You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2012/10/06 08:57:38 UTC
svn commit: r1394951 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Sat Oct 6 06:57:37 2012
New Revision: 1394951
URL: http://svn.apache.org/viewvc?rev=1394951&view=rev
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1394951&r1=1394950&r2=1394951&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Sat Oct 6 06:57:37 2012
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 20121052
+## khop-sc-neighbors.cf v 20121062
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:1\.68\.105|5\.82\.237|8\.68\.122)|2(?:2\.(?:155\.36|201\.18)|1\.54\.54)|86\.115\.252)|9(?:(?:1\.214\.12|2\.233\.3)8|8\.139\.91)|8(?:6\.111\.144|4\.111\.96)|202\.29\.213)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:1\.68\.105|5\.82\.237|8\.68\.122)|2(?:2\.(?:155\.36|201\.18)|1\.54\.54)|86\.115\.252)|8(?:6\.111\.144|8\.182\.221|4\.90\.97)|9(?:2\.233\.38|8\.139\.91)|202\.29\.213)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:8(?:8\.(?:13\.39|9\.41)|4\.173\.25)|1(?:1\.224\.250|2\.215\.64)|23\.136\.106|09\.236\.87|76\.57\.119)|2(?:08\.184\.25[23]|12\.174\.243|\.112\.195)|41\.254\.5)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:8(?:8\.(?:13\.39|9\.41)|4\.173\.25)|1(?:1\.224\.250|2\.215\.64)|23\.136\.106|09\.236\.87|76\.57\.119)|2(?:08\.184\.25[23]|12\.174\.243|\.112\.195))\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:8(?:6\.(?:1(?:15\.252\.73|45\.58\.164)|4(?:\.251\.22|3\.1\.21)7|36\.207\.105|81\.193\.13)|7\.(?:1(?:05\.99\.147|20\.9\.50)|2(?:0\.138\.170|42\.16\.3)|59\.137\.186|6\.253\.234)|8\.(?:13(?:8\.200\.93|\.39\.226)|35\.5\.209|9\.41\.10)|9\.(?:(?:202\.123\.1|86\.88\.5)8|101\.129\.237)|3\.(?:107\.243\.148|83\.172\.144)|4\.17(?:3\.25\.158|2\.210\.6)|0\.149\.75\.71|2\.71\.163\.10)|1(?:2\.(?:1(?:5(?:6\.1(?:78\.20|2\.1)4|9\.165\.50)|4(?:6\.69\.135|7\.88\.70))|216\.56\.12|5\.131\.118)|1\.(?:224\.250\.(?:13[14]|215)|68\.105\.22|93\.81\.194)|5\.(?:78\.195\.114|66\.85\.110|82\.237\.48|118\.5\.5)|8\.(?:68\.122\.170|70\.127\.158|82\.28\.117)|4\.2(?:00\.44\.211|9\.102\.40)|7\.(?:19\.249\.143|6\.133\.92)|3\.161\.80\.207|6\.15\.168\.238|9\.92\.247\.119)|9(?:0\.(?:2(?:3(?:5\.153\.105|4\.91\.237|7\.18\.59)|1(?:1\.117\.223|9\.152\.39)|5(?:0\.22\.106|5\.211\.49)|40\.175\.172)|1(?:07\.139\.10|58\.39\.82))|2\.162\.108\.159|3\.253\.178\.162|5\.26\.7
6\.98)|2(?:1\.(?:(?:183\.9\.22|6\.123\.1)5|52\.152\.2)|2\.(?:183\.204\.5|3\.187\.21)2|4\.(?:49\.40\.114|62\.137\.35)|0\.148\.244\.120|3\.99\.58\.3)|7(?:8\.(?:2(?:03\.80\.19|3\.219\.3)|32\.244\.157|150\.32\.99)|7\.(?:34\.162\.129|87\.242\.227|99\.75\.40)|6\.(?:57\.119\.232|8\.64\.151))|0(?:9\.(?:236\.87\.(?:1(?:[09]5|24|73)|2(?:15|43))|150\.37\.170|89\.133\.232)|1\.(?:15\.205\.160|99\.5\.154))|51\.41\.(?:23\.135|46\.124)|49\.241\.123\.78|\.215\.31\.83)|2(?:0(?:2\.(?:1(?:91\.160\.14|80\.219\.2|58\.5\.26)|29\.(?:2(?:13\.236|37\.14)|187\.131))|1\.(?:240\.228\.254|37\.158\.101|120\.37\.27|80\.96\.206)|0\.(?:3(?:2\.122\.25|7\.178\.)4|2\.147\.22)|8\.184\.25(?:3\.(?:236|74)|2\.182)|3\.1(?:28\.219\.252|91\.175\.51)|7\.232\.28\.234)|1(?:2\.(?:1(?:74\.243\.174|56\.85\.70)|2(?:44\.255\.15|6\.15\.171)|0\.139\.194)|(?:9\.74\.145\.21|6\.58\.122\.5)1|0\.(?:216\.228\.235|168\.50\.16)|3\.111\.16(?:2\.210|3\.84)|1\.111\.249\.145)|2(?:2\.124\.(?:210\.131|194\.75)|0\.133\.101\.50|1\.234\.39\.246
