You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2011/02/15 07:57:10 UTC
svn commit: r1070787 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Tue Feb 15 06:57:10 2011
New Revision: 1070787
URL: http://svn.apache.org/viewvc?rev=1070787&view=rev
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1070787&r1=1070786&r2=1070787&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Tue Feb 15 06:57:10 2011
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201102141
+## khop-sc-neighbors.cf v 201102151
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -89,7 +89,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.5 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:(?:(?:3\.233|8\.248)\.6|0\.48\.15)4|7\.118\.81)|00\.98\.246)|1(?:9(?:8\.106\.26|5\.161\.9)|14\.112\.24[34]|78\.49\.255)|8(?:1\.192\.2(?:11|38)|5\.26\.225)|7(?:7\.232\.142|8\.159\.115)|9(?:4\.102\.209|1\.203\.67)|62\.183\.85)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:(?:(?:3\.233|8\.248)\.6|0\.48\.15)4|7\.118\.81)|00\.98\.246)|1(?:9(?:8\.106\.26|5\.161\.9)|14\.112\.244|78\.49\.255|87\.45\.193)|7(?:7\.232\.14[23]|8\.159\.115)|8(?:1\.192\.238|5\.26\.225)|9(?:4\.102\.209|1\.203\.67)|62\.183\.85)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 2.5 0.6 2.5 0.6
@@ -106,7 +106,7 @@ score KHOP_SC_CIDR24 2.5 0.6 2.5 0.6
# 0.2960/0 1.000 20100409
# 0.2905/0 1.000 20100410 net
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:8(?:5\.(?:26\.(?:1(?:6[45]|8[36])|2(?:3[2345]|41))|115\.248)|3\.149\.(?:3[68]?|2[18]|45)|1\.192\.(?:2(?:11|38)|199)|8\.19(?:0\.12|1\.78)|0\.83\.23[89]|2\.178\.69)|2(?:1(?:3\.(?:87\.(?:1(?:28|36)|74)|226\.63)|7\.(?:118\.(?:83|90)|66\.146|8\.225))|0(?:8\.71\.172|9\.51\.150|3\.82\.95)|7\.123\.252)|1(?:13\.10\.16[3459]|78\.162\.135|22\.55\.106|87\.45\.193|95\.91\.70)|9(?:5\.154\.240|8\.139\.91)|5(?:0\.23\.193|8\.64\.187)|6(?:0\.199\.201|1\.19\.66)|41\.254\.[01])\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:8(?:5\.(?:26\.(?:1(?:6[45]|8[36])|2(?:3[2345]|41))|115\.248)|3\.149\.(?:3[68]?|4[156]|21)|1\.192\.(?:2(?:11|38)|199)|(?:0\.83\.23|2\.178\.6)9|8\.19(?:0\.12|1\.78))|2(?:1(?:3\.(?:87\.(?:1(?:28|36)|74)|226\.63)|7\.(?:118\.(?:83|90)|66\.146|8\.225))|0(?:8\.71\.172|9\.51\.150|3\.82\.95))|1(?:7(?:8\.162\.135|4\.36\.86)|13\.10\.16[34]|95\.91\.70)|9(?:5\.154\.240|8\.139\.91)|5(?:0\.23\.193|8\.64\.187)|6(?:0\.199\.201|1\.19\.66)|41\.(?:254\.[01]|95\.4))\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.6 2.7 0.6
