You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/07/05 08:57:20 UTC
svn commit: r1499919 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Fri Jul 5 06:57:19 2013
New Revision: 1499919
URL: http://svn.apache.org/r1499919
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1499919&r1=1499918&r2=1499919&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Fri Jul 5 06:57:19 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 20130742
+## khop-sc-neighbors.cf v 20130752
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -74,7 +74,7 @@ score KHOP_SC_CIDR16 1.0 0.2 1.0 0.2
# crap, still empty 20100410 bad scrape, script failed to populate rule
# crap, still empty 20110227 this is due to safety net exclusions -> 1 .2 1 .2
-header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b123\.17(?:\.[012]?\d{1,2}){2}\b)/
+header KHOP_SC_TOP_CIDR16 Received =~ /___ FAILED TO POPULATE ___/
describe KHOP_SC_TOP_CIDR16 Relay CIDR /16 leads SpamCop in worst /16s
tflags KHOP_SC_TOP_CIDR16 nopublish
score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0.4
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:8\.166\.248|3\.130\.70|4\.45\.73)|(?:92\.198\.10|58\.255\.)2|21\.156\.57|03\.9\.158)|2(?:1(?:3\.230\.128|2\.48\.67)|08\.71\.172))\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:8\.166\.248|3\.130\.70|4\.45\.73)|(?:21\.156\.5|74\.37\.16)7|(?:92\.198\.10|58\.255\.)2)|21(?:3\.230\.128|2\.48\.67)|46\.32\.233)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:7(?:4\.36\.16[04]|7\.1\.223)|1(?:6\.58\.163|2\.97\.24)|57\.14\.108)|2(?:08\.82\.114|4\.127\.201)|46\.32\.23[34]|37\.122\.208|96\.254\.22)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:7(?:4\.36\.16[04]|7\.1\.223)|(?:57\.14\.10|03\.9\.15)8|1(?:6\.58\.163|2\.97\.24))|2(?:08\.82\.114|4\.127\.201)|37\.122\.208|46\.32\.234|96\.254\.22)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:8\.(?:1(?:6(?:6\.2(?:4(?:8\.(?:226|64)|7\.137)|3(?:9\.228|4\.24)|09\.127)|8\.1(?:1(?:6\.12|2\.6)4|09\.193)|0\.164\.110)|29\.166\.86)|69\.(?:35\.147|55\.193)|97\.196\.163|46\.127\.36)|2\.(?:21(?:6\.(?:1(?:81\.11|05\.9)0|45\.114)|7\.228\.234)|97\.24\.(?:192|245)|78\.6\.1(?:31|88)|104\.189\.110)|4\.(?:4(?:5\.(?:(?:12\.15|4\.3)4|31\.129|27\.13)|7\.159\.150)|207\.113\.55)|1\.(?:2(?:55\.121\.234|40\.111\.32)|13\.47\.157)|5\.(?:88\.(?:119\.132|247\.131)|79\.205\.84)|9\.(?:193\.80\.215|201\.16\.211)|0\.45\.1(?:36\.181|40\.89)|3\.130\.70\.113)|8(?:4\.(?:22\.1(?:77\.50|0\.51)|107\.58\.135|82\.235\.212)|3\.(?:(?:81\.152\.22|98\.23\.15)8|101\.38\.202)|8\.(?:127\.230\.28|252\.0\.237)|7\.(?:120\.127\.27|4\.80\.188)|0\.211\.162\.254|6\.84\.207\.201)|9(?:9\.(?:30\.137\.13[89]|255\.11\.29)|8\.2(?:0\.168\.1[67]3|4\.177\.2)|5\.(?:138\.195\.125|29\.81\.30)|4\.(?:213\.122\.34|106\.16\.6)|2\.198\.102\.(?:35|53)|3\.200\.126\.14|0\.85\.209\.11)|2(?:
1\.(?:1(?:5(?:9\.11\.164|6\.57\.10|7\.3\.252)|34\.238\.129)|78\.180\.19)|3\.(?:1(?:10\.175\.202|42\.218\.89)|201\.60\.83)|2\.(?:49\.119\.18|166\.83\.7)8|0\.50\.86\.3)|7(?:4\.3(?:6\.16(?:0\.157|4\.184)|7\.167\.111)|3\.2(?:00\.90\.196|45\.31\.233)|8\.163\.105\.52|7\.1\.223\.73)|0(?:3\.9\.15(?:8\.1(?:10|47)|7\.181|6\.89)|1\.101\.152\.4[567])|5(?:3\.127\.236\.15|5\.230\.168\.60|8\.255\.2\.62)|\.2(?:15\.145\.134|26\.84\.27)|33\.242\.115\.39|46\.255\.66\.191)|2(?:1(?:1\.(?:1(?:7(?:2\.251\.168|4\.120\.123)|47\.211\.16)|232\.(?:59\.144|154\.6))|8\.(?:2(?:34\.108\.13|10\.8\.247)|1(?:45\.135\.137|58\.3\.1))|3\.(?:1(?:71\.39\.154|32\.241\.7)|230\.128\.226|81\.164\.57)|7\.(?:2(?:00\.184\.87|3\.6\.216)|198\.3\.238)|9\.(?:144\.245\.59|255\.77\.42|90\.118\.30)|0\.2(?:17\.122\.58|45\.89\.69)|6\.241\.47\.254|2\.6\.152\.211)|0(?:2\.(?:1(?:(?:29\.216\.6|58\.39\.25)0|42\.203\.19)|71\.136\.200|53\.13\.187)|0\.(?:14(?:8\.125\.247|2\.133\.21)|7(?:2\.11\.132|9\.27\.60)|35\.151\.24)|8\.(?:71\.172\.(?:9[34]|
84)|82\.114\.[25][35]|113\.254\.39)|4\.174\.223\.204|1\.45\.114\.3|3\.69\.52\.61)|2(?:2\.(?:2(?:3(?:1\.57\.10|6\.16\.1)4|53\.182\.139)|100\.14\.3)|0\.(?:136\.(?:168\.130|228\.163)|94\.235\.200))|4\.127\.201\.172)|9(?:5\.(?:7(?:1\.126\.175|7\.109\.67)|86\.(?:58\.254|4\.79)|48\.24\.10)|3\.1(?:5(?:7\.148\.102|9\.191\.246)|88\.8\.67)|(?:0\.83\.184\.21|6\.254\.22\.5)1|4\.189\.183\.70|1\.214\.83\.2)|6(?:1\.(?:(?:42\.104\.9|19\.97\.6)9|38\.186\.117|98\.131\.141|57\.65\.125)|6\.(?:203\.32\.54|84\.49\.9)|9\.163\.166\.32|5\.60\.15\.184|7\.90\.21\.150)|8(?:6\.(?:127\.71\.202|64\.171\.198)|7\.(?:126\.71\.178|97\.218\.183)|8\.(?:190\.224\.20|45\.238\.205)|3\.238\.208\.55|9\.123\.79\.111)|7(?:(?:7\.106\.232\.17|9\.188\.87\.1)8|8\.(?:97\.158\.97|29\.4\.78)|4\.216\.223\.82|6\.74\.186\.237|2\.35\.20\.131)|4(?:6\.(?:32\.23(?:3\.226|2\.18|4\.33)|182\.24\.130)|1\.137\.24\.4)|3(?:7\.(?:122\.208\.(?:217|31)|206\.210\.130)|1\.210\.47\.230)|59\.1(?:25\.64\.4|5\.76\.97))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:8\.(?:1(?:6(?:6\.2(?:4(?:8\.(?:226|64)|7\.137)|3(?:9\.228|4\.24)|09\.127)|8\.1(?:09\.193|12\.64)|0\.164\.110)|29\.166\.86)|69\.(?:35\.147|55\.193)|97\.196\.163|46\.127\.36)|2\.(?:21(?:6\.(?:1(?:81\.11|05\.9)0|45\.114)|7\.228\.234)|1(?:04\.189\.110|64\.62\.8)|97\.24\.(?:192|245)|78\.6\.1(?:31|88))|4\.(?:4(?:5\.(?:245\.161|12\.154|31\.129)|7\.159\.150)|207\.113\.55)|5\.(?:(?:249\.63\.16|79\.205\.8)4|88\.