You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/06/12 08:57:20 UTC
svn commit: r1492082 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Wed Jun 12 06:57:19 2013
New Revision: 1492082
URL: http://svn.apache.org/r1492082
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1492082&r1=1492081&r2=1492082&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Wed Jun 12 06:57:19 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201306112
+## khop-sc-neighbors.cf v 201306122
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.(?:128\.2|28\.8)|1\.54\.54)|80\.211\.179|92\.119\.66|12\.90\.90|58\.255\.2)|2(?:22\.174\.15|10\.21\.22)5|8(?:2\.207\.51|3\.111\.92))\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:0(?:1\.101\.152|3\.9\.158)|21\.54\.54|58\.255\.2)|2(?:1(?:3\.132\.241|7\.200\.184)|4\.127\.201)|6(?:6\.199\.227|5\.60\.15)|5\.(?:159\.229|39\.220))\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:(?:78\.20\.14|03\.9\.15)8|2(?:5\.60\.156|0\.84\.13)|16\.112\.66|51\.84\.131)|2(?:1(?:1\.140\.125|3\.132\.241|7\.198\.3)|08\.(?:71\.172|82\.114))|37\.122\.209|66\.199\.224)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.(?:128\.2|84\.13)|5\.60\.156)|51\.84\.131|83\.221\.12|92\.119\.66|03\.9\.158|12\.90\.90)|2(?:08\.(?:71\.172|82\.114)|10\.21\.225)|37\.122\.20[89]|66\.199\.224)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:2(?:1(?:6\.(?:55\.162|30\.50)|7\.161\.3)|20\.224\.59)|1(?:6(?:8\.218\.86|4\.62\.8)|86\.46\.107)|90\.90\.(?:4[15679]|51))|9\.1(?:9(?:2\.252\.1|3\.93\.25)|84\.214\.18)|3\.(?:162\.97\.184|0\.85\.249|31\.42\.30)|(?:0\.165\.125\.15|1\.68\.104\.13)2|6\.1(?:24\.128\.138|12\.66\.102)|8\.(?:129\.166\.86|97\.196\.163)|5\.(?:88\.247\.131|90\.96\.85)|7\.2(?:11\.91\.147|0\.3\.231)|4\.39\.67\.75)|7(?:8\.(?:2(?:11\.46\.18[49]|0\.148\.11)|1(?:48\.210\.173|51\.86\.1))|3\.(?:212\.222\.69|44\.244\.20)|7\.1\.223\.103)|8(?:8\.(?:1(?:27\.230\.28|68\.46\.53)|252\.0\.237)|4\.(?:146\.107\.68|82\.154\.51)|0\.211\.179\.30|7\.120\.127\.27)|9(?:5\.(?:1(?:38\.195\.125|91\.184\.82)|29\.81\.30)|(?:0\.82\.89\.15|4\.106\.16\.)6|9\.255\.11\.29|3\.193\.68\.2)|2(?:1\.(?:181\.2(?:37\.251|51\.188)|22\.127\.17)|0\.(?:28\.8\.194|50\.86\.3)|3\.110\.175\.202|4\.124\.236\.90)|5(?:8\.255\.2\.6[46]|1\.84\.131\.107)|03\.9\.15(?:7\.181|8\.165|6\.89)|33\.242\.
115\.44|4\.33\.121\.67|\.226\.84\.175)|2(?:1(?:1\.(?:1(?:4(?:0\.125\.197|7\.211\.16)|11\.250\.177|72\.242\.74)|222\.53\.83|54\.17\.200)|3\.(?:2(?:30\.128\.226|51\.186\.229)|1(?:71\.39\.154|32\.241\.7)|0\.89\.6)|0\.(?:5(?:1\.44\.199|6\.23\.100)|13\.210\.82|245\.89\.69)|7\.(?:2(?:00\.184\.87|19\.123\.59)|198\.3\.238)|2\.(?:251\.120\.212|6\.152\.211)|9\.(?:80\.238\.185|139\.38\.49)|8\.(?:106\.182\.6|56\.161\.14))|0(?:8\.(?:82\.114\.(?:4[45679]|5[13579]|2[35])|71\.172\.(?:8[456789]|9[1234])|113\.254\.39)|2\.(?:1(?:42\.203\.19|58\.39\.250)|29\.238\.196|71\.136\.200)|0\.(?:14(?:8\.125\.247|2\.133\.21)|72\.11\.132|94\.77\.1)|4\.(?:188\.246\.28|68\.120\.213)|1\.(?:217\.154\.74|45\.114\.3)|3\.93\.108\.142|9\.190\.73\.158)|2(?:1\.(?:2(?:07\.220\.140|14\.208\.226|31\.135\.149)|1(?:94\.128\.223|32\.35\.7))|2\.(?:253\.182\.13|174\.155\.1)9)|4\.127\.201\.172)|8(?:3\.(?:111\.92\.120|238\.208\.55|3\.103\.227)|4\.(?:235\.57\.122|54\.161\.225)|7\.(?:236\.232\.231|97\.215\.67)|2\.2(?:21\.102\.
