You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/07/07 08:57:13 UTC
svn commit: r1500378 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Sun Jul 7 06:57:13 2013
New Revision: 1500378
URL: http://svn.apache.org/r1500378
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1500378&r1=1500377&r2=1500378&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Sun Jul 7 06:57:13 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 20130762
+## khop-sc-neighbors.cf v 20130772
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -101,7 +101,7 @@ score KHOP_SC_TOP_CIDR16 0.6 0.2 0.7 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:4\.45\.[17]3|2\.90\.90)|74\.36\.16[04]|92\.198\.102|21\.156\.57|03\.9\.158)|2(?:13\.230\.128|4\.127\.201))\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:0(?:1\.101\.152|3\.9\.158)|(?:84\.82\.12|12\.90\.9)0|92\.198\.102|21\.156\.57|74\.36\.164)|2(?:1(?:3\.230\.128|0\.21\.240)|4\.127\.201))\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.6 0 0.6 0
@@ -122,7 +122,7 @@ score KHOP_SC_CIDR24 0.6 0 0.6 0
# 0.4428/0 1.000 20130705@376k resume scores -> .6 0 .6 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:7(?:3\.192\.14[147]|4\.3[67]\.167|7\.1\.223)|1(?:6\.58\.163|2\.97\.24)|20\.84\.13)|37\.122\.208|46\.32\.234|50\.97\.3)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:7(?:4\.3(?:6\.16[07]|7\.167)|3\.192\.14[147])|12\.97\.24|20\.84\.13)|37\.122\.208|46\.32\.234|50\.97\.3)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0.5
@@ -142,7 +142,7 @@ score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:21(?:6\.(?:1(?:81\.11|05\.9)0|45\.114)|7\.2(?:28\.234|35\.138))|1(?:6(?:1\.232\.157|4\.62\.8)|04\.189\.110)|97\.24\.(?:192|245)|78\.6\.131)|8\.(?:16(?:6\.2(?:4(?:2\.232|9\.158|8\.64)|3(?:9\.228|4\.24)|09\.127)|0\.164\.(?:110|22))|69\.(?:35\.147|55\.193)|46\.127\.36)|4\.(?:45\.(?:2(?:45\.161|7\.13)|(?:12\.15|4\.3)4|31\.129)|2(?:07\.113\.55|7\.43\.194))|9\.(?:19(?:3\.80\.215|2\.252\.1)|201\.16\.211|69\.10\.3)|5\.(?:88\.(?:119\.132|247\.131)|249\.63\.164)|0\.(?:45\.1(?:36\.181|40\.89)|165\.125\.152)|1\.(?:255\.121\.234|13\.47\.157)|3\.1(?:30\.70\.113|62\.97\.50))|8(?:3\.(?:98\.23(?:5\.12|\.158)|101\.38\.202|81\.152\.228)|4\.(?:22\.1(?:77\.50|0\.51)|82\.120\.235)|8\.(?:127\.230\.28|252\.0\.237)|9\.(?:54\.136\.101|39\.35\.168)|0\.211\.162\.254|1\.37\.143\.125|6\.84\.207\.201|7\.4\.80\.188)|9(?:9\.(?:30\.137\.13[89]|255\.11\.29)|2\.1(?:87\.102\.221|98\.102\.53)|8\.2(?:0\.168\.1[67]3|4\.177\.2)|5\.(?:138\.195\.125|29\.81\.30)|
4\.(?:213\.122\.34|106\.16\.6)|0\.82\.89\.156)|2(?:1\.(?:1(?:5(?:9\.11\.164|6\.57\.10|7\.3\.252)|34\.238\.129|81\.251\.188)|78\.180\.19)|3\.(?:1(?:10\.175\.202|42\.218\.89)|201\.60\.83)|2\.(?:49\.119\.18|166\.83\.7)8)|7(?:4\.3(?:6\.16(?:0\.157|4\.184|7\.116)|7\.167\.1(?:11|22))|3\.(?:192\.14(?:4\.105|7\.114|1\.99)|200\.90\.196)|7\.1\.223\.(?:10|7)3|8\.163\.105\.52)|0(?:3\.9\.15(?:8\.1(?:10|47)|7\.181|6\.89)|1\.101\.152\.4[567])|\.2(?:34\.38\.106|26\.84\.27)|33\.242\.115\.39|46\.255\.66\.191|55\.230\.168\.60)|2(?:1(?:1\.(?:1(?:7(?:2\.251\.168|4\.120\.123|6\.61\.112)|47\.211\.16)|232\.(?:59\.144|154\.6)|33\.121\.231)|3\.(?:(?:132\.241\.|81\.164\.5)7|230\.128\.226)|0\.(?:2(?:17\.122\.58|45\.89\.69)|109\.97\.63)|8\.(?:1(?:45\.135\.137|58\.3\.1)|234\.108\.13)|9\.(?:144\.245\.59|255\.77\.42|90\.118\.30)|2\.(?:48\.6(?:6\.134|7\.72)|6\.152\.211)|6\.241\.47\.254|7\.198\.3\.238)|0(?:0\.(?:14(?:8\.125\.247|2\.133\.21)|3(?:3\.143\.45|5\.151\.24)|7(?:2\.11\.132|9\.27\.60))|2\.(?:1(?:(?:29\.216\.
