You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/04/11 08:57:17 UTC
svn commit: r1466774 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Thu Apr 11 06:57:16 2013
New Revision: 1466774
URL: http://svn.apache.org/r1466774
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1466774&r1=1466773&r2=1466774&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Thu Apr 11 06:57:16 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201304102
+## khop-sc-neighbors.cf v 201304112
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:7(?:5\.45\.168|8\.33\.144)|0(?:3\.9\.156|6\.241\.3)|2(?:0\.128\.2|1\.54\.54)|41\.105\.64|12\.97\.33)|(?:46\.105\.13|78\.138\.10)1|210\.21\.225|5\.39\.216)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:4\.141\.25|2\.97\.3)3|0(?:3\.9\.156|6\.241\.3)|2(?:0\.128\.2|1\.54\.54)|41\.105\.64)|(?:210\.21\.22|67\.222\.14)5|(?:46\.105\.13|78\.138\.10)1|5\.39\.216)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:12\.97\.(?:24|33)|83\.221\.1[23]|03\.20\.75|20\.84\.13)|7(?:8\.138\.106|2\.42\.224)|(?:80\.36\.13|5\.39\.22)0|217\.2(?:00\.184|3\.1?2)|66\.199\.228)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:12\.97\.(?:24|33)|83\.221\.1[23]|78\.33\.144|03\.20\.75|20\.84\.13)|(?:80\.36\.13|5\.39\.22)0|217\.2(?:00\.184|3\.1?2)|66\.199\.228|72\.42\.224)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:2(?:1(?:1\.(?:1(?:15\.(?:127|68)\.32|47\.211\.16|74\.179\.80|96\.186\.53)|2(?:(?:38\.108\.11|22\.53\.8)3|06\.133\.94)|4(?:3\.149\.60|0\.135\.4)|58\.255\.121|36\.19\.58)|3\.(?:2(?:30\.128\.226|51\.186\.229|21\.9\.13)|1(?:71\.39\.154|92\.73\.136|86\.39\.43)|81\.164\.57)|7\.2(?:3\.(?:2\.1(?:2[5678]|0[47]|3[23]|5[35]|45|61)|12\.1(?:8[02]|96))|00\.184\.87)|8\.(?:1(?:(?:53\.247\.6|94\.91\.23)8|45\.71\.192)|232\.111\.227|56\.32\.11)|0\.(?:(?:245\.89\.6|51\.44\.19)9|1(?:17\.6\.152|68\.50\.16)|91\.133\.143)|2\.(?:227\.159\.133|49\.70\.48)|6\.153\.136\.125)|0(?:2\.(?:1(?:42\.203\.19|58\.39\.250)|43\.183\.227|71\.136\.200)|0\.(?:7(?:2\.11\.132|9\.27\.60)|247\.100\.178|142\.133\.21)|3\.(?:2(?:28\.43\.207|36\.93\.142)|155\.102\.2)|1\.(?:195\.239\.27|22\.7\.225|45\.114\.3)|6\.71\.51\.153)|2(?:2\.(?:1(?:22\.79\.121|74\.163\.2)|23(?:6\.16\.14|7\.5\.193))|1\.(?:214\.208\.226|143\.46\.13)|0\.9(?:4\.235\.200|3\.111\.47)))|1(?:7(?:8\.(?:3(?:3\.(
?:170\.(?:85|93)|38\.178)|2\.223\.88)|2(?:07\.158\.230|36\.112\.56|18\.48\.23)|163\.105\.52)|(?:3\.200\.90\.19|6\.53\.233\.7)6|4\.137\.168\.212|5\.117\.144\.15)|9(?:5\.1(?:(?:28\.253\.15|91\.184\.8)2|3(?:8\.195\.125|\.200\.218))|(?:2\.69\.200\.11|6\.46\.2\.22)8|3\.2(?:00\.126\.14|55\.143\.63)|0\.82\.89\.156|9\.255\.11\.29)|1(?:5\.(?:249\.63\.164|88\.119\.132|90\.96\.85)|4\.(?:141\.253\.134|207\.113\.55)|6\.(?:255\.164\.18|90\.162\.116)|2\.(?:186\.46\.107|90\.90\.16)|8\.97\.75\.156)|2(?:1\.(?:158\.198\.76|22\.127\.17|49\.107\.2)|2\.11(?:2\.97\.124|5\.57\.26)|5\.141\.204\.82|8\.61\.186\.135)|8(?:0\.2(?:11\.1(?:91\.25|79\.3)0|25\.131\.176)|8\.(?:127\.230\.28|252\.0\.237)|7\.32\.52\.161)|4(?:1\.105\.64\.(?:100|91)|9\.255\.3\.158|\.63\.74\.204)|0(?:3\.9\.157\.181|6\.241\.3\.217)|\.2(?:26\.83\.81|34\.6\.7)|53\.127\.236\.15)|9(?:1\.(?:2(?:18\.114\.204|35\.126\.92)|121\.184\.12)|5\.(?:131\.145\.200|51\.156\.218)|3\.15(?:7\.148\.102|9\.160\.164)|4\.(?:23\.2\.185|83\.91\.53))|7(?:8\.1
