You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2011/02/16 07:57:27 UTC
svn commit: r1071160 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Wed Feb 16 06:57:26 2011
New Revision: 1071160
URL: http://svn.apache.org/viewvc?rev=1071160&view=rev
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1071160&r1=1071159&r2=1071160&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Wed Feb 16 06:57:26 2011
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201102151
+## khop-sc-neighbors.cf v 201102161
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -89,7 +89,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.5 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:(?:(?:3\.233|8\.248)\.6|0\.48\.15)4|7\.118\.81)|00\.98\.246)|1(?:9(?:8\.106\.26|5\.161\.9)|14\.112\.244|78\.49\.255|87\.45\.193)|7(?:7\.232\.14[23]|8\.159\.115)|8(?:1\.192\.238|5\.26\.225)|9(?:4\.102\.209|1\.203\.67)|62\.183\.85)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:(?:(?:3\.233|8\.248)\.6|0\.48\.15)4|7\.118\.81)|00\.98\.246)|1(?:13\.10\.164|78\.49\.255|87\.45\.193|95\.161\.9)|8(?:1\.192\.2(?:11|38)|5\.26\.225)|7(?:7\.232\.142|8\.159\.115)|9(?:4\.102\.209|1\.203\.67)|62\.183\.85)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 2.5 0.6 2.5 0.6
@@ -106,7 +106,7 @@ score KHOP_SC_CIDR24 2.5 0.6 2.5 0.6
# 0.2960/0 1.000 20100409
# 0.2905/0 1.000 20100410 net
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:8(?:5\.(?:26\.(?:1(?:6[45]|8[36])|2(?:3[2345]|41))|115\.248)|3\.149\.(?:3[68]?|4[156]|21)|1\.192\.(?:2(?:11|38)|199)|(?:0\.83\.23|2\.178\.6)9|8\.19(?:0\.12|1\.78))|2(?:1(?:3\.(?:87\.(?:1(?:28|36)|74)|226\.63)|7\.(?:118\.(?:83|90)|66\.146|8\.225))|0(?:8\.71\.172|9\.51\.150|3\.82\.95))|1(?:7(?:8\.162\.135|4\.36\.86)|13\.10\.16[34]|95\.91\.70)|9(?:5\.154\.240|8\.139\.91)|5(?:0\.23\.193|8\.64\.187)|6(?:0\.199\.201|1\.19\.66)|41\.(?:254\.[01]|95\.4))\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:8(?:5\.(?:26\.(?:1(?:6[45]|8[36])|2(?:3[2345]|41))|115\.248)|3\.149\.(?:3[68]?|4[156]|21)|1\.192\.(?:2(?:11|38)|199)|(?:0\.83\.23|2\.178\.6)9|8\.19(?:0\.12|1\.78))|2(?:1(?:3\.(?:87\.(?:1(?:28|36)|74)|226\.63)|7\.(?:118\.(?:83|90)|66\.146|8\.225))|0(?:8\.71\.172|9\.51\.150|3\.82\.95))|1(?:7(?:8\.162\.135|4\.36\.86)|13\.10\.163|95\.91\.70)|9(?:5\.154\.240|8\.139\.91)|5(?:0\.23\.193|8\.64\.187)|6(?:0\.199\.201|1\.19\.66)|41\.(?:254\.[01]|95\.4))\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.6 2.7 0.6
@@ -123,7 +123,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.6 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:2(?:0(?:0\.(?:9(?:5\.162\.206|8\.246\.205|4\.104\.10)|42\.99\.11|80\.13\.66)|9\.(?:2(?:12\.153\.2(?:18|22)|50\.231\.242)|51\.150\.1(?:8[679]|90))|2\.(?:28\.(?:66\.251|24\.99)|(?:64\.77|75\.36)\.93|152\.194\.128)|1\.(?:23(?:2\.85\.222|9\.179\.79)|144\.130\.21)|8\.(?:71\.172\.1(?:5[123]|4[56])|131\.186\.2)|4\.(?:1(?:88\.168\.1|11\.83\.5)1|8\.46\.130)|3\.212\.209\.246|7\.118\.195\.219|6\.188\.209\.18)|1(?:2\.(?:1(?:46\.157\.10|99\.29\.145)|85\.(?:101\.94|97\.169))|(?:8\.248\.44\.19|9\.255\.18\.3)6|7\.(?:9\.147\.115|26\.6\.96)|0\.48\.154\.253|3\.242\.205\.37|6\.176\.16\.202)|4\.(?:15(?:9\.3\.139|\.251\.28)|22\.179\.185)|22\.252\.223\.2)|1(?:9(?:5\.(?:1(?:6(?:1\.(?:40\.10|9\.2)|0\.253\.4)|55\.1\.55)|223\.221\.114)|0\.(?:1(?:99\.14\.222|2\.80\.150)|60\.88\.146)|8\.106\.26\.(?:37|45|54|72)|9\.239\.254\.77|4\.54\.160\.2)|7(?:3\.2(?:(?:10\.25\.14|3\.194\.19)6|24\.213\.138|46\.157\.119)|8\.(?:162\.135\.2(?:2[01234567]|19)|49\.255\.1(?:
04|25))|4\.36\.86\.1(?:1[34]|26))|2(?:1\.(?:161\.83\.153|52\.157\.238)|3\.(?:194\.221\.245|27\.79\.11)|2\.252\.2(?:46\.234|34\.75)|8\.121\.191\.240|4\.49\.246\.229|5\.20\.82\.196)|8(?:7\.45\.193\.174|9\.90\.255\.11|8\.128\.4\.30)|1(?:1\.224\.250\.13[24]|3\.160\.196\.110))|6(?:7\.(?:1(?:8(?:7\.(?:151\.225|215\.197)|4\.53\.243|6\.91\.40)|6(?:5\.140\.137|7\.53\.212)|97\.83\.211|5\.97\.82)|2(?:(?:37\.28\.10|11\.248\.)5|41\.137\.154|05\.199\.18)|58\.92\.55)|(?:8\.(?:4(?:1\.187\.1|4\.133\.3)|235\.232\.20|57\.251\.23)|0\.199\.201\.12)0|4\.(?:1(?:(?:07\.150\.13|48\.129\.14)0|19\.40\.138)|90\.72\.43)|9\.(?:1(?:99\.164\.222|81\.9\.71)|64\.(?:155\.181|43\.148))|6\.2(?:27\.197\.130|52\.219\.177)|2\.(?:212\.216\.249|168\.65\.18)|1\.(?:67\.246\.226|221\.67\.94))|7(?:1\.(?:2(?:06\.240\.131|39\.144\.233)|0\.146\.160|125\.12\.15|80\.23\.123)|6\.(?:1(?:99\.181\.193|6\.124\.157)|30\.194\.138|20\.16\.10)|8\.(?:159\.11(?:5\.236|8\.74)|225\.129\.13|40\.254\.1)|7\.(?:2(?:28\.214\.5|32\.83\.)2|69\.
137\.77)|2\.(?:164\.15\.50|46\.214\.28)|9\.96\.(?:48\.103|14\.31)|0\.135\.175\.249|4\.254\.146\.125|5\.130\.182\.18)|8(?:8\.(?:19(?:0\.12\.240|1\.78\.136)|255\.153\.106|40\.102\.242)|3\.1(?:7(?:3\.164\.10|4\.198\.33)|42\.111\.228)|2\.(?:193\.140\.168|224\.188\.122)|9\.(?:161\.144\.109|218\.52\.234)|(?:1\.66\.233\.12|0\.65\.16\.7)1|7\.1(?:06\.251\.156|26\.253\.24)|4\.(?:15\.191\.254|51\.44\.66)|(?:5\.25\.135|6\.36\.49)\.200)|9(?:8\.22(?:3\.1(?:86\.3|3\.4)4|7\.88\.133|0\.0\.192)|5\.(?:154\.240\.98|241\.78\.152|62\.161\.69)|7\.(?:103\.239\.148|93\.177\.5|77\.35\.3)|3\.(?:91\.196\.(?:132|99)|190\.104\.7)|1\.195\.(?:136\.14|230\.11)|4\.(?:102\.209\.9|79\.4\.)4|6\.226\.4\.60)|4(?:1\.137\.(?:(?:24|30|56)\.4|63\.20[123])|6\.1(?:07\.227\.244|7\.121\.1))|5(?:8\.(?:150\.55\.59|20\.40\.166)|0\.23\.193\.10[4678]))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:2(?:0(?:2\.(?:28\.(?:66\.251|24\.99)|(?:64\.77|75\.36)\.93|152\.194\.128)|0\.(?:9(?:5\.162\.206|8\.246\.205|4\.104\.10)|80\.13\.66)|9\.(?:51\.150\.1(?:8[679]|90)|212\.153\.2(?:18|22))|1\.(?:23(?:2\.85\.222|8\.219\.28)|144\.148\.82)|4\.(?:1(?:88\.168\.1|11\.83\.5)1|8\.46\.130)|8\.71\.172\.1(?:5[123]|4[56])|3\.212\.209\.246)|1(?:2\.(?:(?:199\.29\.14|62\.121\.9)5|85\.(?:101\.94|97\.169))|(?:(?:8\.248\.44\.1|7\.26\.6\.)9|9\.255\.18\.3)6|6\.(?:176\.16\.202|40\.148\.214)|0\.48\.154\.253|3\.242\.205\.37)|4\.(?:1(?:(?:32\.97\.1|5\.251\.2)8|14\.252\.233|92\.142\.26|71\.21\.75)|22\.179\.185|72\.182\.109|68\.9\.152)|22\.252\.223\.2)|6(?:7\.(?:1(?:8(?:7\.(?:151\.225|215\.197)|4\.53\.243)|6(?:5\.140\.137|7\.53\.212)|97\.83\.211|75\.33\.64|5\.97\.82)|2(?:41\.137\.154|05\.199\.18|37\.28\.105)|58\.92\.55)|(?:8\.(?:4(?:1\.187\.1|4\.133\.3)|5(?:7\.251\.23|1\.70\.2)|235\.232\.20)|0\.199\.201\.12)0|4\.(?:1(?:(?:07\.150\.13|48\.129\.14)0|19\.40\.