)|\.(?:232\.247\.126|112\.195\.83|50\.32\.209)|7\.145\.96\.25)|8(?:9\.(?:1(?:6(?:5\.122\.246|1\.13\.252)|15\.192\.152|22\.234\.130|56\.199\.136)|7(?:3\.29\.198|8\.201\.2)|227\.45\.153)|4\.(?:(?:111\.96\.19|228\.49\.21)8|78\.143\.125|90\.97\.17)|8\.(?:1(?:82\.221\.173|01\.53\.248)|255\.159\.98)|0\.(?:77\.134\.103|96\.177\.194|48\.211\.99)|2\.(?:160\.125\.25|228\.152\.14|80\.189\.81)|5\.(?:(?:193\.255\.|65\.218\.6)3|70\.48\.51)|1\.(?:190\.145\.211|9\.23\.226)|6\.111\.144\.(?:19|20)4)|9(?:5\.(?:2(?:2\.6\.147|41\.17\.3)|188\.70\.208|87\.93\.66)|4\.(?:1(?:56\.80\.219|89\.145\.11)|73\.250\.48)|2\.(?:233\.38\.241|80\.51\.225)|3\.181\.189\.148|8\.244\.107\.194|1\.214\.128\.23)|7(?:7\.(?:49\.114\.248|52\.181\.246|255\.77\.49)|2\.(?:253\.189\.219|42\.186\.137)|8\.1(?:54\.171\.194|89\.158\.162)|9\.18(?:1\.195\.208|9\.106\.74)|4\.212\.230\.98|6\.18\.158\.125)|4(?:1\.(?:1(?:77\.31\.16|37\.24\.4)|212\.120\.167)|6\.1(?:19\.213\.217|76\.109\.61))|6(?:1\.(?:247\.58\.191|39\.75\.242)|2\.98\.1
9\.115|8\.41\.66\.91)|5(?:(?:0\.14\.163\.9|8\.71\.75\.)1|9\.186\.140\.135)|3(?:1\.171\.128\.102|9\.116\.160\.233))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:8(?:6\.(?:1(?:15\.252\.73|45\.58\.164)|4(?:\.251\.22|3\.1\.21)7|36\.207\.105|81\.193\.13)|7\.(?:1(?:05\.99\.147|20\.9\.50)|59\.137\.186|6\.253\.234|73\.91\.137)|9\.(?:1(?:01\.129\.237|97\.222\.13)|(?:202\.123\.1|86\.88\.5)8)|3\.(?:107\.243\.148|83\.172\.144|91\.13\.49)|8\.(?:13(?:8\.200\.93|\.39\.226)|9\.41\.10)|2\.(?:221\.48\.23|71\.163\.10)|4\.17(?:3\.25\.158|2\.210\.6)|0\.149\.75\.71)|1(?:2\.(?:1(?:5(?:6\.1(?:78\.20|2\.1)4|9\.165\.50)|4(?:6\.69\.135|7\.88\.70))|216\.56\.12|5\.131\.118)|1\.(?:224\.250\.(?:2(?:15|46)|13[14])|68\.105\.22|93\.81\.194)|5\.(?:78\.195\.114|66\.85\.110|82\.237\.48|118\.5\.5)|8\.(?:68\.122\.170|70\.127\.158|82\.28\.117)|7\.(?:19\.2(?:39\.150|49\.143)|6\.133\.92)|4\.2(?:00\.44\.211|9\.102\.40)|6\.15\.168\.238|9\.92\.247\.119)|9(?:0\.(?:2(?:3(?:5\.153\.105|4\.91\.237|7\.18\.59)|1(?:1\.117\.223|9\.152\.39)|40\.175\.172)|1(?:07\.139\.10|58\.39\.82))|(?:3\.253\.178\.16|6\.216\.87\.5)2|2\.162\.108\.1
59|9\.115\.167\.57|5\.26\.76\.98)|2(?:1\.(?:(?:183\.9\.22|6\.123\.1)5|52\.152\.2)|2\.(?:183\.204\.5|3\.187\.21)2|4\.(?:49\.40\.114|62\.137\.35)|0\.148\.244\.120)|7(?:8\.(?:2(?:03\.80\.19|3\.219\.3)|32\.244\.157|150\.32\.99)|6\.(?:57\.119\.232|8\.64\.151)|7\.(?:34\.162\.129|99\.75\.40))|0(?:9\.(?:236\.8(?:7\.(?:1(?:[09]5|73)|2(?:1[35]|43))|6\.(?:57|65))|150\.37\.170|89\.133\.232)|1\.15\.205\.160)|4(?:9\.241\.123\.78|2\.0\.43\.53)|51\.41\.46\.124|\.215\.31\.83)|2(?:0(?:2\.(?:29\.(?:2(?:13\.236|37\.14)|187\.131)|1(?:91\.160\.14|80\.219\.2))|1\.(?:240\.228\.254|37\.158\.101|120\.37\.27|80\.96\.206)|3\.1(?:2(?:2\.25\.26|4\.42\.43)|91\.175\.51)|0\.(?:3(?:2\.122\.25|7\.178\.)4|2\.147\.22)|8\.184\.25(?:3\.(?:236|74)|2\.182)|7\.232\.28\.234)|1(?:2\.(?:1(?:74\.243\.174|56\.85\.70)|2(?:44\.255\.15|6\.15\.171)|0\.139\.194)|3\.1(?:11\.16(?:2\.210|3\.84)|36\.105\.171|08\.179\.38)|(?:9\.74\.145\.21|6\.58\.122\.5)1|1\.111\.249\.145|0\.168\.50\.16)|2(?:2\.124\.210\.131|0\.133\.101\.50|1\.234