6|58\.39\.25)0|42\.203\.19)|71\.136\.200|53\.13\.187)|8\.(?:113\.254\.39|71\.172\.93|82\.114\.55)|4\.174\.223\.204|1\.45\.114\.3|3\.69\.52\.61)|2(?:2\.(?:23(?:1\.57\.10|6\.16\.1)4|117\.219\.97)|0\.(?:136\.168\.13|94\.235\.20)0)|4\.127\.201\.172)|9(?:5\.(?:7(?:1\.126\.175|7\.109\.67)|86\.(?:58\.254|4\.79)|48\.24\.10)|3\.1(?:5(?:7\.148\.102|9\.191\.246)|88\.8\.67)|(?:0\.83\.184\.21|6\.254\.22\.5)1|2\.253\.123\.95|1\.214\.83\.2)|6(?:1\.(?:98\.(?:131\.141|77\.169)|105\.174\.[46]|38\.186\.117|42\.104\.99|57\.65\.125)|6\.(?:203\.32\.54|84\.49\.9)|9\.163\.166\.32|5\.60\.15\.184|7\.90\.21\.150|8\.115\.192\.7)|7(?:(?:(?:7\.106\.232\.1|8\.29\.4\.)7|9\.188\.87\.1)8|4\.(?:216\.223\.82|9\.203\.186)|6\.74\.186\.237|2\.35\.20\.131)|8(?:(?:3\.238\.208\.5|8\.45\.238\.20|1\.23\.106\.7)5|7\.(?:126\.71\.178|97\.218\.183)|6\.64\.171\.198|4\.95\.244\.11)|3(?:7\.(?:206\.210\.130|122\.208\.31)|1\.210\.47\.230)|4(?:6\.32\.23(?:3\.226|4\.33)|1\.137\.24\.4)|5(?:9\.15\.76\.97|0\.97\.3\.89))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:21(?:6\.(?:(?:105\.9|30\.5)0|45\.114|55\.162)|7\.235\.138)|1(?:6(?:1\.232\.157|7\.170\.33|4\.62\.8)|04\.189\.110)|97\.24\.(?:192|245)|78\.6\.131)|8\.(?:16(?:6\.2(?:4(?:2\.232|9\.158|8\.64)|50\.116|34\.24)|0\.164\.(?:110|22))|69\.(?:35\.147|55\.193)|46\.127\.36)|4\.(?:45\.(?:2(?:45\.161|7\.13)|(?:73\.1|9\.8)8|82\.27)|2(?:07\.113\.55|7\.43\.194))|9\.(?:19(?:4\.153\.187|3\.80\.215|2\.252\.1)|201\.16\.211|69\.10\.3)|5\.(?:88\.(?:119\.132|247\.131)|249\.63\.164)|0\.(?:45\.1(?:36\.181|40\.89)|165\.125\.152)|1\.(?:242\.181\.68|13\.47\.157)|3\.130\.70\.113)|8(?:3\.(?:98\.23(?:5\.12|\.158)|81\.152\.228)|8\.(?:127\.230\.28|252\.0\.237)|9\.(?:54\.136\.101|39\.35\.168)|4\.(?:82\.120\.235|22\.10\.51)|0\.211\.162\.254|1\.37\.143\.125|6\.84\.207\.201|7\.4\.80\.188)|9(?:9\.(?:30\.137\.13[89]|255\.11\.29)|8\.(?:20\.168\.1[67]3|74\.122\.9)|2\.1(?:87\.102\.221|98\.102\.53)|5\.(?:138\.195\.125|29\.81\.30)|0\.(?:221\.69\.61|82\.89\.156)|4\.
