You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2011/02/14 07:57:18 UTC
svn commit: r1070395 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Mon Feb 14 06:57:18 2011
New Revision: 1070395
URL: http://svn.apache.org/viewvc?rev=1070395&view=rev
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1070395&r1=1070394&r2=1070395&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Mon Feb 14 06:57:18 2011
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201102131
+## khop-sc-neighbors.cf v 201102141
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -89,7 +89,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.5 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:2(?:0(?:0\.98\.246|8\.71\.172)|1(?:3\.233|8\.248)\.64)|8(?:1\.192\.2(?:11|38)|5\.26\.2(?:25|34))|7(?:7\.232\.14[23]|8\.159\.115)|1(?:13\.10\.162|78\.49\.255)|6(?:0\.199\.201|2\.183\.85)|9(?:5\.129\.166|1\.203\.67)|41\.137\.24|58\.64\.187)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:(?:(?:3\.233|8\.248)\.6|0\.48\.15)4|7\.118\.81)|00\.98\.246)|1(?:9(?:8\.106\.26|5\.161\.9)|14\.112\.24[34]|78\.49\.255)|8(?:1\.192\.2(?:11|38)|5\.26\.225)|7(?:7\.232\.142|8\.159\.115)|9(?:4\.102\.209|1\.203\.67)|62\.183\.85)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 2.5 0.6 2.5 0.6
@@ -106,7 +106,7 @@ score KHOP_SC_CIDR24 2.5 0.6 2.5 0.6
# 0.2960/0 1.000 20100409
# 0.2905/0 1.000 20100410 net
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:8(?:5\.(?:26\.(?:2(?:3[2345]|41)|1(?:6[45]|83))|115\.248)|(?:0\.83\.23|2\.178\.6)9|3\.149\.(?:3[68]?|2[18])|8\.19(?:0\.12|1\.78)|1\.192\.2(?:11|38))|2(?:1(?:3\.(?:87\.(?:1(?:28|36)|74)|2(?:26\.63|33\.64))|7\.(?:118\.(?:83|90)|66\.146|8\.225)|0\.48\.154)|0(?:9\.51\.150|3\.82\.95)|7\.123\.252)|1(?:1(?:3\.10\.16[34589]|4\.112\.24[34])|95\.(?:161\.9|91\.70)|78\.162\.135|87\.45\.193)|9(?:5\.154\.240|8\.139\.91)|41\.254\.[01]|58\.64\.187|61\.19\.66)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:8(?:5\.(?:26\.(?:1(?:6[45]|8[36])|2(?:3[2345]|41))|115\.248)|3\.149\.(?:3[68]?|2[18]|45)|1\.192\.(?:2(?:11|38)|199)|8\.19(?:0\.12|1\.78)|0\.83\.23[89]|2\.178\.69)|2(?:1(?:3\.(?:87\.(?:1(?:28|36)|74)|226\.63)|7\.(?:118\.(?:83|90)|66\.146|8\.225))|0(?:8\.71\.172|9\.51\.150|3\.82\.95)|7\.123\.252)|1(?:13\.10\.16[3459]|78\.162\.135|22\.55\.106|87\.45\.193|95\.91\.70)|9(?:5\.154\.240|8\.139\.91)|5(?:0\.23\.193|8\.64\.187)|6(?:0\.199\.201|1\.19\.66)|41\.254\.[01])\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.6 2.7 0.6