\.39\.246)|\.(?:232\.247\.126|112\.195\.83))|8(?:9\.(?:1(?:6(?:0\.164\.111|1\.13\.252)|15\.192\.152|22\.234\.130|56\.199\.136)|7(?:(?:6\.224\.12|8\.201\.)2|3\.29\.198)|227\.45\.153)|8\.(?:1(?:82\.221\.173|01\.53\.248)|255\.159\.98|80\.154\.167)|5\.(?:(?:193\.255\.|65\.218\.6)3|70\.48\.51)|4\.(?:111\.96\.198|78\.143\.125|90\.97\.17)|2\.(?:160\.125\.25|228\.152\.14)|1\.(?:190\.145\.211|9\.23\.226)|6\.111\.144\.(?:19|20)4|3\.218\.98\.212|0\.48\.211\.99|7\.218\.74\.88)|7(?:2\.(?:253\.189\.219|12\.209\.242|42\.186\.137)|7\.(?:49\.114\.248|52\.181\.246|255\.77\.49)|8\.1(?:54\.171\.194|89\.158\.162)|9\.18(?:1\.195\.208|9\.106\.74)|4\.212\.230\.98|6\.18\.158\.125)|9(?:5\.(?:2(?:2\.6\.147|41\.17\.3)|188\.70\.208|56\.243\.163|87\.93\.66)|4\.(?:1(?:56\.80\.219|89\.145\.11)|73\.250\.48)|3\.181\.189\.148|8\.244\.107\.194|1\.214\.128\.23|2\.233\.38\.241)|6(?:1\.(?:(?:39\.75\.24|70\.80\.11)2|247\.58\.191)|(?:2\.98\.19\.11|9\.65\.38\.22)5|8\.41\.66\.91)|4(?:1\.(?:212\.120\.167|177\.31\.16)|
6\.1(?:19\.213\.217|76\.109\.61))|5(?:(?:0\.14\.163\.9|8\.71\.75\.)1|9\.186\.140\.135)|39\.116\.160\.233)\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work
@@ -146,14 +146,14 @@ score KHOP_SC_TOP200 4 0 4 0 # unneces
# Spamhaus DROP, http://www.spamhaus.org/drop/
-header KHOP_SPAMHAUS_DROP X-Spam-Relays-Untrusted =~ /(?-xism: (?:by|ip)=(?:(?:2(?:0(?:4\.(?:1(?:0(?:6\.(?:1(?:[3456789]\d|2[89])|2(?:2[0123]|[01]\d))|7\.208)|87\.(?:2(?:[01234]\d|5[01234])|1(?:5[56789]|[6789]\d))|4(?:7\.2(?:5[012345]|4\d)|\.[01234567])|55\.1(?:4[0123]|2[89]|3\d)|94\.1(?:8[456789]|9[01])|26\.24[45]|30\.167)|2(?:36\.(?:[0456789]|[12]\d?|3[01]?)|25\.(?:159|210))|44\.(?:2(?:0[01234567]|2[456789]|3\d)|19[23456789])|5(?:7\.(?:1[6789]|3[01]|2\d)|2\.255)|89\.224)|5\.(?:1(?:4(?:4\.(?:[023456789]|1(?:[012345]|7[6789]|9[01]|8\d)?)|2\.10[4567])|7(?:5\.1(?:[678]\d|9[01])|2\.24[4567])|37\.(?:[023456789]|1[012345]?)|89\.7[123]|59\.180)|2(?:03\.(?:[0456789]|2(?:[016789]|2[456789]?|5[012345]?|[34]\d?)?|3[01]?|1\d?)|3(?:3\.2(?:2[456789]|3\d)|5\.(?:6[456789]|7\d)|6\.189)|14\.1(?:[345]\d|2[89])))|9\.(?:1(?:4(?:8\.(?:6[456789]|9[012345]|[78]\d)|5\.(?:[0456789]|[12]\d?|3[01]?))|82\.(?:6[456789]|9[012345]|[78]\d)|98\.1(?:7[6789]|9[01]|8\d))|95\.(?:2(?:2[0123]|[01]\d)|19[23456789
])|205\.(?:19[23456789]|2[0123]\d)|51\.(?:3[23456789]|4[01234567]))|6\.(?:2(?:0(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|1\.(?:6[0123]|4[89]|5\d)|9\.(?:9[012345]|8\d))|2(?:7\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|4\.1(?:[678]\d|9[01])))|81\.(?:[0456789]|[12]\d?|3[01]?)|197\.(?:17[567]|2[89]))|7\.(?:18(?:3\.(?:2(?:2[0123]|[01]\d)|19[23456789])|9\.(?:[0456789]|[12]\d?|3[01]?))|22\.(?:2(?:5[012345]|[01234]\d)|19[23456789])|32\.1(?:[345]\d|2[89]))|0\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|22\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|105\.(?:3[23456789]|4[01234567])|3\.1(?:4[0123]|2[89]|3\d))|8\.(?:8(?:1\.1(?:3[6789]|4[0123])|5\.3[23456789])|9(?:3\.1(?:4[456789]|5[01])|0\.[01234567]))|1\.7(?:1\.(?:[023456789]|1[012345]?)|\.2(?:2[0123]|0[89]|1\d))|3\.3(?:1\.8[89]|4\.7[01])|2\.61\.108)|1(?:6\.(?:212\.(?:2(?:2[0123]|[01]\d)|19[23456789])|151\.(?:19[23456789]|20[01234567]))|3\.109\.(?:2(?:2[0123]|0[89]|1\d)|6[456789]|9[6789]|7\d))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[
