You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2014/02/28 08:58:03 UTC
svn commit: r1572866 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Fri Feb 28 07:58:03 2014
New Revision: 1572866
URL: http://svn.apache.org/r1572866
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1572866&r1=1572865&r2=1572866&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Fri Feb 28 07:58:03 2014
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201402272
+## khop-sc-neighbors.cf v 201402282
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -101,7 +101,7 @@ score KHOP_SC_TOP_CIDR16 0.6 0.2 0.7 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:(?:98\.143\.12|41\.105\.6)8|84\.(?:82\.17[19]|22\.197)|03\.25\.146)|67\.210\.247|87\.226\.224|212\.48\.79|79\.135\.46)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:84\.(?:82\.17[19]|22\.197)|98\.143\.128|22\.13\.132)|8(?:3\.167\.237|7\.226\.224)|212\.48\.79|79\.135\.46|66\.35\.75)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.6 0 0.6 0
@@ -122,7 +122,7 @@ score KHOP_SC_CIDR24 0.6 0 0.6 0
# 0.4428/0 1.000 20130705@376k resume scores -> .6 0 .6 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.(?:143\.[57]|84\.13)|5\.60\.156)|9(?:0\.234\.10[56]|8\.143\.150)|8(?:1\.66\.15[67]|4\.22\.53)|0(?:3\.25\.146|1\.9\.205))|(?:9(?:1\.218\.24|4\.20\.22)|217\.76\.7)4|46\.1(?:0(?:2\.187|7\.24)|82\.92)|(?:67\.205\.6|85\.17\.2)7|31\.192\.111)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:0(?:1\.(?:14\.88|9\.205)|3\.25\.146)|2(?:0\.(?:143\.7|84\.13)|5\.60\.156)|9(?:0\.234\.10[56]|8\.143\.150)|8(?:1\.66\.15[67]|4\.22\.53))|9(?:1\.218\.24|4\.20\.22)4|(?:67\.205\.6|85\.17\.2)7|46\.1(?:02\.187|82\.92)|31\.192\.111)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0.5
@@ -178,7 +178,7 @@ score KHOP_SPAMHAUS_DROP_LE 2 0 2 0 #
# PSBL-neighbors: any /24 with 73+ (2/7, 29%) IPs in the PSBL (not SpamCop),
# as obtained from rsync://psbl-mirror.surriel.com::psbl/psbl.txt
-header KHOP_PSBL_CIDR24 X-Spam-Relays-Untrusted =~ / (?:by|ip)=(?-xism:\b(?:1(?:1(?:1\.176\.(?:[67]|(?:12|8)[4567]|4[89]?|5[01]?)|6\.207\.(?:6[0123]|4[89]|5\d)|5\.63\.(?:1[045]|8)|9\.36\.21[23])|8(?:6\.(?:1(?:3\.[01234567]|22\.4[4567])|37\.203)|3\.9(?:3\.11[45]|5\.6[67])|1\.66\.15[67]|8\.73\.252)|7(?:7\.(?:1(?:37\.19|1\.55)|36\.(?:17|22))|1\.80\.1(?:6[89]|7[01]))|0(?:3\.2(?:5(?:5\.19|3\.2)3|40\.252)|9\.127\.80)|9(?:0\.(?:234\.10[56]|113\.209)|9\.19\.92)|2(?:3\.136\.10|5\.60\.15)6|30\.193\.14[67]|54\.65\.32)|2(?:7\.20\.(?:[89]|1(?:0[0123]?|[28][89]|[39][01]|7[6789]|1)|24[01234567]|4[0123]|5[6789])|(?:01\.220\.24|12\.34\.1)2|4\.244\.23)|58\.(?:5(?:0\.1(?:[2345]|0[456789]|1\d)|4\.18[4567])|19\.19[01])|95\.83\.2(?:49|53)|41\.254\.[2568]|79\.106\.109)\.[012]?\d{1,2}\b)/
+header KHOP_PSBL_CIDR24 X-Spam-Relays-Untrusted =~ / (?:by|ip)=(?-xism:\b(?:1(?:1(?:1\.176\.(?:[67]|(?:12|8)[4567]|4[89]?|5[01]?)|6\.207\.(?:6[0123]|4[89]|5\d)|5\.63\.(?:[89]|1[01245])|9\.36\.212)|8(?:6\.(?:1(?:3\.[01234567]|22\.4[4567])|37\.203)|3\.9(?:3\.11[45]|5\.6[67])|1\.66\.15[67]|8\.73\.252)|2(?:5\.(?:44\.24[01256]|60\.156)|3\.136\.106|2\.155\.34)|7(?:1\.80\.1(?:6[89]|7[01])|7\.36\.(?:17|22))|9(?:0\.234\.10[56]|9\.19\.92)|0(?:3\.253\.23|9\.127\.80)|30\.193\.14[67]|54\.65\.32)|2(?:7\.20\.(?:[89]|1(?:0[0123]?|[28][89]|[39][01]|7[6789]|1)|24[01234567]|4[0123]|5[6789])|0(?:1\.220\.242|3\.191\.26)|12\.34\.12|4\.244\.23)|58\.(?:5(?:0\.1(?:[2345]|0[456789]|1\d)|4\.18[4567])|19\.19[01])|9(?:5\.83\.2(?:49|53)|4\.230\.93)|41\.254\.[2568]|79\.106\.109)\.[012]?\d{1,2}\b)/
describe KHOP_PSBL_CIDR24 Relay's IP/24 CIDR contains many PSBL hits
tflags KHOP_PSBL_CIDR24 nopublish
score KHOP_PSBL_CIDR24 2 0.6 2 0.6