You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/11/04 08:57:36 UTC
svn commit: r1538518 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Mon Nov 4 07:57:35 2013
New Revision: 1538518
URL: http://svn.apache.org/r1538518
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1538518&r1=1538517&r2=1538518&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Mon Nov 4 07:57:35 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 20131131
+## khop-sc-neighbors.cf v 20131142
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -21,7 +21,7 @@ meta __KHOP_SC_EXCLUSIONS __VIA_ML || __
# http://spamcop.net/w3m?action=map;mask=4294967295;net=0;sort=56
# Due to the massive block size, this rule only examines the last untrusted
-header __KHOP_SC_CIDR8 X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b(?:(?:18|4)6|95|2)(?:\.[012]?\d{1,2}){3}\b) /
+header __KHOP_SC_CIDR8 X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b(?:113|46|95|2)(?:\.[012]?\d{1,2}){3}\b) /
# and gets cleaned up a bit
meta KHOP_SC_CIDR8 __KHOP_SC_CIDR8 && !__KHOP_SC_EXCLUSIONS
describe KHOP_SC_CIDR8 Relay CIDR /8 is among worst in SpamCop
@@ -101,7 +101,7 @@ score KHOP_SC_TOP_CIDR16 0.6 0.2 0.7 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:0(?:3\.243\.50|9\.235\.54)|(?:12\.97\.2|21\.54\.5)4|84\.22\.172)|2(?:1(?:1\.119\.86|7\.13\.154)|02\.117\.120)|49\.218\.42|68\.64\.166|92\.66\.180)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:0(?:3\.243\.50|9\.235\.54)|(?:12\.97\.2|21\.54\.5)4|84\.22\.172)|2(?:1(?:1\.119\.86|8\.92\.249|7\.8\.255)|02\.117\.120)|64\.79\.107|92\.66\.180)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.6 0 0.6 0
@@ -122,7 +122,7 @@ score KHOP_SC_CIDR24 0.6 0 0.6 0
# 0.4428/0 1.000 20130705@376k resume scores -> .6 0 .6 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:9(?:0\.234\.106|8\.24\.174|3\.26\.10|9\.96\.83)|1(?:0\.52\.[02]|2\.97\.24)|78\.124\.110|09\.169\.88|25\.60\.156|41\.0\.61)|4(?:6\.102\.186|9\.156\.191|1\.254\.5)|21(?:3\.132\.241|7\.8\.255)|5\.39\.217|64\.79\.99)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:9(?:8\.24\.174|3\.26\.10|9\.96\.83)|1(?:0\.52\.[02]|2\.97\.24)|78\.124\.11[01]|09\.169\.88|25\.60\.156|41\.0\.61)|4(?:6\.102\.186|9\.156\.191|1\.254\.5)|21(?:3\.132\.241|7\.13\.154)|5\.39\.217|64\.79\.99)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0.5
@@ -142,7 +142,7 @@ score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:8\.(?:1(?:30\.107\.235|42\.19\.172)|97\.196\.163)|9\.(?:(?:192\.255\.12|37\.195\.5)9|203\.72\.73)|5\.82\.2(?:33\.146|46\.163)|2\.184\.172\.244|1\.223\.112\.99|6\.193\.90\.26)|9(?:9\.(?:96\.83\.1(?:3[023456789]|5[01245679]|4\d)|30\.137\.1[67])|8\.24\.17(?:4\.16[37]|5\.[23]|3\.80)|0\.107\.140\.77|3\.26\.10\.112|5\.252\.108\.6)|0(?:9\.(?:169\.88\.1(?:48|52)|235\.54\.219)|3\.(?:243\.50\.6[49]|9\.157\.126)|8\.62\.240\.104|1\.44\.3\.50)|8(?:4\.(?:22\.1(?:72\.145|97\.216)|82\.179\.117)|3\.106\.150\.78|8\.252\.0\.237)|2(?:(?:4\.160\.35\.|5\.46\.24\.6)2|1\.(?:22\.127|88\.54)\.17|2\.182\.28\.245)|7(?:3\.2(?:12\.205\.158|00\.90\.196)|5\.114\.29\.238|7\.20\.144\.7)|4(?:8\.223\.59\.187|1\.0\.61\.166|\.63\.74\.204)|\.215\.206\.242)|2(?:1(?:1\.(?:1(?:(?:91\.168\.16|47\.211\.1)6|19\.86\.14[47])|230\.74\.17|54\.17\.200)|3\.(?:1(?:(?:71\.39\.15|95\.77\.11)4|32\.241\.13)|207\.41\.34)|(?:2\.113\.32\.19|7\.8\.255\.18)9|(?:8\.92\.249\.16|0\.13\.80