01]?\d?\d|2[0-4]\d|25[0-5]))|9(?:1\.(?:2(?:1(?:2\.(?:1(?:07|23|35|98)|2(?:01|20)|4[15]|65)|3\.(?:1(?:7[45]|21|57)|2(?:17|9)|9[34]|72)|7\.(?:1(?:62|78)|2(?:00|49))|1\.(?:6[4567]|8[89]|9[01])|6\.(?:1(?:22|90|1)|7?3)|0\.17[2345])|0(?:0\.(?:1(?:6[4567]|7[6789])|2(?:4[012389]|5[01]))|9\.(?:1(?:8[346]|4)|(?:[45]|23)8|63)|1\.(?:(?:12)?[4567]|23[6789])|4\.4[01234567]|8\.(?:162|228)|3\.9[2345])|3(?:0\.1(?:4[37]|11)|8\.(?:18[01]|82)|9\.(?:15|24)|6\.12[01]|7\.9[123]|5\.2)|2(?:9\.(?:15[6789]|4[67]|248)|8\.(?:132|39)|0\.(?:62|90)|3\.77)|4(?:0\.16|3\.11)5)|19(?:6\.2(?:1[6789]|3[2345])|3\.1(?:9[2345]|1[01])|5\.(?:25[45]|1[01])|4\.(?:[01]|21[45])|8\.1(?:09|27)|7\.9[6789]))|4\.(?:1(?:5(?:4\.1(?:[345678]\d|2[89]|9[01])|8\.2(?:5[012345]|4\d))|3[01]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|6(?:3\.(?:1(?:4[679]|5[01])|24[0134567])|0\.12[123]|1\.247)|232\.2(?:5[012345]|4[89]))|3\.1(?:20\.(?:3[23456789]|6[0123]|[45]\d)|7(?:5\.2(?:5[012345]|4\d)|4\.164)|68\.(?:2[012345]|1[89])|88\.16[01234567])|5\.(?:21(?
:[67]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|5\.14[0123])|64\.(?:3[789]|1[13]|9[89]))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2\.249\.(?:[0789]|[12345]\d?|6[0123]?))|6(?:4\.(?:1(?:12\.(?:1(?:[012345678]\d?|9[01]?)?|[23456789]\d?|0)|5\.(?:[023456789]|1[012345]?))|44\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|28\.1(?:7[6789]|9[01]|8\d))|7\.21(?:0\.(?:[023456789]|1[012345]?)|[18]\.2(?:2[0123]|0[89]|1\d)|3\.1(?:4[0123]|2[89]|3\d))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2\.1(?:22\.(?:3[23456789]|7[23])|82\.15[23456789])|8\.232\.(?:1(?:1[01]|0\d)|9[6789])|6\.231\.(?:6[456789]|7\d))|8(?:5\.(?:2(?:02\.(?:1(?:9[23456789]|7[012345]|6\d)|20[01234567])|55\.1(?:1[23456789]|2[01234567]))|12(?:0\.9[45]|1\.39))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|4\.22\.(?:1(?:2[01234567]|[01]\d)|9[6789])|8\.135\.(?:1[6789]|3[01]|2\d)|9\.(?:114\.97?|45\.14)|6\.55\.(?:21[01]|140)|1\.22\.15[23])|7(?:9\.1(?:10\.(?:1(?:[678]\d?|9[01]?)|6[0123
]|[25]\d|3[01]|4[89])|74\.(?:[0456789]|[12]\d?|3[01]?))|2\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|13\.(?:1[6789]|3[01]|2\d))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|8\.31\.1(?:8[456789]|9[01]))|3(?:1\.(?:1(?:3(?:1\.2(?:5[012345]|4[89])|5\.[01234567])|(?:4\.10|1\.4)3|84\.242)|42\.1(?:[345]\d|2[89])|222\.20[01234567])|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|7\.(?:148\.2(?:1[6789]|2[0123])|230\.212|9\.58))|5(?:\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|34\.242)|8\.83\.(?:[89]|1[01]))|4\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1(?:(?:9(?:9\.(?:2(?:4(?:8\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|6\.(?:21[35]|137)|5\.138)|6\.(?:1(?:2[01234567]|[01]\d)|9[6789])|00\.(?:6[456789]|9[012345]|[78]\d)|30\.(?:6[456789]|10[0123]|[789]\d)|54\.(?:3[23456789]|4[01234567])|12\.(?:1(?:1[01]|0\d)|9[6789]))|1(?:9(?:6\.(?:2(?:2[0123]|[01]\d)|19[23456
789])|8\.1(?:8[01234589]|[67]\d|9[01]))|6(?:5\.(?:3[23456789]|6[0123]|[45]\d)|6\.20[0123])|85\.(?:19[23456789]|20[01234567])|20\.163)|8(?:4\.(?:6[456789]|9[012345]|[78]\d)|8\.(?:3[23456789]|5[01]|4\d)|9\.(?:1[6789]|3[01]|2\d))|3(?:4\.1(?:[345678]\d|2[89]|9[01])|3\.145)|46\.(?:3[23456789]|6[0123]|[45]\d)|71\.(?:19[23456789]|20[01234567])|5\.15[23]|60\.102)|8\.(?:1(?:8(?:1\.(?:6[456789]|9[012345]|[78]\d)|3\.(?:3[23456789]|6[0123]|[45]\d)|6\.25)|51\.(?:1(?:2[01234567]|5[2345]|[01]\d)|6[456789]|[789]\d)|3\.(?:[023456789]|1[012345]?)|62\.2(?:2[0123]|0[89]|1\d))|2(?:0(?:5\.(?:6[456789]|9[012345]|[78]\d)|\.(?:1[6789]|3[01]|2\d)|4\.[01234567])|3\.(?:3[23456789]|4[01234567]))|4(?:5\.(?:3[23456789]|4[01234567])|8\.(?:1[6789]|3[01]|2\d))|96\.2(?:2[456789]|3\d)|57\.(?:6[456789]|7\d))|2\.(?:2(?:2(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|9\.(?:3[23456789]|6[0123]|[45]\d))|19\.(?:2(?:1[012345]|0\d)|1[23456789]\d)|6\.25)|1(?:71\.(?:6[456789]|9[012345]|[78]\d)|12\.1(?:1[23456789]|2
