You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2011/09/23 07:57:12 UTC
svn commit: r1174530 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Fri Sep 23 05:57:12 2011
New Revision: 1174530
URL: http://svn.apache.org/viewvc?rev=1174530&view=rev
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1174530&r1=1174529&r2=1174530&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Fri Sep 23 05:57:12 2011
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201109221
+## khop-sc-neighbors.cf v 201109231
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -75,7 +75,7 @@ score KHOP_SC_CIDR16 1.0 0.2 1.0 0.2
# crap, still empty 20100410 bad scrape, script failed to populate rule
# crap, still empty 20110227 this is due to safety net exclusions -> 1 .2 1 .2
-header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b(?:1(?:2(?:2\.168|3\.27)|82\.17[78]|10\.137)|41\.252)(?:\.[012]?\d{1,2}){2}\b)/
+header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b(?:1(?:2(?:2\.168|3\.27)|82\.17[78])|41\.252)(?:\.[012]?\d{1,2}){2}\b)/
describe KHOP_SC_TOP_CIDR16 Relay CIDR /16 leads SpamCop in worst /16s
tflags KHOP_SC_TOP_CIDR16 nopublish
score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0.4
@@ -93,7 +93,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:25\.110\.(?:1(?:0[13468]|1[06]|24)|96)|11\.224\.250)|2(?:1(?:3\.233\.64|7\.118\.81)|23\.255\.226)|8(?:4\.235\.73|3\.149\.2))\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:25\.110\.(?:1(?:0[13478]|24)|98)|11\.224\.250)|2(?:23\.255\.226|13\.233\.64)|8(?:4\.235\.73|3\.149\.2)|60\.181\.16[24])\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -112,7 +112,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:8(?:5\.(?:26\.(?:1(?:6[45]|8[46])|2(?:3[12345]|41))|115\.248)|3\.149\.(?:4[4567]|3[45]?|21))|1(?:25\.110\.(?:1(?:1[34589]|0[57]|20)|99)|73\.245\.20[45]|09\.127\.86)|2(?:1(?:7\.118\.(?:83|90)|3\.87\.74)|0(?:9\.205\.22[67]|2\.152\.243))|(?:60\.181\.16|41\.254\.)1)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:8(?:5\.(?:26\.(?:1(?:6[45]|8[46])|2(?:3[12345]|41))|115\.248)|3\.149\.(?:3[45]?|4[457]|21))|2(?:1(?:7\.118\.(?:8[13]|90)|3\.87\.74)|0(?:9\.205\.22[567]|2\.152\.243))|1(?:25\.110\.(?:1(?:1[345689]|05|20)|99)|73\.245\.20[45]|09\.127\.86)|(?:60\.181\.16|41\.254\.)1)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -130,7 +130,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:2(?:5\.(?:1(?:10\.(?:1(?:1(?:8\.(?:2(?:07|39)|162|88)|9\.(?:1(?:0[78]|63)|55)|5\.(?:(?:20|9)3|16|8)|6\.(?:1(?:04|59)|26)|3\.(?:132|220)|4\.(?:211|59)|0\.224)|0(?:5\.