@@ -123,7 +123,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.6 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:2(?:0(?:9\.(?:2(?:12\.153\.2(?:18|22)|50\.231\.242)|51\.150\.1(?:8[679]|90))|2\.(?:28\.(?:66\.251|24\.99)|(?:64\.77|75\.36)\.93|152\.194\.128)|0\.(?:9(?:5\.162\.206|8\.246\.205|4\.104\.10)|80\.13\.66)|8\.(?:71\.172\.1(?:5[123]|4[56])|131\.186\.2)|4\.(?:1(?:88\.168\.1|11\.83\.5)1|8\.46\.130)|6\.(?:255\.221\.18|188\.209\.1)8|1\.23(?:2\.85\.222|8\.219\.28)|3\.212\.209\.246)|1(?:2\.(?:(?:199\.29\.14|62\.121\.9)5|85\.(?:101\.94|97\.169))|(?:8\.248\.44\.19|9\.255\.18\.3)6|6\.(?:176\.16\.202|40\.148\.214)|7\.(?:9\.147\.115|26\.6\.96)|0\.48\.154\.253|3\.242\.205\.37)|4\.(?:1(?:5\.(?:160\.142|251\.28)|14\.252\.233|71\.21\.75)|22\.179\.185|68\.9\.152)|22\.252\.223\.2)|6(?:7\.(?:1(?:6(?:5\.140\.137|7\.53\.212)|87\.(?:151\.225|215\.197)|97\.83\.211|75\.33\.64|5\.97\.82)|2(?:41\.137\.154|05\.199\.18|37\.28\.105)|58\.92\.55)|(?:8\.(?:4(?:1\.187\.1|4\.133\.3)|5(?:7\.251\.23|1\.70\.2)|235\.232\.20)|0\.199\.201\.12)0|4\.(?:1(?:(?:07\.150\.13|
48\.129\.14)0|19\.40\.138)|90\.72\.43)|6\.(?:2(?:(?:40\.114|52\.219)\.177|27\.197\.130)|49\.100\.34)|9\.(?:1(?:79\.164\.244|81\.9\.71)|64\.(?:155\.181|43\.148))|2\.(?:212\.216\.249|168\.65\.18)|1\.(?:67\.246\.226|221\.67\.94)|5\.40\.95\.123)|1(?:9(?:5\.(?:1(?:6(?:1\.(?:40\.10|9\.2)|0\.253\.4)|55\.1\.55)|223\.221\.114)|0\.(?:1(?:99\.14\.222|2\.80\.150)|60\.88\.146)|8\.106\.26\.(?:54|72))|2(?:1\.(?:161\.83\.153|52\.157\.238)|3\.(?:194\.221\.245|27\.79\.11)|2\.252\.2(?:46\.234|34\.75)|8\.121\.191\.240|5\.20\.82\.196)|7(?:8\.(?:162\.135\.2(?:2[01234567]|19)|49\.255\.104)|3\.2(?:24\.213\.138|46\.157\.119|3\.194\.196)|4\.36\.86\.1(?:1[34]|26))|8(?:7\.(?:45\.193\.174|13\.60\.203)|4\.1\.151\.12)|11\.224\.250\.13[24]|42\.217\.19\.26|62\.84\.93\.177)|7(?:6\.(?:1(?:26\.40\.233|6\.124\.157)|20\.(?:93\.112|16\.10)|6\.(?:225\.11|98\.16)9|30\.194\.138)|1\.(?:2(?:06\.240\.131|39\.144\.233)|0\.146\.160|125\.12\.15|48\.39\.231|80\.23\.123)|8\.(?:159\.11(?:5\.236|8\.74)|225\.129\.13|40\.254\.1
)|0\.(?:1(?:35\.175\.249|40\.251\.110)|57\.242\.42)|4\.(?:254\.146\.125|142\.195\.64|75\.172\.93)|5\.1(?:30\.182\.18|45\.45\.225)|7\.(?:69\.137\.77|232\.83\.2)|9\.96\.(?:48\.103|14\.31))|8(?:8\.(?:19(?:0\.12\.240|1\.78\.136)|2(?:55\.153\.106|16\.4\.75)|40\.102\.242)|2\.(?:1(?:93\.140\.168|69\.93\.145)|224\.188\.122)|(?:6\.188\.143\.20|1\.66\.233\.12|0\.65\.16\.7)1|3\.1(?:42\.111\.228|74\.198\.33)|4\.(?:15\.191\.254|51\.44\.66)|7\.106\.251\.156|5\.25\.135\.200|9\.218\.52\.234)|9(?:7\.(?:103\.239\.148|89\.116\.202|93\.177\.5|77\.35\.3)|8\.22(?:3\.1(?:86\.3|3\.4)4|7\.88\.133|0\.0\.192)|3\.(?:91\.196\.(?:132|99)|190\.104\.7)|4\.(?:102\.209\.9|79\.4\.)4|5\.154\.240\.98|6\.226\.4\.60)|4(?:1\.137\.(?:(?:24|30|56)\.4|63\.20[123])|6\.1(?:07\.227\.244|7\.121\.1))|5(?:8\.(?:150\.55\.59|20\.40\.166)|0\.23\.193\.10[4678]))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:2(?:0(?:0\.(?:9(?:5\.162\.206|8\.246\.205|4\.104\.10)|42\.99\.11|80\.13\.66)|9\.