You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2014/03/21 07:57:41 UTC

svn commit: r1579891 - /spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf

Author: khopesh
Date: Fri Mar 21 06:57:41 2014
New Revision: 1579891

URL: http://svn.apache.org/r1579891
Log:
auto-generated rules

Modified:
    spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf

Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1579891&r1=1579890&r2=1579891&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Fri Mar 21 06:57:41 2014
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf	v 201403202
+## khop-sc-neighbors.cf	v 201403212
 ## Khopesh's syndication of SpamCop's top offenders and top offending networks.
 ## 
 ## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -101,7 +101,7 @@ score	 KHOP_SC_TOP_CIDR16  0.6 0.2 0.7 0
 
 
 # http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header	 KHOP_SC_CIDR24  Received =~ /(?-xism:\b(?:1(?:8(?:4\.(?:22\.197|82\.171)|0\.222\.124)|73\.212\.205|01\.14\.253|17\.19\.217|99\.21\.149)|5(?:8\.25(?:4\.1(?:68|72)|1\.146)|\.172\.248)|213\.233\.64|93\.190\.140)\.[012]?\d{1,2}\b)/
+header	 KHOP_SC_CIDR24  Received =~ /(?-xism:\b(?:1(?:8(?:4\.82\.17[19]|0\.222\.124)|73\.212\.205|95\.216\.196)|5(?:8\.25(?:4\.1(?:68|72)|1\.146)|\.172\.248)|46\.(?:182\.93|51\.36)|213\.233\.64|31\.3\.227)\.[012]?\d{1,2}\b)/
 describe KHOP_SC_CIDR24  Relay CIDR /24 is among worst in SpamCop
 tflags	 KHOP_SC_CIDR24  nopublish
 score	 KHOP_SC_CIDR24  0.6 0 0.6 0
@@ -122,7 +122,7 @@ score	 KHOP_SC_CIDR24  0.6 0 0.6 0
 # 0.4428/0      1.000 20130705@376k  resume scores -> .6 0 .6 0
 
 
-header	 KHOP_SC_TOP_CIDR24  Received =~ /(?-xism:\b(?:1(?:8(?:0\.2(?:22\.12[13]|04\.193)|4\.(?:82\.179|22\.53)|3\.182\.39)|2(?:2\.13\.132|5\.60\.156|0\.84\.13)|9(?:8\.143\.1(?:28|50)|5\.216\.196)|0(?:3\.25\.14[56]|1\.9\.206))|21(?:2\.146\.101|0\.48\.249)|(?:94\.20\.22|5\.255\.7)4)\.[012]?\d{1,2}\b)/
+header	 KHOP_SC_TOP_CIDR24  Received =~ /(?-xism:\b(?:1(?:8(?:0\.2(?:22\.12[13]|04\.193)|3\.182\.39|4\.22\.53)|0(?:1\.(?:14\.253|9\.206)|3\.25\.14[56])|2(?:2\.13\.132|5\.60\.156|0\.84\.13)|9(?:8\.143\.1(?:28|50)|9\.21\.149))|21(?:2\.146\.101|0\.48\.249)|9(?:3\.190\.140|4\.20\.224))\.[012]?\d{1,2}\b)/
 describe KHOP_SC_TOP_CIDR24  Relay CIDR /24 leads SpamCop in worst /24s
 tflags	 KHOP_SC_TOP_CIDR24  nopublish
 score	 KHOP_SC_TOP_CIDR24  1.7 0.5 1.7 0.5
@@ -142,7 +142,7 @@ score	 KHOP_SC_TOP_CIDR24  1.7 0.5 1.7 0
 