(?:213\.122\.34|106\.16\.6))|2(?:1\.(?:1(?:5(?:9\.11\.164|6\.57\.10|7\.3\.252)|34\.238\.129|81\.251\.188)|22\.127\.17|78\.180\.19)|3\.(?:1(?:10\.175\.202|42\.218\.89)|201\.60\.83)|2\.(?:163\.78\.212|49\.119\.188))|7(?:4\.3(?:6\.1(?:6(?:0\.157|4\.184|7\.116)|37\.170)|7\.167\.1(?:11|22))|3\.(?:192\.14(?:4\.105|7\.114|1\.99)|200\.90\.196)|7\.1\.223\.(?:10|7)3|8\.163\.105\.52)|0(?:3\.9\.15(?:8\.1(?:10|47)|7\.181)|9\.242\.114\.136)|\.2(?:26\.84\.(?:175|27)|15\.206\.242|34\.38\.106)|33\.242\.115\.39|46\.255\.66\.191|55\.230\.168\.60)|2(?:1(?:1\.(?:1(?:7(?:2\.2(?:51\.168|42\.74)|4\.120\.123|6\.61\.112)|47\.211\.16)|(?:33\.121\.23|44\.103\.1)1|232\.59\.144|74\.56\.125)|3\.(?:1(?:86\.113\.66|32\.241\.7)|230\.128\.226|81\.164\.57)|9\.(?:144\.245\.59|255\.77\.42|90\.118\.30)|2\.(?:48\.6(?:6\.134|7\.72)|6\.152\.211)|0\.(?:109\.97\.63|245\.89\.69)|8\.(?:234\.108\.13|158\.3\.1)|7\.198\.3\.238)|0(?:2\.(?:1(?:(?:29\.216\.6|58\.39\.25)0|42\.203\.19)|71\.136\.200|53\.13\.187)|0\.(?:14(?:8\.125\.247|2
\.133\.21)|3(?:3\.143\.45|5\.151\.24)|72\.11\.132)|1\.(?:22\.7\.225|45\.114\.3)|4\.174\.223\.204|6\.217\.105\.67|8\.113\.254\.39|3\.69\.52\.61)|2(?:2\.1(?:17\.219\.97|00\.14\.3)|0\.94\.235\.200)|4\.127\.201\.172)|9(?:5\.(?:7(?:1\.126\.175|7\.109\.67)|86\.(?:58\.254|4\.79)|48\.24\.10)|3\.1(?:5(?:7\.148\.102|9\.191\.246)|88\.8\.67)|0\.(?:83\.184\.211|168\.9\.243)|1\.2(?:27\.0\.198|14\.83\.2)|2\.253\.123\.95)|8(?:(?:3\.238\.208\.5|8\.45\.238\.20|1\.23\.106\.7)5|6\.(?:111\.144\.194|64\.171\.198)|2\.(?:207\.51\.92|84\.71\.30)|9\.1(?:00\.67\.60|20\.7\.136)|7\.126\.71\.178|4\.95\.244\.11)|6(?:1\.(?:(?:42\.104\.9|98\.77\.16)9|105\.174\.[46]|38\.186\.117)|6\.(?:203\.32\.54|84\.49\.9)|9\.163\.166\.32|5\.60\.15\.184|7\.90\.21\.150|8\.115\.192\.7)|7(?:(?:(?:7\.106\.232\.1|8\.29\.4\.)7|9\.188\.87\.1)8|4\.(?:216\.223\.82|9\.203\.186)|6\.74\.186\.237|2\.35\.20\.131)|3(?:7\.(?:206\.210\.130|122\.208\.31)|1\.210\.47\.230)|4(?:9\.212\.197\.39|6\.32\.234\.33|1\.137\.24\.4)|5(?:9\.15\.76\.97|0\.97\.3\.
89))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work