(?:119\.132|247\.131))|9\.(?:193\.80\.215|201\.16\.211|69\.10\.3)|1\.(?:255\.121\.234|13\.47\.157)|3\.1(?:30\.70\.113|62\.97\.50)|0\.45\.1(?:36\.181|40\.89))|8(?:3\.(?:(?:81\.152\.22|98\.23\.15)8|101\.38\.202)|4\.(?:22\.1(?:77\.50|0\.51)|107\.58\.135)|8\.(?:127\.230\.28|252\.0\.237)|7\.(?:120\.127\.27|4\.80\.188)|0\.211\.162\.254|6\.84\.207\.201|9\.39\.35\.168)|9(?:9\.(?:30\.137\.13[89]|255\.11\.29)|2\.1(?:87\.102\.221|98\.102\.53)|8\.2(?:0\.168\.1[67]3|4\.177\.2)|5\.(?:138\.195\.125|29\.81\.30)|4\.(?:213\.122\.34|106\.16\.6)|3\
.200\.126\.14)|2(?:1\.(?:1(?:5(?:9\.11\.164|6\.57\.10|7\.3\.252)|34\.238\.129|81\.251\.188)|78\.180\.19)|3\.(?:1(?:10\.175\.202|42\.218\.89)|201\.60\.83)|2\.(?:49\.119\.18|166\.83\.7)8|0\.50\.86\.3)|7(?:4\.3(?:6\.16(?:0\.157|4\.184)|7\.167\.111)|3\.2(?:00\.90\.196|45\.31\.233)|8\.163\.105\.52|7\.1\.223\.73)|0(?:3\.9\.15(?:8\.1(?:10|47)|7\.181|6\.89)|1\.101\.152\.4[567])|5(?:3\.127\.236\.15|5\.230\.168\.60)|\.2(?:15\.145\.134|26\.84\.27)|33\.242\.115\.39|46\.255\.66\.191)|2(?:1(?:1\.(?:1(?:7(?:2\.251\.168|4\.120\.123|6\.61\.112)|47\.211\.16)|232\.(?:59\.144|154\.6)|33\.121\.231)|3\.(?:1(?:71\.39\.154|32\.241\.7)|230\.128\.226|81\.164\.57)|0\.(?:2(?:17\.122\.58|45\.89\.69)|109\.97\.63)|8\.(?:1(?:45\.135\.137|58\.3\.1)|234\.108\.13)|7\.(?:2(?:00\.184\.87|3\.6\.216)|198\.3\.238)|9\.(?:144\.245\.59|255\.77\.42|90\.118\.30)|2\.(?:6\.152\.211|48\.67\.72)|6\.241\.47\.254)|0(?:0\.(?:14(?:8\.125\.247|2\.133\.21)|3(?:3\.143\.45|5\.151\.24)|7(?:2\.11\.132|9\.27\.60))|2\.(?:1(?:(?:29\.216\.6|58\
.39\.25)0|42\.203\.19)|71\.136\.200|53\.13\.187)|8\.(?:71\.172\.(?:84|93)|82\.114\.5[35]|113\.254\.39)|4\.174\.223\.204|1\.45\.114\.3|3\.69\.52\.61)|2(?:0\.(?:136\.(?:168\.130|228\.163)|94\.235\.200)|2\.(?:117\.219\.97|231\.57\.104))|4\.127\.201\.172)|9(?:5\.(?:7(?:1\.126\.175|7\.109\.67)|86\.(?:58\.254|4\.79)|48\.24\.10)|3\.1(?:5(?:7\.148\.102|9\.191\.246)|88\.8\.67)|(?:0\.83\.184\.21|6\.254\.22\.5)1|4\.189\.183\.70|1\.214\.83\.2)|6(?:1\.(?:(?:42\.104\.9|19\.97\.6)9|98\.(?:131\.141|77\.169)|38\.186\.117|57\.65\.125)|6\.(?:203\.32\.54|84\.49\.9)|9\.163\.166\.32|5\.60\.15\.184|7\.90\.21\.150|8\.115\.192\.7)|7(?:(?:7\.106\.232\.17|9\.188\.87\.1)8|4\.(?:216\.223\.82|9\.203\.186)|8\.(?:97\.158\.97|29\.4\.78)|6\.74\.186\.237|2\.35\.20\.131)|8(?:(?:3\.238\.208\.5|1\.23\.106\.7)5|7\.(?:126\.71\.178|97\.218\.183)|8\.(?:190\.224\.20|45\.238\.205)|6\.64\.171\.198)|3(?:7\.(?:122\.208\.(?:217|31)|206\.210\.130)|1\.210\.47\.230)|4(?:6\.(?:32\.23(?:3\.226|4\.33)|182\.24\.130)|1\.137\.24\.4)|59\.1
(?:25\.64\.4|5\.76\.97))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work