 
 # http://www.spamcop.net/w3m?action=hoshame
-header	 KHOP_SC_TOP200  Received =~ /(?-xism:\b(?:1(?:9(?:8\.(?:143\.1(?:50\.2(?:4[789]|5[012]|39)|28\.1(?:39|44))|66\.140\.195)|2\.(?:2(?:27\.1(?:65\.176|44\.5)|10\.211\.57)|3\.5(?:2\.[45]|4\.115))|5\.2(?:16\.196\.1(?:1[1239]|2[012])|22\.45\.217)|9\.21\.149\.(?:4[268]|39|58)|1\.238\.50\.220)|8(?:4\.(?:82\.1(?:69\.1(?:1[59]|2[26])|7(?:1\.234|9\.117)|30\.237|23\.85)|22\.(?:53\.(?:190?|201)|197\.216|83\.154))|0\.(?:204\.193\.164|70\.94\.67)|9\.(?:112\.88\.65|54\.132\.56)|8\.64\.185\.5[456]|2\.172\.22\.5[79]|5\.25\.149\.156)|1(?:2\.(?:1(?:(?:48\.206\.19|85\.41\.10)5|63\.149\.29|75\.17\.116)|2(?:16\.[23]0\.5|20\.67\.13)0)|8\.(?:41\.(?:207\.5|157\.)7|129\.166\.86)|6\.1(?:12\.66\.102|93\.90\.26)|0\.45\.140\.89|7\.19\.217\.84)|2(?:1\.(?:1(?:(?:81\.252\.22|51\.122\.3)8|3(?:4\.238\.129|6\.57\.163))|78\.(?:1(?:1(?:6\.24|9\.19)3|26\.228)|88\.239))|4\.(?:198\.81\.125|54\.230\.123)|5\.141\.142\.224|8\.199\.227\.51)|7(?:3\.2(?:3(?:9\.56\.(?:[456]|1[23])|6\.57\.222)|12\.205\.158|25\.121\.14)|2\.24
 5\.(?:212\.24|44\.122|30\.76)|6\.227\.202\.201)|0(?:1\.(?:14\.253\.59|9\.206\.193)|6\.243\.239\.34|8\.178\.16\.50|9\.6\.150\.108)|(?:48\.223\.59\.14|62\.105\.68\.13)0)|2(?:1(?:1\.(?:1(?:15\.71\.(?:18|35)|69\.224\.17)|23(?:3\.64\.110|2\.154\.6)|53\.209\.117)|8\.(?:1(?:47\.191\.179|59\.9\.7)|234\.108\.13|38\.29\.68)|2\.1(?:46\.101\.154|79\.45\.179)|3\.(?:247\.47\.212|148\.5\.244)|9\.14(?:0\.69\.12|7\.172\.)2|7\.23\.11\.1(?:6[17]|59)|0\.183\.179\.(?:39|44)|6\.151\.154\.4[01345])|0(?:3\.2(?:3(?:9\.(?:125\.3|45\.20)2|8\.64\.250)|40\.225\.115|55\.175\.147)|2\.(?:2(?:07\.1\.234|34\.40\.41)|175\.83\.61|79\.52\.53)|6\.217\.132\.178|1\.83\.135\.100|8\.115\.199\.53)|2(?:1\.(?:2(?:14\.208\.226|04\.223\.38)|148\.35\.73)|2\.(?:117\.219\.97|99\.202\.239|236\.16\.14)|0\.160\.243\.20)|3\.94\.104\.163|7\.255\.70\.61)|9(?:3\.(?:190\.140\.(?:1(?:9[78]|43|64)|22[01])|77\.199\.11)|8\.1(?:58\.234\.2[347]|72\.132\.244)|5\.172\.18\.5[12]|1\.241\.187\.204)|7(?:4\.2(?:0(?:0\.72\.22|8\.99\.23)5|21\.2(?:20\.145
 |10\.70))|7\.1(?:06\.232\.178|23\.253\.50)|8\.29\.4\.78)|8(?:(?:8\.191\.155\.23|5\.17\.132\.11)0|6\.(?:64\.142\.28|98\.29\.251)|7\.204\.110\.176|0\.241\.95\.218)|5(?:8\.(?:151\.171\.114|246\.179\.82)|\.255\.74\.(?:3[19]|12|23|51)|9\.10\.248\.207)|6(?:1\.(?:106\.235\.180|38\.186\.117|93\.246\.49)|2\.212\.89\.11[59]|4\.191\.75\.45)|3(?:6\.250\.(?:22(?:9\.4[0123]|6\.[589])|86\.56)|1\.3\.227\.251|7\.48\.66\.18)|4(?:6\.51\.36\.(?:2[56]|31)|1\.137\.24\.4))\b)/
