(?:2\.183\.85|6\.87\.0)|41\.(?:137\.24|254\.1)|77\.232\.143)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 2.5 0.6 2.5 0.6
@@ -106,7 +106,7 @@ score KHOP_SC_CIDR24 2.5 0.6 2.5 0.6
# 0.2960/0 1.000 20100409
# 0.2905/0 1.000 20100410 net
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:3\.(?:87\.(?:1(?:28|36)|74)|2(?:26\.63|33\.64))|7\.(?:118\.(?:83|90)|66\.146|8\.225))|0(?:4\.45\.239|9\.51\.150|3\.82\.95)|7\.123\.252)|8(?:5\.(?:26\.(?:2(?:3[2345]|41)|1(?:6[45]|83))|115\.248)|(?:0\.83\.23|2\.178\.6)9|3\.149\.(?:3[68]?|2[18])|1\.192\.2(?:11|38))|1(?:1(?:3\.10\.16[23489]|4\.112\.24[34])|7(?:8\.162\.135|4\.36\.86)|95\.(?:161\.9|91\.70))|7(?:7\.232\.142|8\.159\.115)|41\.254\.[01]|58\.64\.187|98\.139\.91|61\.19\.66)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:3\.(?:87\.(?:1(?:28|36)|74)|2(?:26\.63|33\.64))|7\.(?:118\.(?:83|90)|66\.146|8\.225))|0(?:9\.51\.150|3\.82\.95)|7\.123\.252)|8(?:5\.(?:26\.(?:2(?:3[2345]|41)|1(?:6[45]|83))|115\.248)|(?:0\.83\.23|2\.178\.6)9|3\.149\.(?:3[68]?|2[18])|1\.192\.2(?:11|38))|1(?:1(?:3\.10\.16[23489]|4\.112\.24[34])|95\.(?:161\.9|91\.70)|78\.162\.135)|7(?:7\.232\.142|8\.159\.115)|6(?:4\.202\.123|1\.19\.66)|41\.254\.[01]|58\.64\.187|98\.139\.91)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.6 2.7 0.6
@@ -123,7 +123,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.6 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:2(?:0(?:9\.(?:2(?:12\.153\.2(?:1[78]|22)|50\.231\.242)|51\.150\.1(?:8[68]|90))|4\.(?:45\.239\.7[456]|111\.83\.51|57\.97\.154)|0\.(?:9(?:8\.246\.205|4\.104\.10)|80\.13\.66)|2\.(?:(?:64\.77|75\.36)\.93|152\.194\.128)|1\.(?:144\.148\.82|238\.219\.28)|6\.(?:255\.221\.18|188\.209\.1)8|7\.(?:144\.75\.158|57\.124\.67)|3\.212\.209\.246|8\.131\.186\.2)|1(?:6\.(?:4(?:0\.148\.214|1\.244\.161)|17(?:0\.88\.196|6\.16\.202)|246\.29\.190)|3\.(?:251\.168\.216|190\.204\.67)|(?:8\.248\.44\.1|7\.26\.6\.)96|0\.48\.154\.253|9\.255\.47\.215)|4\.(?:1(?:1(?:4\.252\.233|\.192\.241)|5\.(?:160\.142|251\.28)|32\.97\.18|71\.21\.75)|2(?:2\.179\.185|15\.91\.6)|68\.9\.152)|22\.252\.223\.2)|6(?:7\.(?:1(?:7(?:6\.137\.222|5\.33\.64)|87\.(?:151\.225|215\.197)|67\.53\.212|97\.83\.211)|2(?:41\.137\.154|05\.199\.18|21\.198\.37|37\.28\.105)|58\.92\.55)|8\.(?:(?:4(?:1\.187\.1|4\.133\.3)|5(?:7\.251\.23|1\.70\.2)|235\.232\.20)0|63\.31\.151|76\.240\.78)|6\.(?:2(?:27\.19