138)|90\.72\.43)|9\.(?:64\.(?:155\.181|43\.148)|181\.9\.71)|6\.(?:252\.219\.177|151\.30\.232)|1\.(?:67\.246\.226|221\.67\.94)|3\.246\.155\.(?:216|44)|2\.168\.65\.18|5\.40\.95\.123)|1(?:9(?:5\.(?:1(?:6(?:1\.(?:40\.10|9\.2)|0\.253\.4)|55\.1\.55)|223\.221\.114)|0\.(?:1(?:52\.149\.220|99\.14\.222)|60\.88\.146)|9\.239\.254\.77|4\.54\.160\.2)|7(?:3\.2(?:24\.213\.138|46\.157\.119|3\.194\.196)|8\.(?:162\.135\.2(?:2\d|19)|202\.158\.115)|4\.36\.86\.1(?:1[234]|2[16]))|2(?:1\.(?:161\.83\.153|52\.157\.238)|2\.252\.234\.75|4\.49\.246\.229|3\.27\.79\.11)|8(?:4\.1(?:54\.138\.10[19]|\.151\.12)|7\.45\.193\.174)|1(?:1\.224\.250\.134|3\.160\.196\.110)|60\.129\.53\.138)|7(?:6\.(?:1(?:(?:99\.181\.19|26\.40\.23)3|6\.124\.157)|2(?:0\.(?:93\.112|16\.10)|1\.187\.45)|30\.194\.138|6\.225\.119)|1\.(?:2(?:3(?:9\.144\.233|0\.45\.78)|06\.240\.131)|(?:125\.12\.1|3\.251\.4)5|80\.23\.123|58\.112\.4)|8\.(?:159\.11(?:5\.236|8\.74)|225\.129\.13|40\.254\.1)|0\.(?:135\.175\.249|57\.242\.42)|5\.(?:130\.182\.1|99\.2
45\.13)8|7\.(?:69\.137\.77|232\.83\.2)|9\.96\.(?:48\.103|14\.31)|4\.254\.146\.125)|8(?:8\.(?:19(?:0\.12\.240|1\.78\.136)|255\.153\.106|40\.102\.242)|2\.(?:1(?:93\.140\.168|69\.93\.145)|224\.188\.122)|(?:1\.66\.2(?:04\.14|33\.12)|0\.65\.16\.7)1|9\.(?:161\.144\.109|218\.52\.234)|4\.(?:15\.191\.254|51\.44\.66)|5\.(?:25\.135\.20|74\.16\.18)0|3\.142\.111\.228|7\.106\.251\.156)|9(?:7\.(?:103\.239\.148|89\.116\.202|93\.177\.5)|8\.22(?:3\.1(?:86\.3|3\.4)4|7\.88\.133)|3\.(?:91\.196\.(?:132|99)|190\.104\.7)|5\.(?:154\.240\.98|62\.161\.69)|6\.(?:49\.179\.10|226\.4\.6)0|1\.195\.(?:136\.14|230\.11)|4\.102\.209\.94|0\.218\.10\.99)|5(?:0\.23\.193\.(?:1(?:0[4678]|10)|99)|8\.(?:150\.55\.59|20\.40\.166))|4(?:1\.137\.(?:(?:24|30|56)\.4|63\.20[123])|6\.17\.121\.1))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work