\.21)2|6\.(?:168\.137\.80|231\.140\.15))|0(?:2\.(?:1(?:(?:30\.114\.13|29\.216\.6|72\.37\.21)0|1(?:7\.120\.8[29]|8\.236\.178)|42\.203\.19)|71\.136\.200|234\.40\.41|53\.13\.187)|0\.(?:7(?:2\.11\.132|9\.27\.60)|142\.133\.21)|3\.171\.233\.243|1\.116\.199\.34|8\.84\.135\.147)|2(?:1\.(?:214\.2(?:08\.226|14\.187)|153\.158\.37)|0\.122\.136\.155|2\.239\.255\.70)|4\.237\.229\.37)|6(?:4\.79\.(?:99\.(?:1(?:6[01236789]|7[01234])|2(?:3[789]|5[01]|4\d))|107\.13)|9\.198\.197\.156|5\.60\.15\.173|7\.90\.21\.150|2\.4\.0\.9)|4(?:6\.102\.186\.(?:4[12345789]|2[2345679]|3[1234679]|5[01237]|19)|1\.(?:84\.135\.22|137\.24\.4)|9\.218\.4(?:2\.206|5\.181))|9(?:3\.1(?:8(?:4\.71\.66|8\.8\.67)|59\.160\.164)|2\.(?:66\.180\.209|45\.69\.60)|1\.191\.172\.154)|8(?:1\.30\.15(?:8\.141|6\.36)|5\.17\.27\.11[057]|3\.18\.234\.202|4\.22\.61\.190)|7(?:2\.(?:166\.187\.139|35\.20\.131)|7\.106\.232\.178|6\.164\.199\.71)|5(?:\.39\.217\.(?:20[023]|199)|9\.124\.115\.88)|37\.123\.98\.115)\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:9(?:9\.(?:96\.83\.1(?:5[01245679]|3[023469]|4\d)|30\.13(?:6\.12[78]|7\.1[67]))|8\.24\.17(?:4\.16[37]|5\.[234]|3\.80)|0\.107\.140\.77|3\.26\.10\.112|5\.252\.108\.6)|1(?:2\.(?:184\.172\.244|216\.55\.162)|8\.(?:130\.107\.235|97\.196\.163)|9\.(?:201\.16\.211|37\.195\.59)|1\.223\.112\.99|5\.82\.246\.163|4\.247\.23\.66)|0(?:9\.(?:169\.88\.1(?:5[27]|48)|235\.54\.219)|3\.(?:243\.50\.6[49]|9\.157\.126)|8\.62\.240\.104|1\.44\.3\.50)|2(?:5\.(?:141\.142\.224|46\.24\.62)|2\.1(?:82\.28\.245|55\.7\.104)|1\.(?:22\.127|88\.54)\.17|4\.160\.35\.2)|8(?:4\.(?:22\.(?:1(?:72\.145|97\.216)|53\.201)|82\.179\.117)|0\.178\.56\.138|8\.252\.0\.237)|7(?:3\.2(?:12\.205\.158|00\.90\.196)|7\.20\.144\.7)|4(?:8\.223\.59\.187|1\.0\.61\.166|\.63\.74\.204))|2(?:1(?:1\.(?:1(?:19\.86\.14[47]|47\.211\.16)|23(?:3\.64\.110|0\.74\.17)|54\.17\.200)|3\.(?:1(?:(?:71\.39\.15|95\.77\.11)4|32\.241\.13)|207\.41\.34)|0\.(?:1(?:02\.30\.210|3\.80\.212)|217\.56\.2)|6\.(?:168\.137\.80
|231\.140\.15)|7\.(?:13\.154\.155|8\.255\.189)|2\.113\.32\.199|8\.92\.249\.162)|0(?:2\.(?:1(?:(?:30\.114\.13|29\.216\.6|72\.37\.21)0|1(?:7\.120\.8[29]|8\.236\.178)|42\.203\.19)|71\.136\.200|234\.40\.41|53\.13\.187)|0\.(?:7(?:2\.11\.132|9\.27\.60)|142\.133\.21)|3\.(?:171\.233\.243|234\.111\.248)|1\.116\.199\.34|8\.84\.135\.147)|2(?:1\.2(?:14\.2(?:08\.226|14\.187)|34\.24\.46)|2\.(?:239\.255\.70|99\.202\.239)|0\.122\.136\.155)|4\.237\.229\.37)|6(?:4\.79\.(?:99\.(?:1(?:6[01236789]|7[024])|2(?:3[789]|5[01]|4\d))|107\.13)|9\.198\.197\.156|5\.60\.15\.173|7\.90\.21\.150)|4(?:6\.102\.186\.(?:4[012345789]|3[1234679]|5[012378]|6[02]|29)|1\.(?:84\.135\.22|137\.24\.4)|9\.218\.4(?:2\.206|5\.181))|9(?:3\.1(?:8(?:4\.71\.66|8\.8\.67)|59\.160\.164)|2\.(?:66\.180\.209|45\.69\.60)|1\.191\.172\.154)|8(?:5\.1(?:85\.244\.101|7\.27\.110)|1\.30\.15(?:8\.141|6\.36)|3\.18\.234\.202|4\.95\.244\.11)|7(?:2\.(?:166\.187\.139|35\.20\.131)|7\.(?:106\.232\.178|81\.106\.6)|6\.164\.199\.71)|5(?:\.39\.217\.(?:20[023]|1
99)|9\.124\.115\.88)|37\.(?:228\.108\.152|123\.98\.115))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work