You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/05/21 08:57:19 UTC
svn commit: r1484671 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Tue May 21 06:57:18 2013
New Revision: 1484671
URL: http://svn.apache.org/r1484671
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1484671&r1=1484670&r2=1484671&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Tue May 21 06:57:18 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201305202
+## khop-sc-neighbors.cf v 201305212
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:7\.102\.116|1\.67\.103|2\.90\.90)|(?:73\.45\.11|21\.54\.5)4|89\.58\.251|03\.30\.72)|2(?:00\.206\.14|10\.21\.225)|6(?:1\.175\.22|0\.8\.6)3|95\.159\.105)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:7\.102\.116|1\.67\.103)|8(?:4\.82\.154|9\.58\.251)|03\.30\.72|21\.54\.54)|2(?:10\.(?:21\.225|51\.44)|00\.206\.14)|6(?:1\.175\.22|0\.8\.6)3|95\.159\.105)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:2(?:0(?:2\.107\.224|0\.31\.105|3\.210\.83)|1(?:7\.12\.248|0\.51\.44)|\.139\.178)|1(?:78\.1(?:72\.1(?:5[24]|86)|51\.68)|(?:12\.97\.3|20\.84\.1)3|03\.9\.158)|(?:61\.77\.21|80\.36\.13)0|42\.121\.127)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:78\.1(?:72\.1(?:5[24]|86)|51\.68)|12\.9(?:0\.90|7\.33)|03\.9\.158|20\.84\.13)|2(?:0(?:2\.107\.224|0\.31\.105|3\.210\.83)|(?:17\.12\.24|\.139\.17)8)|(?:61\.77\.21|80\.36\.13)0|42\.121\.127)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:18(?:5\.80\.100|6\.46\.107)|90\.90\.1[6789]|217\.235\.138)|7\.(?:2(?:11\.91\.147|0\.3\.231)|102\.116\.253)|8\.(?:1(?:14\.77\.11|29\.166\.8)6|97\.196\.163)|4\.(?:141\.253\.13?4|207\.113\.55)|0\.(?:165\.125\.152|93\.215\.186)|1\.(?:67\.103\.180|93\.108\.194)|9\.1(?:61\.161\.188|93\.93\.25)|3\.(?:107\.43\.75|0\.85\.249)|5\.88\.(?:119\.132|247\.131))|9(?:5\.(?:1(?:38\.195\.125|91\.184\.82)|29\.81\.30)|9\.(?:180\.113\.1(?:0[19]|12)|255\.11\.29)|0\.(?:69\.155\.100|85\.132\.83)|8\.23\.141\.115)|8(?:4\.82\.(?:2(?:9\.3[34]|32\.167)|1(?:09\.14|54\.51))|8\.(?:127\.230\.28|252\.0\.237)|9\.(?:58\.251\.23|75\.63\.11)4|0\.225\.131\.176)|7(?:3\.(?:2(?:12\.250\.230|00\.90\.196)|45\.114\.(?:6[56789]|8[2456])|1(?:92\.144\.105|3\.9\.9))|4\.36\.167\.116|8\.151\.68\.210)|0(?:3\.9\.15(?:7\.181|8\.104|6\.89)|1\.101\.155\.[89]|6\.187\.35\.127|8\.174\.202\.78)|2(?:8\.204\.197\.5[04]|3\.30\.180\.172)|33\.242\.115\.44|\.34\.158\.128)|2(?:1
(?:0\.(?:2(?:1\.225\.2(?:3[1256789]|4[15789]|2[789]|5[123])|45\.89\.69)|5(?:1\.44\.199|6\.23\.100))|3\.(?:2(?:30\.128\.226|51\.186\.229)|1(?:71\.39\.154|86\.39\.43)|81\.164\.57)|1\.1(?:(?:76\.61\.11|15\.68\.3)2|47\.211\.16)|9\.(?:143\.207\.14|223\.252\.15)0|8\.(?:56\.37\.250|2\.129\.53)|7\.1(?:2\.248|98\.3)\.238|6\.153\.136\.125|2\.6\.152\.211)|0(?:8\.(?:8(?:2\.114\.(?:[46][02]|2[0246]|36|58)|4\.135\.110)|113\.254\.39|71\.172\.84)|0\.(?:7(?:2\.11\.132|9\.27\.60)|142\.133\.21|31\.105\.172|206\.14\.26)|2\.(?:1(?:(?:07\.224\.2|58\.39\.25)0|42\.203\.19)|44\.53\.64)|1\.(?:2(?:2\.7\.225|4\.129\.2)|45\.114\.3)|3\.(?:155\.102\.2|210\.83\.23)|4\.13\.169\.36)|2(?:0\.(?:225\.253\.12|94\.235\.200)|2\.2(?:11\.91\.20|36\.16\.14)|3\.(?:25\.242\.|4\.233\.1)62)|\.139\.178\.81)|6(?:1\.(?:1(?:(?:33\.125\.16|75\.223\.14)2|6(?:4\.42\.158|6\.55\.153)|91\.27\.118|05\.174\.4)|2(?:8\.114\.3[3456]|52\.138\.195)|77\.210\.75)|6\.(?:199\.22(?:7\.19[468]|4\.2)|55\.1(?:43\.11[68]|53\.61)|96\.213\.138|84\.