38\.10(?:6\.(?:3[028]|5[25]|44)|1\.(?:[57]|12))|2\.42\.224\.(?:1[012345679]|2[02]|5)|4\.(?:122\.227\.124|9\.203\.186)|7\.106\.232\.178)|6(?:6\.(?:199\.228\.(?:2(?:0[02345678]|1[013])|19[68])|84\.(?:50\.133|49\.9))|1\.(?:1(?:38\.104\.30|66\.55\.153)|80\.254\.220))|8(?:(?:(?:0\.36\.130\.1|6\.120\.239\.)3|1\.15\.172\.14)5|4\.(?:15\.191\.254|54\.160\.128)|2\.186\.161\.252|3\.3\.103\.227)|4(?:6\.(?:105\.131\.(?:1[67]|20)|32\.235\.64)|9\.128\.40\.70|1\.137\.24\.4)|3(?:7\.(?:122\.208\.18|59\.36\.217)|1\.(?:210\.47\.230|3\.243\.24))|5(?:\.39\.2(?:20\.2(?:3[123]|26)|16\.(?:34|50))|8\.180\.26\.203))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:2(?:1(?:1\.(?:1(?:15\.(?:127|68)\.32|47\.211\.16|96\.186\.53)|2(?:38\.108\.113|06\.133\.94)|3(?:3\.121\.196|6\.19\.58)|4(?:3\.149\.60|0\.135\.4)|99\.212\.154)|7\.(?:2(?:3\.(?:2\.1(?:2[5678]|0[47]|3[23]|5[35]|45|61)|12\.1(?:8[02]|96))|00\.184\.87)|17\.35\.146)|3\.(?:2(?:30\.128\.226|51\.186\.229|21\.9\.13)|1(?:71\.39\.154|92\.73\.136|86\.39\.43)|81\.164\.57)|0\.(?:1(?:1(?:8\.26\.183|7\.6\.152)|68\.50\.16)|(?:245\.89\.6|51\.44\.19)9|91\.133\.143)|8\.(?:1(?:(?:53\.247\.6|94\.91\.23)8|45\.71\.192)|232\.111\.227|56\.32\.11)|2\.(?:227\.159\.133|6\.152\.211|49\.70\.48)|6\.153\.136\.125|9\.223\.252\.150)|0(?:0\.(?:7(?:2\.11\.132|9\.27\.60)|247\.100\.178|142\.133\.21)|2\.(?:1(?:42\.203\.19|58\.39\.250)|71\.136\.200)|3\.(?:2(?:28\.43\.207|36\.93\.142)|155\.102\.2)|9\.(?:105\.248\.|62\.115\.7)4|1\.(?:22\.7\.225|45\.114\.3))|2(?:2\.(?:1(?:22\.79\.121|74\.163\.2)|23(?:6\.16\.14|7\.5\.193))|1\.(?:214\.208\.226|143\.46\.13)|0\.94\.235\.200)
|\.183\.155\.2)|1(?:1(?:2\.(?:78\.6\.1(?:31|88)|186\.46\.107|90\.90\.16)|4\.(?:141\.253\.13?4|207\.113\.55)|5\.(?:249\.63\.164|88\.119\.132)|6\.(?:255\.164\.18|90\.162\.116)|8\.97\.196\.163|9\.184\.214\.18|7\.20\.3\.231)|7(?:8\.(?:3(?:3\.(?:1(?:44\.1(?:4[17]|37)|70\.93)|38\.178)|2\.223\.88)|2(?:07\.158\.230|36\.112\.56|18\.48\.23)|163\.105\.52)|(?:3\.200\.90\.19|6\.53\.233\.7)6|4\.137\.168\.212)|9(?:5\.1(?:(?:28\.253\.15|91\.184\.8)2|3(?:8\.195\.125|\.200\.218))|3\.2(?:00\.126\.14|55\.143\.63)|9\.(?:46\.117\.226|255\.11\.29)|2\.69\.200\.118)|2(?:1\.(?:158\.198\.76|22\.127\.17|78\.152\.51|49\.107\.2)|5\.(?:141\.204\.82|63\.65\.45)|2\.11(?:2\.97\.124|5\.57\.26)|4\.243\.124\.206)|8(?:8\.(?:1(?:27\.230\.28|42\.43\.150|68\.46\.53)|252\.0\.237)|0\.2(?:11\.1(?:91\.25|79\.3)0|25\.131\.176)|2\.237\.2\.115|7\.32\.52\.161)|4(?:1\.105\.64\.(?:100|91)|9\.255\.3\.158|\.63\.74\.204)|0(?:3\.9\.157\.181|6\.241\.3\.217)|\.2(?:26\.83\.81|34\.6\.7))|9(?:4\.(?:2(?:42\.227\.2(?:20|49)|3\.2\.185)|
83\.91\.53)|3\.15(?:7\.148\.102|9\.160\.164)|1\.(?:121\.184\.1|235\.126\.9)2|0\.83\.184\.211|5\.51\.156\.218)|6(?:6\.(?:199\.228\.(?:2(?:0[2345678]|1[0135])|198)|84\.(?:50\.133|49\.9))|1\.(?:166\.55\.153|98\.131\.141)|9\.90\.120\.188)|7(?:2\.42\.224\.(?:1[123456789]|2[02])|4\.(?:122\.227\.124|9\.203\.186)|8\.138\.10(?:1\.(?:12|7)|6\.55))|8(?:(?:0\.36\.130\.13|1\.15\.172\.14|9\.42\.216\.5)5|4\.(?:15\.191\.254|54\.160\.128)|2\.186\.161\.252)|4(?:6\.(?:105\.131\.(?:17|20)|32\.235\.64)|9\.128\.40\.70|1\.137\.24\.4)|3(?:7\.(?:122\.208\.18|59\.36\.217)|1\.(?:210\.47\.230|3\.243\.24))|5(?:\.39\.2(?:20\.2(?:3[123]|26)|16\.(?:34|50))|8\.180\.26\.203))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work