+header	 KHOP_SC_TOP200  Received =~ /(?-xism:\b(?:1(?:8(?:4\.(?:82\.1(?:69\.1(?:1[59]|2[26])|7(?:1\.234|9\.117)|30\.23[678]|23\.85|48\.29)|22\.(?:53\.(?:190?|201)|197\.216|83\.154))|0\.(?:204\.193\.164|70\.94\.67)|9\.(?:112\.88\.65|54\.132\.56)|8\.64\.185\.5[456]|5\.25\.149\.156|2\.172\.22\.57)|9(?:2\.(?:2(?:10\.21(?:1\.57|5\.24)|27\.144\.5)|3\.(?:5(?:2\.[45]|4\.115)|150\.155))|8\.(?:143\.1(?:50\.2(?:4[789]|5[012]|39)|28\.1(?:39|44))|66\.140\.195)|5\.2(?:16\.196\.1(?:1[12349]|2[012])|22\.45\.217)|9\.21\.149\.(?:4[268]|39|58))|2(?:1\.(?:1(?:(?:81\.252\.22|51\.122\.3)8|3(?:4\.238\.129|6\.57\.163))|78\.(?:1(?:1(?:6\.24|9\.19)3|26\.228)|88\.239))|4\.(?:1(?:98\.81\.125|60\.35\.2)|54\.230\.123)|5\.141\.142\.224|3\.64\.199\.237|8\.199\.227\.51)|1(?:2\.(?:1(?:(?:48\.206\.19|85\.41\.10)5|63\.149\.29|75\.17\.116)|2(?:20\.67\.13|16\.30\.5)0)|8\.(?:41\.(?:157\.[37]|207\.57)|129\.166\.86)|3\.130\.65\.161|0\.45\.140\.89|6\.193\.90\.26|7\.19\.217\.84)|7(?:3\.2(?:3(?:9\.56\.(?:[456]|1[23])|6\.57\.2
 22)|12\.205\.158|25\.121\.14)|2\.245\.(?:212\.24|44\.122)|6\.227\.202\.201)|0(?:1\.(?:14\.253\.59|9\.206\.193)|6\.243\.239\.34|8\.178\.16\.50|9\.6\.150\.108)|4(?:2\.4\.14\.12|\.220\.59\.6)|62\.(?:105\.68\.13|248\.5\.6)0)|2(?:1(?:1\.(?:1(?:15\.71\.(?:18|35)|69\.224\.17|72\.246\.78)|23(?:3\.64\.110|2\.154\.6)|53\.209\.117)|8\.(?:1(?:47\.191\.179|59\.9\.7)|234\.108\.13|38\.29\.68)|3\.(?:247\.47\.2(?:12|21)|148\.5\.244)|2\.1(?:46\.101\.154|79\.45\.179)|9\.14(?:0\.69\.12|7\.172\.)2|7\.23\.11\.1(?:6[17]|59)|0\.183\.179\.(?:39|44)|6\.151\.154\.4[345])|2(?:1\.(?:2(?:14\.2(?:08\.226|14\.187)|04\.223\.38)|1(?:58\.243\.251|48\.35\.73))|2\.(?:99\.202\.239|236\.16\.14)|3\.164\.255\.194|0\.160\.243\.20)|0(?:3\.2(?:3(?:8\.64\.250|9\.125\.32)|40\.225\.115|55\.175\.147)|2\.2(?:07\.1\.234|34\.40\.41)|6\.217\.132\.178|1\.83\.135\.100)|3\.94\.104\.163|7\.255\.70\.61)|9(?:3\.(?:190\.140\.(?:1(?:9[78]|43|64)|220)|7(?:6\.225\.73|7\.199\.11))|8\.1(?:58\.234\.2[347]|72\.132\.244)|5\.172\.18\.5[12]|1\.241\.1
 87\.204)|8(?:(?:8\.191\.155\.23|5\.17\.132\.11)0|(?:0\.241\.95\.21|6\.64\.142\.2)8|7\.204\.110\.176)|6(?:1\.(?:106\.235\.180|38\.186\.117)|4\.(?:191\.75\.45|6\.237\.34)|2\.212\.89\.115)|7(?:7\.1(?:06\.232\.178|23\.253\.50)|4\.2(?:21\.220\.14|08\.99\.23)5|8\.29\.4\.78)|5(?:9\.(?:10\.248\.207|4\.113\.116)|\.255\.74\.(?:3[19]|12|23)|8\.246\.179\.82)|3(?:6\.250\.(?:22(?:9\.4[0123]|6\.[589])|86\.56)|1\.3\.227\.2(?:02|51))|4(?:6\.(?:51\.36\.(?:2[56]|31)|182\.93\.112)|1\.137\.24\.4))\b)/
 describe KHOP_SC_TOP200  Relay listed in SpamCop top 200 spammer IPs
 tflags	 KHOP_SC_TOP200  nopublish
 score	 KHOP_SC_TOP200  4 0 4 0	# unnecessary if DNSBLs work