(?:2(?:12\.153\.2(?:18|22)|50\.231\.242)|51\.150\.1(?:8[679]|90))|2\.(?:28\.(?:66\.251|24\.99)|(?:64\.77|75\.36)\.93|152\.194\.128)|1\.(?:23(?:2\.85\.222|9\.179\.79)|144\.130\.21)|8\.(?:71\.172\.1(?:5[123]|4[56])|131\.186\.2)|4\.(?:1(?:88\.168\.1|11\.83\.5)1|8\.46\.130)|3\.212\.209\.246|7\.118\.195\.219|6\.188\.209\.18)|1(?:2\.(?:1(?:46\.157\.10|99\.29\.145)|85\.(?:101\.94|97\.169))|(?:8\.248\.44\.19|9\.255\.18\.3)6|7\.(?:9\.147\.115|26\.6\.96)|0\.48\.154\.253|3\.242\.205\.37|6\.176\.16\.202)|4\.(?:15(?:9\.3\.139|\.251\.28)|22\.179\.185)|22\.252\.223\.2)|1(?:9(?:5\.(?:1(?:6(?:1\.(?:40\.10|9\.2)|0\.253\.4)|55\.1\.55)|223\.221\.114)|0\.(?:1(?:99\.14\.222|2\.80\.150)|60\.88\.146)|8\.106\.26\.(?:37|45|54|72)|9\.239\.254\.77|4\.54\.160\.2)|7(?:3\.2(?:(?:10\.25\.14|3\.194\.19)6|24\.213\.138|46\.157\.119)|8\.(?:162\.135\.2(?:2[01234567]|19)|49\.255\.1(?:
04|25))|4\.36\.86\.1(?:1[34]|26))|2(?:1\.(?:161\.83\.153|52\.157\.238)|3\.(?:194\.221\.245|27\.79\.11)|2\.252\.2(?:46\.234|34\.75)|8\.121\.191\.240|4\.49\.246\.229|5\.20\.82\.196)|8(?:7\.45\.193\.174|9\.90\.255\.11|8\.128\.4\.30)|1(?:1\.224\.250\.13[24]|3\.160\.196\.110))|6(?:7\.(?:1(?:8(?:7\.(?:151\.225|215\.197)|4\.53\.243|6\.91\.40)|6(?:5\.140\.137|7\.53\.212)|97\.83\.211|5\.97\.82)|2(?:(?:37\.28\.10|11\.248\.)5|41\.137\.154|05\.199\.18)|58\.92\.55)|(?:8\.(?:4(?:1\.187\.1|4\.133\.3)|235\.232\.20|57\.251\.23)|0\.199\.201\.12)0|4\.(?:1(?:(?:07\.150\.13|48\.129\.14)0|19\.40\.138)|90\.72\.43)|9\.(?:1(?:99\.164\.222|81\.9\.71)|64\.(?:155\.181|43\.148))|6\.2(?:27\.197\.130|52\.219\.177)|2\.(?:212\.216\.249|168\.65\.18)|1\.(?:67\.246\.226|221\.67\.94))|7(?:1\.(?:2(?:06\.240\.131|39\.144\.233)|0\.146\.160|125\.12\.15|80\.23\.123)|6\.(?:1(?:99\.181\.193|6\.124\.157)|30\.194\.138|20\.16\.10)|8\.(?:159\.11(?:5\.236|8\.74)|225\.129\.13|40\.254\.1)|7\.(?:2(?:28\.214\.5|32\.83\.)2|69\.
137\.77)|2\.(?:164\.15\.50|46\.214\.28)|9\.96\.(?:48\.103|14\.31)|0\.135\.175\.249|4\.254\.146\.125|5\.130\.182\.18)|8(?:8\.(?:19(?:0\.12\.240|1\.78\.136)|255\.153\.106|40\.102\.242)|3\.1(?:7(?:3\.164\.10|4\.198\.33)|42\.111\.228)|2\.(?:193\.140\.168|224\.188\.122)|9\.(?:161\.144\.109|218\.52\.234)|(?:1\.66\.233\.12|0\.65\.16\.7)1|7\.1(?:06\.251\.156|26\.253\.24)|4\.(?:15\.191\.254|51\.44\.66)|(?:5\.25\.135|6\.36\.49)\.200)|9(?:8\.22(?:3\.1(?:86\.3|3\.4)4|7\.88\.133|0\.0\.192)|5\.(?:154\.240\.98|241\.78\.152|62\.161\.69)|7\.(?:103\.239\.148|93\.177\.5|77\.35\.3)|3\.(?:91\.196\.(?:132|99)|190\.104\.7)|1\.195\.(?:136\.14|230\.11)|4\.(?:102\.209\.9|79\.4\.)4|6\.226\.4\.60)|4(?:1\.137\.(?:(?:24|30|56)\.4|63\.20[123])|6\.1(?:07\.227\.244|7\.121\.1))|5(?:8\.(?:150\.55\.59|20\.40\.166)|0\.23\.193\.10[4678]))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work