[01234567])|01\.2(?:0[01234567]|4\d)|60\.44|97\.87)|43\.1(?:5[3456789]|7[56789]|8[01234]|60)|31\.21[23]|67\.16|86\.85)|3\.(?:1(?:0(?:5\.(?:1(?:[24]1|[58]4)|2(?:07|45))|4\.(?:1(?:10|53|76|2)|[39]4|41)|6\.3[2345]|7\.1[6789])|6(?:\.(?:100|213)|9\.25[01])|1(?:0\.136|1\.235)|4(?:2\.244|8\.47)|78\.172)|2(?:0(?:1\.19[23]|0\.167)|2(?:7\.24[01]|8\.145)|3(?:8\.[0123]|\.126)|7\.2(?:3[23]|4[67])|43\.166)|4(?:3\.134|6\.211|1\.38)|0\.(?:14[67]|212))|5\.(?:1(?:4(?:9\.(?:88|90)|\.11[23])|9(?:1\.10[23]|0\.157)|8(?:4\.8[67]|2\.57)|14\.[89]|62\.[67])|2(?:2(?:6\.(?:197|220)|5\.17[6789])|3(?:4\.159|8\.242)|8\.1[01]|\.21[23]|46\.200)|9(?:3\.(?:18[45]|20[89])|5\.15[15])|8(?:8\.(?:19[01]|22[67])|5\.204)|5(?:4\.17[01]|\.161)|7(?:8\.10|4\.8)[89]|43\.128)|4\.(?:1(?:1(?:0\.16[0123]|6\.14[67])|4(?:6\.20[4567]|0\.229)|\.(?:22[01]|184)|26\.(?:193|251)|65\.[45])|2(?:8\.4[4567]|42\.[23]|9\.185)|6(?:0\.2(?:05|42)|3\.14[4567])|5(?:4\.15[6789]|0\.116)|0\.221|44\.4)|6\.32\.2(?:1[6789]|2[0123]))|5(?:7\.2(?:3(?:2
\.(?:1(?:[3456789]|2[01234567]?|[01]\d?)?|(?:[01]?\d?\d|2[0-4]\d|25[0-5])|[23456789]\d?|0)|1\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|26\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|(?:1\.1|9\.2)23|0\.1(?:26|41)|2\.147|5\.190)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|4(?:\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|192\.(?:[06789]|[125]\d?|3[01]?|4[89]?))|(?:8\.(?:1(?:05|78)|248)|(?:0\.17|7\.5)0|3\.(?:135|49))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1\.136\.(?:1[67]|2[27])|6\.185\.2(?:18|54))|7(?:6\.(?:1(?:07\.7[23456789]|12\.8[01234567])|47\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|98\.(?:5[6789]|6[0123]))|8\.(?:159\.1(?:7[6789]|9[01]|8\d)|218\.1(?:4[0123]|2[89]|3\d))|0\.(?:1(?:06|13|20)|67)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1\.25\.190)|1(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.(?:44\.1(?:4[0123]|2[89]|3\d)|232\.1(?:7[012345]|6\d))|6\.19(?:9\.1(?:[345]\d|2[89])|7\.15[23456789])|3\.20\.1(?:[678]\d|9[01]))|2(?:(?:\.(?:[01]?\
d?\d|2[0-4]\d|25[0-5])|8\.1(?:68|99))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|(?:1\.4|9\.7)6\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|2\.202\.(?:1(?:2[01234567]|[01]\d)|9[6789]))|6(?:7\.(?:2(?:8\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|24\.(?:[0456789]|[12]\d?|3[01]?))|97\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|2\.125\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|3(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|4\.(?:1(?:27|72)|2(?:09|3)|33)|2\.(?:145|232)|0\.2(?:01|22)|6\.228|9\.167|8\.43)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|3\.(?:10\.(?:6[89]|7[01])|246\.7[2345])|9\.94\.2(?:2[0123]|0[89]|1\d))|8(?:8\.2(?:47\.(?:135|230)|11\.2[45])|6\.190\.2(?:2[456789]|3[01])))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.0\.0))|0(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|5\.0\.0\.0))\b)/