7\.130|52\.219\.177)|1(?:22\.80\.241|90\.204\.10)|49\.100\.34|58\.215\.72)|4\.(?:202\.123\.24[678]|119\.40\.138|90\.72\.43)|2\.(?:16(?:2\.81\.236|8\.65\.18)|212\.216\.249)|9\.(?:1(?:79\.164\.244|81\.9\.71)|66\.241\.44)|5\.(?:78\.168\.249|19\.226\.15|40\.95\.123)|1\.(?:67\.246\.226|19\.250\.44)|0\.199\.201\.120)|7(?:6\.(?:2(?:1\.(?:187\.45|74\.120)|0\.(?:93\.112|16\.10))|1(?:26\.40\.233|80\.209\.30)|30\.194\.138|73\.199\.146|98\.97\.173|6\.98\.169)|1\.(?:2(?:3(?:9\.144\.233|0\.45\.78)|06\.240\.131)|(?:75\.126\.10|80\.23\.12)3|1(?:25\.12\.15|60\.96\.90)|0\.146\.160|48\.39\.231)|5\.(?:1(?:3(?:1\.205\.164|0\.182\.18)|50\.241\.238|45\.45\.225)|99\.245\.138|84\.212\.56)|4\.(?:2(?:08\.167\.179|54\.146\.125)|50\.(?:94\.234|85\.59)|75\.172\.93)|8\.(?:2(?:25\.129\.13|38\.76\.182)|159\.11(?:5\.236|8\.74))|0\.(?:140\.251\.110|57\.242\.42|62\.200\.98)|9\.29\.168\.78)|1(?:7(?:3\.(?:2(?:(?:24\.213\.13|55\.97\.17)8|3\.194\.196)|188\.181\.141)|8\.(?:162\.135\.2(?:19|20)|202\.158\.115|49\.255
\.104)|4\.(?:36\.8(?:6\.11[34]|7\.194)|1\.133\.194))|9(?:5\.1(?:6(?:0\.253\.4|1\.9\.2)|55\.1\.55)|8\.106\.183\.189|0\.12\.80\.150)|8(?:4\.1(?:54\.138\.11[39]|\.151\.12)|7\.(?:45\.193\.174|13\.60\.203))|2(?:1\.(?:161\.83\.153|52\.157\.238)|\.190\.129\.198|5\.20\.82\.196)|6(?:0\.129\.53\.138|2\.84\.93\.177)|11\.224\.250\.134)|9(?:8\.(?:2(?:2(?:3\.1(?:86\.3|3\.4)4|7\.88\.133)|38\.152\.102|50\.224\.251)|142\.216\.41)|7\.(?:8(?:9\.116\.202|5\.34\.13)|93\.177\.5|77\.35\.3)|(?:2\.13\.201\.11|6\.49\.179\.10)0|0\.(?:180\.226\.155|218\.10\.99)|5\.1(?:73\.163\.206|54\.240\.98)|9\.(?:230\.67\.239|194\.74\.37)|3\.(?:23\.207\.77|91\.196\.99)|4\.102\.209\.94)|8(?:8\.(?:1(?:9(?:0\.12\.240|1\.78\.136)|53\.186\.21)|255\.153\.106|40\.102\.242)|2\.(?:1(?:93\.140\.168|69\.93\.145)|224\.188\.122|67\.243\.24)|1\.(?:66\.2(?:04\.14|33\.12)1|152\.96\.158)|(?:4\.15\.191\.25|9\.7\.70\.13)4|3\.142\.111\.228|6\.188\.143\.201|7\.106\.251\.156|5\.25\.135\.200)|4(?:1\.137\.(?:(?:24|30|56)\.4|63\.203)|6\.17\
.121\.1)|58\.20\.40\.166)\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:2(?:0(?:9\.(?:2(?:12\.153\.2(?:18|22)|50\.231\.242)|51\.150\.18[679])|2\.(?:(?:64\.77|75\.36)\.93|152\.194\.128|28\.24\.99)|1\.(?:23(?:2\.85\.222|8\.219\.28)|144\.148\.82)|0\.(?:9(?:8\.246\.205|4\.104\.10)|80\.13\.66)|8\.(?:71\.172\.14[56]|131\.186\.2)|7\.(?:144\.75\.158|57\.124\.67)|4\.(?:111\.83\.51|45\.239\.76)|3\.212\.209\.246|6\.255\.221\.188)|1(?:6\.(?:1(?:76\.16\.202|89\.171\.27)|4(?:0\.148\.214|1\.244\.161)|246\.29\.190)|(?:8\.248\.44\.1|7\.26\.6\.)96|0\.48\.154\.253|2\.146\.157\.10|9\.255\.47\.215)|4\.(?:1(?:5\.(?:160\.142|251\.28)|1\.192\.241|32\.97\.18|71\.21\.75)|2(?:2\.179\.185|15\.91\.6)|68\.9\.152)|22\.252\.223\.2)|6(?:7\.(?:1(?:6(?:5\.140\.137|7\.53\.212)|7(?:6\.137\.222|5\.33\.64)|87\.(?:151\.225|215\.197)|97\.83\.211)|2(?:41\.137\.154|05\.199\.18|21\.198\.37|37\.28\.105)|58\.92\.55)|6\.(?:2(?:(?:40\.114|52\.219)\.177|27\.197\.130|39\.77\.194)|1(?:22\.80\.241|90\.204\.10)|49\.100\.34|94\.77\.202)|8\.(?:(?:4(?