(?:1(?:07|4)|32)|7\.1(?:06|74|89)|8\.(?:193|215)|1\.(?:164|73)|3\.(?:234|53)|4\.(?:10|22)2|6\.15|9\.34)|2(?:0\.(?:1(?:12|7)|57)|2\.240|4\.79))|9(?:9\.(?:227|46)|6\.194|8\.203))|63\.165\.154)|22(?:8\.238\.108|9\.117\.147)|7\.241\.205)|1\.(?:1(?:77\.135\.103|80\.50\.96)|50\.16\.11)|4\.1(?:06\.113\.216|37\.20\.253)|3\.193\.1(?:12\.177|78\.170))|1(?:1\.(?:224\.250\.(?:2(?:1[15]|4[67])|1(?:3[12]|17))|18(?:4\.219\.114|5\.231\.169))|8\.(?:23(?:2\.201\.35|3\.187\.20)|4(?:0\.236\.134|5\.243\.3))|7\.(?:211\.83\.131|6\.130\.230)|2\.133\.146\.164|9\.200\.84\.225|4\.27\.183\.87)|9(?:5\.(?:1(?:44\.251\.28|61\.9\.2)|205\.141\.3)|4\.126\.183\.120|0\.200\.145\.42|3\.84\.22\.14)|78\.(?:1(?:75\.(?:100\.184|90\.123)|51\.241\.155|69\.50\.72)|219\.192\.14|79\.13\.83)|09\.(?:70\.184
\.22|184\.59\.3|68\.234\.4)|8(?:4\.154\.186\.166|0\.94\.93\.5)|\.251\.18\.69)|9(?:5\.(?:1(?:88\.(?:118\.213|70\.208)|40\.205\.100|72\.124\.3|91\.153\.7)|(?:(?:68\.240|76\.237)\.4|226\.174\.1)3|83\.130\.82)|1\.(?:1(?:21\.7(?:5\.209|4\.33)|88\.112\.1|90\.232\.8)|2(?:06\.126\.241|23\.136\.253|14\.18\.6))|3\.(?:7(?:3\.1(?:32\.79|6\.63)|2\.239\.221|4\.18\.216)|157\.148\.102)|4\.(?:2(?:45\.156\.33|0\.83\.45)|189\.188\.228)|2\.1(?:27\.141\.206|14\.65\.149))|2(?:1(?:1\.(?:4(?:5\.126\.81|7\.89\.147)|226\.179\.152)|9\.(?:70\.4(?:2\.227|3\.245)|147\.19\.50)|7\.2(?:5\.215\.228|6\.6\.74)|3\.218\.164\.95|2\.78\.227\.53)|0(?:2\.(?:(?:29\.129\.16|55\.186\.2)0|126\.91\.246)|(?:3\.160\.55\.8|7\.157\.30\.6)6|9\.239\.40\.14)|2(?:2\.(?:124\.1(?:54\.170|98\.167)|231\.57\.191)|0\.(?:120\.138\.21|71\.140\.2))|4\.79\.106\.38|\.37\.61\.107)|8(?:6\.(?:5(?:7\.251\.55|8\.179\.72)|122\.61\.204|98\.93\.145)|3\.2(?:39\.158\.165|18\.64\.200|29\.48\.222|\.31\.136)|7\.(?:2(?:21\.156\.54|04\.79\.21)|97\.237\.2
06)|9\.(?:2(?:05\.46\.113|37\.35\.237)|141\.4\.180)|0\.(?:(?:235\.82\.6|55\.219\.)2|92\.186\.149)|8\.(?:81\.231\.124|199\.43\.85)|1\.23\.193\.107|2\.151\.210\.15|4\.121\.250\.74|5\.198\.105\.70)|6(?:0\.181\.16(?:1\.(?:1(?:[59]2|16)|2(?:24|50))|2\.64|4\.20|5\.21)|2\.(?:1(?:28\.152\.150|76\.21\.108)|33\.191\.66)|(?:1\.20\.149\.11|8\.41\.250\.2)1|9\.(?:171\.130\.190|73\.172\.155)|4\.157\.9\.243|5\.98\.224\.52)|7(?:8\.(?:1(?:89\.224\.183|28\.75\.7)|(?:97\.191\.6|29\.4\.7)8)|7\.(?:1(?:06\.232\.17|20\.241\.2)8|81\.199\.69)|9\.1(?:32\.121\.132|24\.92\.164)|6\.114\.249\.46)|4(?:1\.(?:137\.(?:2[04]|56)\.|208\.106\.24)4|6\.(?:186\.9\.237|55\.176\.98))|5(?:(?:8\.227\.41\.24|9\.127\.141\.9)7|0\.97\.151\.130))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:2(?:5\.(?:110\.(?:1(?:1(?:8\.(?:2(?:07|39)|162|88)|9\.