+header KHOP_SPAMHAUS_DROP X-Spam-Relays-Untrusted =~ /(?-xism: (?:by|ip)=(?:(?:2(?:0(?:4\.(?:1(?:0(?:6\.(?:1(?:[3456789]\d|2[89])|2(?:2[0123]|[01]\d))|7\.208)|87\.(?:2(?:[01234]\d|5[01234])|1(?:5[56789]|[6789]\d))|4(?:7\.2(?:5[012345]|4\d)|\.[01234567])|55\.1(?:4[0123]|2[89]|3\d)|94\.1(?:8[456789]|9[01])|26\.24[45]|30\.167)|2(?:36\.(?:[0456789]|[12]\d?|3[01]?)|25\.(?:159|210))|44\.(?:2(?:0[01234567]|2[456789]|3\d)|19[23456789])|5(?:7\.(?:1[6789]|3[01]|2\d)|2\.255)|89\.224)|5\.(?:1(?:4(?:4\.(?:[023456789]|1(?:[012345]|7[6789]|9[01]|8\d)?)|2\.10[4567])|7(?:5\.1(?:[678]\d|9[01])|2\.24[4567])|37\.(?:[023456789]|1[012345]?)|89\.7[123]|59\.180)|2(?:03\.(?:[0456789]|2(?:[016789]|2[456789]?|5[012345]?|[34]\d?)?|3[01]?|1\d?)|3(?:3\.2(?:2[456789]|3\d)|5\.(?:6[456789]|7\d)|6\.189)|14\.1(?:[345]\d|2[89])))|9\.(?:1(?:4(?:8\.(?:6[456789]|9[012345]|[78]\d)|5\.(?:[0456789]|[12]\d?|3[01]?))|82\.(?:6[456789]|9[012345]|[78]\d)|98\.1(?:7[6789]|9[01]|8\d))|95\.(?:2(?:2[0123]|[01]\d)|19[23456789
])|205\.(?:19[23456789]|2[0123]\d)|51\.(?:3[23456789]|4[01234567]))|6\.(?:2(?:0(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|1\.(?:6[0123]|4[89]|5\d)|9\.(?:9[012345]|8\d))|2(?:7\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|4\.1(?:[678]\d|9[01])))|81\.(?:[0456789]|[12]\d?|3[01]?)|197\.(?:17[567]|2[89]))|7\.(?:18(?:3\.(?:2(?:2[0123]|[01]\d)|19[23456789])|9\.(?:[0456789]|[12]\d?|3[01]?))|22\.(?:2(?:5[012345]|[01234]\d)|19[23456789])|32\.1(?:[345]\d|2[89]))|0\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|22\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|105\.(?:3[23456789]|4[01234567])|3\.1(?:4[0123]|2[89]|3\d))|8\.(?:8(?:1\.1(?:3[6789]|4[0123])|5\.3[23456789])|9(?:3\.1(?:4[456789]|5[01])|0\.[01234567]))|1\.7(?:1\.(?:[023456789]|1[012345]?)|\.2(?:2[0123]|0[89]|1\d))|3\.3(?:1\.8[89]|4\.7[01])|2\.61\.108)|1(?:6\.(?:212\.(?:2(?:2[0123]|[01]\d)|19[23456789])|151\.(?:19[23456789]|20[01234567]))|3\.109\.(?:2(?:2[0123]|0[89]|1\d)|6[456789]|9[6789]|7\d)))|9(?:1\.(?:2(?:1(?:2\.(?:1(?:07|23|35|9
8)|2(?:01|20)|4[15]|65)|3\.(?:1(?:7[45]|21|57)|2(?:17|9)|9[34]|72)|7\.(?:1(?:62|78)|2(?:00|49))|1\.(?:6[4567]|8[89]|9[01])|6\.(?:1(?:22|90|1)|7?3)|0\.17[2345])|0(?:0\.(?:1(?:6[4567]|7[6789])|2(?:4[012389]|5[01]))|9\.(?:1(?:8[346]|4)|(?:[45]|23)8|63)|1\.(?:(?:12)?[4567]|23[6789])|4\.4[01234567]|8\.(?:162|228)|3\.9[2345])|3(?:0\.1(?:4[37]|11)|8\.(?:18[01]|82)|9\.(?:15|24)|6\.12[01]|7\.9[123]|5\.2)|2(?:9\.(?:15[6789]|4[67]|248)|8\.(?:132|39)|0\.(?:62|90)|3\.77)|4(?:0\.16|3\.11)5)|19(?:6\.2(?:1[6789]|3[2345])|3\.1(?:9[2345]|1[01])|5\.(?:25[45]|1[01])|4\.(?:[01]|21[45])|8\.1(?:09|27)|7\.9[6789]))|4\.(?:1(?:5(?:4\.1(?:[345678]\d|2[89]|9[01])|8\.2(?:5[012345]|4\d))|3[01]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|6(?:3\.(?:1(?:4[679]|5[01])|24[0134567])|0\.12[123]|1\.247)|232\.2(?:5[012345]|4[89]))|3\.1(?:20\.(?:3[23456789]|6[0123]|[45]\d)|7(?:5\.2(?:5[012345]|4\d)|4\.164)|68\.(?:2[012345]|1[89])|88\.16[01234567])|5\.(?:21(?:[67]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|5\.14[0123])|64\.(?:3[789]|1