:1\.187\.1|4\.133\.3)|5(?:7\.251\.23|1\.70\.2)|235\.232\.20)0|63\.31\.151|76\.240\.78)|4\.(?:202\.123\.24[678]|119\.40\.138|90\.72\.43)|2\.(?:16(?:2\.81\.236|8\.65\.18)|212\.216\.249)|9\.(?:1(?:79\.164\.244|81\.9\.71)|66\.241\.44)|1\.(?:67\.246\.226|19\.250\.44)|5\.(?:19\.226\.15|40\.95\.123)|0\.199\.201\.120)|1(?:7(?:3\.(?:2(?:(?:24\.213\.13|55\.97\.17)8|46\.157\.119|3\.194\.196)|188\.181\.141)|8\.(?:162\.135\.2(?:2[01234]|19)|202\.158\.115|49\.255\.104)|4\.1\.133\.194)|9(?:5\.(?:1(?:6(?:0\.253\.4|1\.9\.2)|55\.1\.55)|223\.221\.114)|0\.(?:12\.80\.150|60\.88\.146)|8\.106\.183\.189)|8(?:4\.1(?:54\.138\.11[39]|\.151\.12)|7\.(?:45\.193\.174|13\.60\.203)|8\.154\.157\.104|9\.220\.47\.19)|2(?:1\.(?:161\.83\.153|52\.157\.238)|2\.252\.234\.75|\.190\.129\.198|5\.20\.82\.196)|6(?:0\.129\.53\.138|2\.84\.93\.177)|11\.224\.250\.134|07\.4\.9\.173|41\.85\.0\.85)|7(?:1\.(?:2(?:3(?:9\.144\.233|0\.45\.78)|06\.240\.131)|(?:75\.126\.10|80\.23\.12)3|1(?:25\.12\.15|60\.96\.90)|0\.146\.160|48\.39\.
231)|6\.(?:2(?:1\.(?:187\.45|74\.120)|0\.(?:93\.112|16\.10))|(?:126\.40\.23|98\.97\.17)3|30\.194\.138|6\.98\.169)|5\.(?:1(?:3(?:1\.205\.164|0\.182\.18)|50\.241\.238|45\.45\.225)|84\.212\.56)|4\.(?:2(?:08\.167\.179|54\.146\.125)|75\.172\.93|50\.85\.59)|8\.(?:2(?:25\.129\.13|38\.76\.182)|159\.11(?:5\.236|8\.74))|0\.(?:140\.251\.110|57\.242\.42)|9\.29\.168\.78)|9(?:8\.(?:2(?:2(?:3\.1(?:86\.3|3\.4)4|7\.88\.133)|50\.224\.251)|142\.216\.41)|7\.(?:8(?:9\.116\.202|5\.34\.13)|93\.177\.5|77\.35\.3)|3\.(?:(?:190\.104\.|23\.207\.7)7|91\.196\.99)|5\.1(?:73\.163\.206|54\.240\.98)|6\.(?:49\.179\.10|226\.4\.6)0|0\.180\.226\.155|4\.102\.209\.94|9\.194\.74\.37)|8(?:8\.(?:19(?:0\.12\.240|1\.78\.136)|255\.153\.106|40\.102\.242)|1\.(?:66\.2(?:04\.14|33\.12)1|152\.96\.158)|2\.1(?:93\.140\.168|69\.93\.145)|4\.(?:15\.191\.254|51\.44\.66)|3\.142\.111\.228|6\.188\.143\.201|7\.106\.251\.156|5\.25\.135\.200|9\.218\.52\.234)|4(?:1\.137\.(?:(?:24|30|56)\.4|63\.203)|6\.17\.121\.1)|5(?:0\.23\.193\.104|8\.2
0\.40\.166))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work