You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2014/02/27 08:57:40 UTC
svn commit: r1572461 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Thu Feb 27 07:57:39 2014
New Revision: 1572461
URL: http://svn.apache.org/r1572461
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1572461&r1=1572460&r2=1572461&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Thu Feb 27 07:57:39 2014
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201402262
+## khop-sc-neighbors.cf v 201402272
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -101,7 +101,7 @@ score KHOP_SC_TOP_CIDR16 0.6 0.2 0.7 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:84\.(?:82\.17[19]|22\.197)|98\.143\.128|03\.25\.146)|(?:67\.210\.24|85\.17\.2)7|2(?:12\.48\.79|3\.94\.15)|79\.135\.46)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:(?:98\.143\.12|41\.105\.6)8|84\.(?:82\.17[19]|22\.197)|03\.25\.146)|67\.210\.247|87\.226\.224|212\.48\.79|79\.135\.46)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.6 0 0.6 0
@@ -122,7 +122,7 @@ score KHOP_SC_CIDR24 0.6 0 0.6 0
# 0.4428/0 1.000 20130705@376k resume scores -> .6 0 .6 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.(?:143\.[57]|84\.13)|5\.60\.156)|8(?:1\.66\.15[67]|3\.182\.39|4\.22\.53)|9(?:0\.234\.10[56]|8\.143\.150)|0(?:3\.25\.146|1\.9\.205)|41\.105\.68)|(?:9(?:1\.218\.24|4\.20\.22)|217\.76\.7)4|46\.1(?:0(?:2\.187|7\.24)|82\.92)|31\.192\.111|67\.205\.67)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.(?:143\.[57]|84\.13)|5\.60\.156)|9(?:0\.234\.10[56]|8\.143\.150)|8(?:1\.66\.15[67]|4\.22\.53)|0(?:3\.25\.146|1\.9\.205))|(?:9(?:1\.218\.24|4\.20\.22)|217\.76\.7)4|46\.1(?:0(?:2\.187|7\.24)|82\.92)|(?:67\.205\.6|85\.17\.2)7|31\.192\.111)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0.5
@@ -142,7 +142,7 @@ score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:8(?:4\.(?:82\.1(?:7(?:1\.234|9\.117)|32\.203|23\.85)|22\.(?:53\.(?:190?|201)|197\.216)|154\.143\.69)|5\.(?:10\.203\.12[345]|25\.150\.212)|2\.1(?:62\.73\.193|72\.22\.59)|0\.184\.30\.226)|1(?:2\.(?:16(?:4\.175\.22|8\.218\.86)|90\.239\.211|216\.20\.50)|9\.(?:201\.16\.211|73\.234\.242)|3\.130\.65\.161|8\.41\.157\.3)|2(?:1\.(?:1(?:34\.238\.129|59\.11\.164)|78\.1(?:16\.243|26\.228)|88\.54\.17)|4\.(?:111\.189\.130|54\.230\.123)|2\.49\.119\.188)|9(?:8\.143\.1(?:50\.2(?:4[789]|5[012]|39)|28\.1(?:39|44))|2\.227\.235\.155|5\.112\.144\.10)|0(?:6\.243\.239\.34|1\.9\.205\.130|7\.150\.55\.35)|4(?:1\.105\.68\.2(?:5[02]|48)|9\.210\.138\.143)|7(?:3\.212\.205\.158|7\.80\.104\.52)|62\.(?:220\.57\.202|105\.18\.60)|\.2(?:09\.242\.218|26\.84\.175))|2(?:1(?:1\.(?:1(?:15\.71\.(?:18|35)|69\.224\.17|72\.246\.78)|2(?:3(?:2\.183\.58|3\.71\.76)|20\.194\.144))|0\.(?:21(?:7\.150\.19|9\.203\.22)6|183\.179\.(?:3[89]|45))|2\.(?:48\.79\.12[37]|87\.28\.201)|3\.135\.
113\.197|6\.231\.136\.106|7\.169\.178\.174|9\.140\.69\.122|8\.38\.29\.68)|0(?:2\.(?:1(?:09\.114\.192|97\.68\.201)|2(?:07\.1\.234|34\.40\.41))|3\.(?:160\.60\.139|239\.125\.32))|2(?:1\.(?:1(?:65\.38\.226|78\.236\.19)|214\.208\.226)|2\.106\.216\.100|0\.67\.90\.31)|7\.(?:117\.113\.20|255\.70\.61)|3\.94\.15\.143)|6(?:7\.(?:2(?:10\.2(?:24\.(?:196|214)|47\.(?:20|8))|(?:22\.132\.18|05\.67\.)7)|159\.53\.61)|1\.(?:3(?:8\.186\.(?:117|210)|5\.92\.92)|43\.97\.132)|6\.35\.75\.(?:1[39]|27|32)|4\.71\.187\.22[23])|9(?:1\.218\.244\.(?:2(?:1[01235678]|2[234568]|0[2349]|4[019]|3[34])|1(?:9[123467]|36))|5\.211\.135\.83)|8(?:5\.17\.27\.(?:1(?:2[123]|00)|98)|9\.207\.128\.162|4\.203\.244\.50|7\.226\.224\.34|8\.198\.199\.35)|3(?:1\.(?:192\.111\.(?:7[012456789]|8[012345789]|100|9\d|68)|220\.43\.158)|6\.250\.229\.3[2345])|5(?:8\.(?:1(?:51\.(?:171\.114|38\.107)|26\.157\.18)|225\.62\.145)|\.133\.177\.122)|4(?:6\.1(?:0(?:2\.187\.2(?:[5678]|2[89])|7\.24\.210)|82\.92\.133)|1\.137\.24\.4)|7(?:(?:(?:7\.106\.232\.1|8
\.29\.4\.)7|4\.204\.163\.14)8|9\.135\.46\.174))\b)/
+header KHOP_SC_TOP200 Received =~ /___ FAILED TO POPULATE ___/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work