245|07\.51\.92)|1\.(?:15\.172\.14|23\.106\.7)5|6\.64\.171\.198|9\.32\.226\.102|8\.198\.1\.177)|6(?:1\.(?:1(?:05\.174\.[46]|33\.125\.162|64\.42\.158)|252\.138\.195|70\.83\.58|32\.38\.3)|6\.199\.22(?:4\.(?:[457]|2[689]?|30?)|7\.19[578])|4\.(?:120\.225\.158|71\.130\.190)|5\.60\.15\.18[46]|0\.29\.75\.142|8\.115\.192\.7)|9(?:1\.21(?:1\.127\.125|2\.124\.153)|2\.(?:253\.123\.95|51\.109\.182)|5\.(?:215\.63\.119|48\.24\.10)|4\.159\.239\.77|6\.9\.138\.233)|5(?:8\.(?:2(?:13\.157\.68|40\.65\.66)|151\.149\.118)|\.(?:39\.220\.24[08]|159\.229\.246|245\.95\.203)|9\.60\.7\.146)|7(?:7\.106\.232\.178|6\.74\.186\.237|2\.35\.20\.131|4\.9\.203\.186)|37\.(?:(?:206\.210\.13|46\.224\.25)0|122\.209\.74)|41\.137\.24\.4)\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:2(?:1(?:6\.(?:55\.162|30\.50)|7\.161\.3)|20\.224\.59)|1(?:86\.46\.107|64\.62\.8)|90\.90\.4[159])|9\.1(?:9(?:2\.252\.1|3\.93\.25)|84\.214\.18)|3\.(?:162\.97\.184|0\.85\.249|31\.42\.30)|6\.1(?:24\.128\.138|12\.66\.102)|8\.(?:129\.166\.86|97\.196\.163)|5\.(?:88\.247\.131|90\.96\.85)|4\.(?:24\.218\.11|39\.67\.7)5|7\.2(?:11\.91\.147|0\.3\.231)|1\.68\.104\.132)|9(?:5\.(?:1(?:38\.195\.125|91\.184\.82)|29\.81\.30)|(?:0\.82\.89\.15|4\.106\.16\.)6|2\.163\.193\.205|3\.194\.92\.242|8\.84\.69\.217|9\.255\.11\.29)|2(?:1\.(?:181\.2(?:37\.251|51\.188)|22\.127\.17)|0\.(?:28\.8\.194|50\.86\.3)|2\.165\.225\.177|3\.110\.175\.202|4\.124\.236\.90)|8(?:8\.(?:1(?:27\.230\.28|68\.46\.53)|252\.0\.237)|4\.(?:146\.107\.68|82\.154\.51)|0\.211\.179\.30|7\.120\.127\.27)|7(?:8\.(?:2(?:11\.46\.18[49]|0\.148\.11)|151\.86\.1)|7\.(?:80\.102\.214|1\.223\.103)|3\.212\.222\.69)|5(?:1\.84\.131\.107|8\.255\.2\.66)|03\.9\.15(?:7\.181|8\.165|6\.89)|33\.2
42\.115\.44|4\.33\.121\.67)|2(?:1(?:1\.(?:1(?:4(?:0\.125\.197|7\.211\.16)|1(?:1\.250\.177|5\.68\.32)|91\.168\.166|72\.242\.74)|54\.17\.20[01]|222\.53\.83)|3\.(?:2(?:30\.128\.226|51\.186\.229)|1(?:71\.39\.154|32\.241\.7)|0\.89\.6)|0\.(?:2(?:10\.123\.47|45\.89\.69)|5(?:1\.44\.199|6\.23\.100)|13\.210\.82)|7\.(?:2(?:00\.184\.87|19\.123\.59)|198\.3\.238)|8\.(?:1(?:45\.135\.137|06\.182\.6)|56\.161\.14)|9\.(?:80\.238\.185|139\.38\.49)|2\.6\.152\.211)|0(?:8\.(?:82\.114\.(?:4[45679]|5[13579]|2[35])|71\.172\.(?:8[456789]|9[1234])|113\.254\.39)|2\.(?:1(?:42\.203\.19|58\.39\.250)|29\.238\.196|71\.136\.200)|0\.(?:14(?:8\.125\.247|2\.133\.21)|72\.11\.132|94\.77\.1)|4\.(?:188\.246\.28|68\.120\.213)|1\.(?:217\.154\.74|45\.114\.3)|3\.93\.108\.142|6\.217\.105\.67|9\.190\.73\.158)|2(?:1\.(?:2(?:07\.220\.140|14\.208\.226|31\.135\.149)|1(?:94\.128\.223|32\.35\.7))|0\.(?:94\.235\.200|178\.97\.2)|2\.174\.155\.19)|4\.127\.201\.172)|6(?:1\.(?:1(?:33\.125\.162|64\.42\.158)|252\.138\.195|70\.83\.58|32
\.38\.3)|6\.199\.22(?:4\.(?:[4579]|29?|30?|11)|7\.19[578])|0\.2(?:51\.11\.26|9\.75\.142)|5\.60\.15\.18[46]|4\.71\.130\.190|8\.115\.192\.7)|8(?:2\.(?:2(?:21\.102\.245|07\.51\.92)|192\.90\.235)|3\.(?:111\.92\.120|238\.208\.55|3\.103\.227)|(?:4\.235\.57\.12|9\.32\.226\.10)2|7\.(?:236\.232\.231|97\.215\.67)|1\.15\.172\.145|8\.198\.1\.177)|5(?:\.(?:39\.220\.24[08]|159\.229\.246|245\.95\.203|79\.81\.2)|8\.(?:2(?:13\.157\.68|40\.65\.66)|151\.149\.118)|9\.60\.7\.146)|9(?:1\.21(?:1\.127\.125|2\.124\.153)|2\.(?:253\.123\.95|51\.109\.182)|5\.(?:215\.63\.119|48\.24\.10)|6\.9\.138\.233)|7(?:2\.(?:35\.20\.131|42\.224\.25|55\.188\.73)|7\.106\.232\.178|6\.74\.186\.237|4\.9\.203\.186)|37\.(?:(?:206\.210\.13|46\.224\.25)0|122\.209\.74)|41\.137\.24\.4)\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work