@@ -123,7 +123,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.6 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:2(?:0(?:9\.(?:2(?:12\.153\.2(?:18|22)|50\.231\.242)|51\.150\.18[679])|2\.(?:(?:64\.77|75\.36)\.93|152\.194\.128|28\.24\.99)|1\.(?:23(?:2\.85\.222|8\.219\.28)|144\.148\.82)|0\.(?:9(?:8\.246\.205|4\.104\.10)|80\.13\.66)|4\.(?:1(?:88\.168\.1|11\.83\.5)1|8\.46\.130)|8\.(?:71\.172\.14[56]|131\.186\.2)|3\.212\.209\.246|6\.255\.221\.188)|1(?:6\.(?:1(?:76\.16\.202|89\.171\.27)|4(?:0\.148\.214|1\.244\.161))|(?:(?:8\.248\.44\.1|7\.26\.6\.)9|9\.255\.18\.3)6|0\.48\.154\.253)|4\.(?:1(?:1(?:4\.252\.233|\.192\.241)|5\.(?:160\.142|251\.28)|32\.97\.18|71\.21\.75)|22\.179\.185|68\.9\.152)|2(?:1\.201\.106\.25|2\.252\.223\.)2)|7(?:1\.(?:2(?:3(?:9\.144\.233|0\.45\.78)|06\.240\.131)|1(?:94\.16\.227|25\.12\.15|60\.96\.90)|(?:75\.126\.10|80\.23\.12)3|0\.146\.160|48\.39\.231|3\.251\.45)|6\.(?:2(?:0\.(?:93\.112|16\.10)|1\.187\.45)|1(?:26\.40\.233|6\.124\.157)|6\.(?:225\.11|98\.16)9|30\.194\.138)|5\.(?:1(?:3(?:1\.205\.164|0\.182\.18)|50\.241\.238|45\.4
5\.225)|8(?:4\.212\.56|9\.34\.249))|8\.(?:2(?:25\.129\.13|38\.76\.182)|159\.11(?:5\.236|8\.74)|40\.254\.1)|0\.(?:1(?:35\.175\.249|40\.251\.110)|57\.242\.42|73\.107\.55)|4\.(?:254\.146\.125|75\.172\.93)|9\.(?:29\.168\.78|96\.48\.103)|7\.69\.137\.77)|6(?:7\.(?:1(?:6(?:5\.140\.137|7\.53\.212)|7(?:6\.137\.222|5\.33\.64)|87\.(?:151\.225|215\.197)|97\.83\.211)|2(?:41\.137\.154|05\.199\.18|21\.198\.37|37\.28\.105)|58\.92\.55)|8\.(?:(?:4(?:1\.187\.1|4\.133\.3)|5(?:7\.251\.23|1\.70\.2)|235\.232\.20)0|39\.182\.127|63\.31\.151)|9\.(?:6(?:4\.(?:155\.181|43\.148)|6\.241\.44)|1(?:79\.164\.244|81\.9\.71))|6\.(?:2(?:(?:40\.114|52\.219)\.177|27\.197\.130)|49\.100\.34|58\.215\.72)|2\.(?:16(?:2\.81\.236|8\.65\.18)|212\.216\.249)|4\.(?:(?:202\.123\.24|119\.40\.13)8|90\.72\.43)|0\.199\.201\.120|1\.67\.246\.226|5\.40\.95\.123)|1(?:9(?:5\.(?:1(?:6(?:1\.(?:40\.10|9\.2)|0\.253\.4)|55\.1\.55)|223\.221\.114)|0\.(?:1(?:99\.14\.222|2\.80\.150)|60\.88\.146)|8\.106\.26\.54)|7(?:8\.(?:162\.135\.2(?:2[01234
5]|19)|202\.158\.115|49\.255\.104)|3\.2(?:(?:24\.213\.13|55\.97\.17)8|46\.157\.119|3\.194\.196))|2(?:1\.(?:161\.83\.153|52\.157\.238)|3\.(?:194\.221\.245|27\.79\.11)|2\.252\.234\.75)|8(?:7\.(?:45\.193\.174|13\.60\.203)|4\.1\.151\.12)|6(?:0\.129\.53\.138|2\.84\.93\.177)|11\.224\.250\.134|42\.217\.19\.26)|8(?:8\.(?:19(?:0\.12\.240|1\.78\.136)|2(?:55\.153\.106|16\.4\.75)|40\.102\.242)|(?:1\.66\.2(?:04\.14|33\.12)|0\.65\.16\.7)1|2\.1(?:93\.140\.168|69\.93\.145)|6\.(?:188\.143\.201|36\.49\.200)|4\.(?:15\.191\.254|51\.44\.66)|3\.142\.111\.228|7\.106\.251\.156|5\.25\.135\.200|9\.218\.52\.234)|9(?:7\.(?:8(?:9\.116\.202|5\.34\.13)|103\.239\.148|93\.177\.5|77\.35\.3)|3\.(?:(?:190\.104\.|23\.207\.7)7|91\.196\.(?:132|99))|6\.(?:(?:49\.179\.10|226\.4\.6)0|50\.210\.62)|8\.22(?:3\.1(?:86\.3|3\.4)4|7\.88\.133)|4\.1(?:02\.209\.94|56\.166\.10)|5\.154\.240\.98|9\.194\.74\.37)|4(?:1\.137\.(?:(?:24|30|56)\.4|63\.20[123])|6\.17\.121\.1)|5(?:8\.(?:150\.55\.59|20\.40\.166)|0\.23\.193\.104))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:2(?:0(?:9\.