49\.9)|4\.120\.1(?:70\.138|81\.94)|0\.8\.63\.52)|5(?:\.(?:159\.229\.2(?:49|53)|39\.220\.22[579])|8\.254\.168\.(?:5[6789]|6[0123])|9\.(?:125\.182\.182|34\.57\.88))|8(?:(?:0\.36\.130\.13|1\.15\.172\.14|3\.238\.208\.5)5|7\.236\.232\.231|5\.214\.90\.114|2\.99\.246\.10)|4(?:1\.(?:211\.125\.123|137\.24\.4)|2\.121\.127\.201)|7(?:5\.127\.110\.39|2\.35\.20\.131|4\.9\.203\.186)|9(?:5\.(?:159\.105\.2|48\.24\.10)|6\.9\.138\.233)|37\.206\.210\.130)\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:9(?:0\.90\.1[678]|7\.33\.153)|18(?:5\.80\.100|6\.46\.107))|7\.(?:2(?:11\.91\.147|0\.3\.231)|102\.116\.253)|8\.(?:1(?:14\.77\.11|29\.166\.8)6|97\.196\.163)|4\.(?:141\.253\.13?4|207\.113\.55)|1\.(?:67\.103\.180|93\.108\.194)|9\.1(?:61\.161\.188|93\.93\.25)|5\.88\.(?:119\.132|247\.131)|0\.93\.215\.186|3\.107\.43\.75)|8(?:4\.82\.(?:2(?:9\.3[34]|32\.167)|1(?:09\.14|54\.51))|8\.(?:127\.230\.28|252\.0\.237)|9\.(?:58\.251\.23|75\.63\.11)4|5\.12\.14\.225)|7(?:3\.(?:2(?:12\.250\.230|00\.90\.196)|45\.114\.(?:6[56789]|8[2456])|192\.144\.105)|4\.36\.167\.116|8\.151\.68\.210)|9(?:5\.(?:1(?:38\.195\.125|91\.184\.82)|29\.81\.30)|9\.(?:180\.113\.1(?:0[19]|1[26])|255\.11\.29)|0\.85\.132\.83)|0(?:3\.9\.15(?:8\.(?:1(?:04|43)|97)|7\.181|6\.89)|6\.187\.35\.127|8\.174\.202\.78)|2(?:8\.204\.197\.5[04]|3\.30\.180\.172)|33\.242\.115\.44|\.34\.158\.128)|2(?:1(?:0\.(?:2(?:1\.225\.2(?:3[012456789]|4[15789]|5[123]|2[78])|45\.89\.69)|5(?:1\.4
4\.199|6\.23\.100))|3\.(?:2(?:30\.128\.226|51\.186\.229)|1(?:71\.39\.154|86\.39\.43)|81\.164\.57)|7\.(?:1(?:2\.248|98\.3)\.238|98\.62\.200)|9\.(?:143\.207\.14|223\.252\.15)0|1\.(?:147\.211\.16|222\.53\.83)|8\.(?:56\.37\.250|2\.129\.53)|6\.153\.136\.125|2\.6\.152\.211)|0(?:8\.(?:8(?:2\.114\.(?:2[012467]|[46][02]|36)|4\.135\.110)|71\.172\.8[48]|113\.254\.39)|0\.(?:7(?:2\.11\.132|9\.27\.60)|142\.133\.21|31\.105\.172|206\.14\.26)|2\.(?:1(?:(?:07\.224\.2|58\.39\.25)0|42\.203\.19)|44\.53\.64)|1\.(?:2(?:2\.7\.225|4\.129\.2)|45\.114\.3)|3\.(?:155\.102\.2|210\.83\.23)|4\.13\.169\.36)|2(?:0\.(?:225\.253\.12|94\.235\.200)|3\.(?:25\.242\.|4\.233\.1)62|2\.211\.91\.20|1\.132\.35\.7)|4\.127\.201\.172|\.139\.178\.81)|6(?:1\.(?:1(?:(?:33\.125\.16|75\.223\.14)2|6(?:4\.42\.158|6\.55\.153)|91\.27\.118|10\.156\.4)|2(?:8\.114\.3[3456]|52\.138\.195)|77\.210\.75)|6\.(?:199\.22(?:7\.19[4568]|4\.[24])|55\.1(?:43\.11[68]|53\.61)|96\.213\.138|84\.49\.9)|4\.120\.1(?:70\.138|81\.94)|0\.8\.63\.52)|5(?:\.(
?:39\.220\.22[579]|159\.229\.249)|8\.254\.168\.(?:5[6789]|6[0123])|9\.(?:125\.182\.182|34\.57\.88))|8(?:(?:0\.36\.130\.13|1\.15\.172\.14|3\.238\.208\.5)5|7\.236\.232\.231|2\.99\.246\.10)|7(?:2\.(?:35\.20\.131|42\.224\.4)|5\.127\.110\.39|4\.9\.203\.186)|4(?:1\.(?:211\.125\.123|137\.24\.4)|2\.121\.127\.201)|9(?:5\.(?:159\.105\.2|48\.24\.10)|6\.9\.138\.233)|37\.206\.210\.130)\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work