[13]|9[89]))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2\.249\.(?:[0789]|[12345]\d?|6[0123]?))|6(?:4\.(?:1(?:12\.(?:1(?:[012345678]\d?|9[01]?)?|[23456789]\d?|0)|5\.(?:[023456789]|1[012345]?))|44\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|28\.1(?:7[6789]|9[01]|8\d))|7\.21(?:0\.(?:[023456789]|1[012345]?)|[18]\.2(?:2[0123]|0[89]|1\d)|3\.1(?:4[0123]|2[89]|3\d))|2\.1(?:22\.(?:3[23456789]|7[23])|82\.15[23456789])|8\.232\.(?:1(?:1[01]|0\d)|9[6789])|6\.231\.(?:6[456789]|7\d))|8(?:5\.(?:2(?:02\.(?:1(?:9[23456789]|7[012345]|6\d)|20[01234567])|55\.1(?:1[23456789]|2[01234567]))|12(?:0\.9[45]|1\.39))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|4\.22\.(?:1(?:2[01234567]|[01]\d)|9[6789])|8\.135\.(?:1[6789]|3[01]|2\d)|9\.(?:114\.97?|45\.14)|6\.55\.(?:21[01]|140)|1\.22\.15[23])|7(?:9\.1(?:10\.(?:1(?:[678]\d?|9[01]?)|6[0123]|[25]\d|3[01]|4[89])|74\.(?:[0456789]|[12]\d?|3[01]?))|2\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|13\.(?:1[6789]|3[01]|2\d))|8\.3
1\.1(?:8[456789]|9[01]))|3(?:1\.(?:1(?:3(?:1\.2(?:5[012345]|4[89])|5\.[01234567])|(?:4\.10|1\.4)3|84\.242)|42\.1(?:[345]\d|2[89])|222\.20[01234567])|7\.(?:148\.2(?:1[6789]|2[0123])|230\.212|9\.58))|5(?:8\.83\.(?:[89]|1[01])|\.34\.242))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1(?:(?:9(?:9\.(?:2(?:4(?:8\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|6\.(?:21[35]|137)|5\.138)|6\.(?:1(?:2[01234567]|[01]\d)|9[6789])|00\.(?:6[456789]|9[012345]|[78]\d)|30\.(?:6[456789]|10[0123]|[789]\d)|54\.(?:3[23456789]|4[01234567])|12\.(?:1(?:1[01]|0\d)|9[6789]))|1(?:9(?:6\.(?:2(?:2[0123]|[01]\d)|19[23456789])|8\.1(?:8[01234589]|[67]\d|9[01]))|6(?:5\.(?:3[23456789]|6[0123]|[45]\d)|6\.20[0123])|85\.(?:19[23456789]|20[01234567])|20\.163)|8(?:4\.(?:6[456789]|9[012345]|[78]\d)|8\.(?:3[23456789]|5[01]|4\d)|9\.(?:1[6789]|3[01]|2\d))|3(?:4\.1(?:[345678]\d|2[89]|9[01])|3\.145)|46\.(?:3[23456789]|6[0123]|[45]\d)|71\.(?:19[23456789]|20[01234567])|5\.15[23]|60\.102)|8\.(?:1(?:8(?:1\.(?:6[456789]|9[012345]|[78]\d)
|3\.(?:3[23456789]|6[0123]|[45]\d)|6\.25)|51\.(?:1(?:2[01234567]|5[2345]|[01]\d)|6[456789]|[789]\d)|3\.(?:[023456789]|1[012345]?)|62\.2(?:2[0123]|0[89]|1\d))|2(?:0(?:5\.(?:6[456789]|9[012345]|[78]\d)|\.(?:1[6789]|3[01]|2\d)|4\.[01234567])|3\.(?:3[23456789]|4[01234567]))|4(?:5\.(?:3[23456789]|4[01234567])|8\.(?:1[6789]|3[01]|2\d))|96\.2(?:2[456789]|3\d)|57\.(?:6[456789]|7\d))|2\.(?:2(?:2(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|9\.(?:3[23456789]|6[0123]|[45]\d))|19\.(?:2(?:1[012345]|0\d)|1[23456789]\d)|6\.25)|1(?:71\.(?:6[456789]|9[012345]|[78]\d)|12\.1(?:1[23456789]|2[01234567])|01\.2(?:0[01234567]|4\d)|60\.44|97\.87)|43\.1(?:5[3456789]|7[56789]|8[01234]|60)|31\.21[23]|67\.16|86\.85)|3\.(?:1(?:0(?:5\.(?:1(?:[24]1|[58]4)|2(?:07|45))|4\.(?:1(?:10|53|76|2)|[39]4|41)|6\.3[2345]|7\.1[6789])|6(?:\.(?:100|213)|9\.25[01])|1(?:0\.136|1\.235)|4(?:2\.244|8\.47)|78\.172)|2(?:0(?:1\.19[23]|0\.167)|2(?:7\.24[01]|8\.145)|3(?:8\.[0123]|\.126)|7\.2(?:3[23]|4[67])|43\.166)|4(?:3\.13
4|6\.211|1\.38)|0\.(?:14[67]|212))|5\.(?:1(?:4(?:9\.(?:88|90)|\.11[23])|9(?:1\.10[23]|0\.157)|8(?:4\.8[67]|2\.57)|14\.[89]|62\.[67])|2(?:2(?:6\.(?:197|220)|5\.17[6789])|3(?:4\.159|8\.242)|8\.1[01]|\.21[23]|46\.200)|9(?:3\.(?:18[45]|20[89])|5\.15[15])|8(?:8\.(?:19[01]|22[67])|5\.204)|5(?:4\.17[01]|\.161)|7(?:8\.10|4\.8)[89]|43\.128)|4\.(?:1(?:1(?:0\.16[0123]|6\.14[67])|4(?:6\.20[4567]|0\.229)|\.(?:22[01]|184)|26\.(?:193|251)|65\.[45])|2(?:8\.4[4567]|42\.[23]|9\.185)|6(?:0\.2(?:05|42)|3\.14[4567])|5(?:4\.15[6789]|0\.116)|0\.221|44\.4)|6\.32\.2(?:1[6789]|2[0123]))|5(?:7\.2(?:3(?:2\.(?:1(?:[3456789]|2[01234567]?|[01]\d?)?|(?:[01]?\d?\d|2[0-4]\d|25[0-5])|[23456789]\d?|0)|1\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|26\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|(?:1\.1|9\.2)23|0\.1(?:26|41)|2\.147|5\.190)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|4(?:\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|192\.(?:[06789]|[125]\d?|3[01]?|4[89]?))|(?:8\.(?:1