(?:1(?:0[78]|63)|55)|5\.(?:(?:20|9)3|16|8)|6\.(?:1(?:04|59)|26)|1\.(?:191|249)|3\.(?:132|220)|4\.(?:211|59)|0\.224)|0(?:2\.(?:(?:12|9)5|69)|5\.(?:1(?:07|4)|32)|7\.1(?:06|74|89)|8\.(?:193|215)|1\.(?:164|73)|3\.(?:234|53)|4\.(?:10|22)2|6\.15|9\.34)|2(?:0\.(?:1(?:12|7)|57)|2\.240|7\.138|4\.79))|9(?:9\.(?:227|46)|6\.194|8\.203))|22(?:8\.238\.108|9\.117\.147))|1\.(?:1(?:77\.135\.103|45\.43\.57|80\.50\.96)|50\.16\.11)|3\.193\.1(?:12\.177|78\.170)|4\.137\.20\.253)|1(?:1\.(?:224\.250\.(?:2(?:4[567]|15)|1(?:3[12]|17))|18(?:4\.219\.114|5\.231\.169))|8\.(?:23(?:2\.201\.35|3\.187\.20)|4(?:0\.236\.134|5\.243\.3))|7\.(?:211\.83\.131|6\.130\.230)|2\.133\.146\.164|9\.200\.84\.225)|9(?:5\.(?:2(?:48\.172\.190|05\.141\.3)|5\.109\.124|161\.9\.2)|4\.126\.183\.120|0\.200\.145\.42)|78\.(?:1(?:75\.(?:100\.184|90\.123)|51\.241\.155|69\.50\.72)|219\.192\.14|79\.13\.83)|09\.(?:70\.184\.22|184\.5
9\.3|68\.234\.4|98\.7\.206)|8(?:4\.154\.186\.166|0\.94\.93\.5)|\.251\.18\.69)|9(?:5\.(?:1(?:88\.(?:118\.213|70\.208)|40\.205\.100|72\.124\.3|91\.153\.7)|(?:(?:68\.240|76\.237)\.4|226\.174\.1)3|83\.130\.82)|3\.(?:7(?:3\.1(?:32\.79|6\.63)|2\.239\.221|4\.18\.216)|1(?:57\.148\.102|90\.107\.236))|1\.(?:2(?:06\.126\.241|23\.136\.253|14\.18\.6)|1(?:21\.7(?:5\.209|4\.33)|88\.112\.1))|4\.(?:1(?:27\.223\.112|89\.188\.228)|2(?:45\.156\.33|0\.83\.45))|2\.(?:1(?:27\.141\.206|14\.65\.149)|82\.31\.94))|2(?:1(?:1\.(?:4(?:5\.126\.81|7\.89\.147)|226\.179\.152)|9\.(?:70\.4(?:2\.227|3\.245)|147\.19\.50)|2\.7(?:0\.155\.88|8\.227\.53)|7\.2(?:5\.215\.228|6\.6\.74)|3\.218\.164\.95)|0(?:2\.(?:(?:29\.129\.16|55\.186\.2)0|126\.91\.246)|(?:3\.160\.55\.8|7\.157\.30\.6)6|0\.204\.32\.177)|2(?:2\.(?:124\.1(?:54\.170|98\.167)|231\.57\.191)|0\.(?:120\.138\.21|71\.140\.2))|4\.79\.106\.38|\.37\.61\.107)|8(?:3\.(?:2(?:18\.64\.200|29\.48\.222|\.31\.136)|1(?:39\.29\.124|51\.4\.228))|9\.(?:2(?:3(?:9\.132\.173|7\.3
5\.237)|05\.46\.113)|136\.114\.62)|7\.(?:2(?:21\.156\.54|04\.79\.21)|97\.237\.206)|6\.(?:5(?:7\.251\.55|8\.179\.72)|122\.61\.204)|0\.(?:(?:235\.82\.6|55\.219\.)2|92\.186\.149)|1\.23\.193\.107|2\.151\.210\.15|4\.121\.250\.74|5\.198\.105\.70)|6(?:0\.181\.16(?:1\.(?:1(?:[59]2|16)|2(?:24|50))|2\.(?:37|64)|4\.20)|2\.(?:176\.21\.108|33\.191\.66)|9\.171\.130\.190|5\.98\.224\.52|8\.41\.250\.21)|7(?:7\.(?:1(?:06\.232\.17|20\.241\.2)8|81\.199\.69)|8\.(?:1(?:89\.224\.183|28\.75\.7)|29\.4\.78)|9\.1(?:32\.121\.132|24\.92\.164)|6\.114\.249\.46)|4(?:1\.(?:137\.(?:2[04]|56)\.|208\.106\.24)4|6\.(?:186\.9\.237|55\.176\.98))|5(?:8\.227\.41\.24|9\.127\.141\.9)7)\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work