(?:2(?:12\.153\.2(?:18|22)|50\.231\.242)|51\.150\.1(?:8[679]|90))|2\.(?:28\.(?:66\.251|24\.99)|(?:64\.77|75\.36)\.93|152\.194\.128)|0\.(?:9(?:5\.162\.206|8\.246\.205|4\.104\.10)|80\.13\.66)|8\.(?:71\.172\.1(?:5[123]|4[56])|131\.186\.2)|4\.(?:1(?:88\.168\.1|11\.83\.5)1|8\.46\.130)|6\.(?:255\.221\.18|188\.209\.1)8|1\.23(?:2\.85\.222|8\.219\.28)|3\.212\.209\.246)|1(?:2\.(?:(?:199\.29\.14|62\.121\.9)5|85\.(?:101\.94|97\.169))|(?:8\.248\.44\.19|9\.255\.18\.3)6|6\.(?:176\.16\.202|40\.148\.214)|7\.(?:9\.147\.115|26\.6\.96)|0\.48\.154\.253|3\.242\.205\.37)|4\.(?:1(?:5\.(?:160\.142|251\.28)|14\.252\.233|71\.21\.75)|22\.179\.185|68\.9\.152)|22\.252\.223\.2)|6(?:7\.(?:1(?:6(?:5\.140\.137|7\.53\.212)|87\.(?:151\.225|215\.197)|97\.83\.211|75\.33\.64|5\.97\.82)|2(?:41\.137\.154|05\.199\.18|37\.28\.105)|58\.92\.55)|(?:8\.(?:4(?:1\.187\.1|4\.133\.3)|5(?:7\.251\.23|1\.70\.2)|235\.232\.20)|0\.199\.201\.12)0|4\.(?:1(?:(?:07\.150\.13|
48\.129\.14)0|19\.40\.138)|90\.72\.43)|6\.(?:2(?:(?:40\.114|52\.219)\.177|27\.197\.130)|49\.100\.34)|9\.(?:1(?:79\.164\.244|81\.9\.71)|64\.(?:155\.181|43\.148))|2\.(?:212\.216\.249|168\.65\.18)|1\.(?:67\.246\.226|221\.67\.94)|5\.40\.95\.123)|1(?:9(?:5\.(?:1(?:6(?:1\.(?:40\.10|9\.2)|0\.253\.4)|55\.1\.55)|223\.221\.114)|0\.(?:1(?:99\.14\.222|2\.80\.150)|60\.88\.146)|8\.106\.26\.(?:54|72))|2(?:1\.(?:161\.83\.153|52\.157\.238)|3\.(?:194\.221\.245|27\.79\.11)|2\.252\.2(?:46\.234|34\.75)|8\.121\.191\.240|5\.20\.82\.196)|7(?:8\.(?:162\.135\.2(?:2[01234567]|19)|49\.255\.104)|3\.2(?:24\.213\.138|46\.157\.119|3\.194\.196)|4\.36\.86\.1(?:1[34]|26))|8(?:7\.(?:45\.193\.174|13\.60\.203)|4\.1\.151\.12)|11\.224\.250\.13[24]|42\.217\.19\.26|62\.84\.93\.177)|7(?:6\.(?:1(?:26\.40\.233|6\.124\.157)|20\.(?:93\.112|16\.10)|6\.(?:225\.11|98\.16)9|30\.194\.138)|1\.(?:2(?:06\.240\.131|39\.144\.233)|0\.146\.160|125\.12\.15|48\.39\.231|80\.23\.123)|8\.(?:159\.11(?:5\.236|8\.74)|225\.129\.13|40\.254\.1
)|0\.(?:1(?:35\.175\.249|40\.251\.110)|57\.242\.42)|4\.(?:254\.146\.125|142\.195\.64|75\.172\.93)|5\.1(?:30\.182\.18|45\.45\.225)|7\.(?:69\.137\.77|232\.83\.2)|9\.96\.(?:48\.103|14\.31))|8(?:8\.(?:19(?:0\.12\.240|1\.78\.136)|2(?:55\.153\.106|16\.4\.75)|40\.102\.242)|2\.(?:1(?:93\.140\.168|69\.93\.145)|224\.188\.122)|(?:6\.188\.143\.20|1\.66\.233\.12|0\.65\.16\.7)1|3\.1(?:42\.111\.228|74\.198\.33)|4\.(?:15\.191\.254|51\.44\.66)|7\.106\.251\.156|5\.25\.135\.200|9\.218\.52\.234)|9(?:7\.(?:103\.239\.148|89\.116\.202|93\.177\.5|77\.35\.3)|8\.22(?:3\.1(?:86\.3|3\.4)4|7\.88\.133|0\.0\.192)|3\.(?:91\.196\.(?:132|99)|190\.104\.7)|4\.(?:102\.209\.9|79\.4\.)4|5\.154\.240\.98|6\.226\.4\.60)|4(?:1\.137\.(?:(?:24|30|56)\.4|63\.20[123])|6\.1(?:07\.227\.244|7\.121\.1))|5(?:8\.(?:150\.55\.59|20\.40\.166)|0\.23\.193\.10[4678]))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work