(?:05|78)|248)|(?:0\.17|7\.5)0|3\.(?:135|49))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1\.136\.(?:1[67]|2[27])|6\.185\.2(?:18|54))|7(?:6\.(?:1(?:07\.7[23456789]|12\.8[01234567])|47\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|98\.(?:5[6789]|6[0123]))|8\.(?:159\.1(?:7[6789]|9[01]|8\d)|218\.1(?:4[0123]|2[89]|3\d))|0\.(?:1(?:06|13|20)|67)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1\.25\.190)|1(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.(?:44\.1(?:4[0123]|2[89]|3\d)|232\.1(?:7[012345]|6\d))|6\.19(?:9\.1(?:[345]\d|2[89])|7\.15[23456789])|3\.20\.1(?:[678]\d|9[01]))|2(?:(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|8\.1(?:68|99))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|(?:1\.4|9\.7)6\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|2\.202\.(?:1(?:2[01234567]|[01]\d)|9[6789]))|6(?:7\.(?:2(?:8\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|24\.(?:[0456789]|[12]\d?|3[01]?))|97\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|2\.125\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|3(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|4\.(?:1(?:27|72)|2(?:09|3)|3
3)|2\.(?:145|232)|0\.2(?:01|22)|6\.228|9\.167|8\.43)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|3\.(?:10\.(?:6[89]|7[01])|246\.7[2345])|9\.94\.2(?:2[0123]|0[89]|1\d))|8(?:8\.2(?:47\.(?:135|230)|11\.2[45])|6\.190\.2(?:2[456789]|3[01])))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.0\.0\.0)|06\.0\.0\.0)\b)/
describe KHOP_SPAMHAUS_DROP Relay listed in Spamhaus Don't Route Or Peer List
tflags KHOP_SPAMHAUS_DROP nopublish
score KHOP_SPAMHAUS_DROP 1 0.2 1 0.2
# spam/ham s/o corpus
# 0.0349/0.0029 0.924 20110227@510k
-header KHOP_SPAMHAUS_DROP_LE X-Spam-Relays-External =~ /^[^]]*(?-xism: (?:by|ip)=(?:(?:2(?:0(?:4\.(?:1(?:0(?:6\.(?:1(?:[3456789]\d|2[89])|2(?:2[0123]|[01]\d))|7\.208)|87\.(?:2(?:[01234]\d|5[01234])|1(?:5[56789]|[6789]\d))|4(?:7\.2(?:5[012345]|4\d)|\.[01234567])|55\.1(?:4[0123]|2[89]|3\d)|94\.1(?:8[456789]|9[01])|26\.24[45]|30\.167)|2(?:36\.(?:[0456789]|[12]\d?|3[01]?)|25\.(?:159|210))|44\.(?:2(?:0[01234567]|2[456789]|3\d)|19[23456789])|5(?:7\.(?:1[6789]|3[01]|2\d)|2\.255)|89\.224)|5\.(?:1(?:4(?:4\.(?:[023456789]|1(?:[012345]|7[6789]|9[01]|8\d)?)|2\.10[4567])|7(?:5\.1(?:[678]\d|9[01])|2\.24[4567])|37\.(?:[023456789]|1[012345]?)|89\.7[123]|59\.180)|2(?:03\.(?:[0456789]|2(?:[016789]|2[456789]?|5[012345]?|[34]\d?)?|3[01]?|1\d?)|3(?:3\.2(?:2[456789]|3\d)|5\.(?:6[456789]|7\d)|6\.189)|14\.1(?:[345]\d|2[89])))|9\.(?:1(?:4(?:8\.(?:6[456789]|9[012345]|[78]\d)|5\.(?:[0456789]|[12]\d?|3[01]?))|82\.(?:6[456789]|9[012345]|[78]\d)|98\.1(?:7[6789]|9[01]|8\d))|95\.(?:2(?:2[0123]|[01]\d)|19[
23456789])|205\.(?:19[23456789]|2[0123]\d)|51\.(?:3[23456789]|4[01234567]))|6\.(?:2(?:0(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|1\.(?:6[0123]|4[89]|5\d)|9\.(?:9[012345]|8\d))|2(?:7\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|4\.1(?:[678]\d|9[01])))|81\.(?:[0456789]|[12]\d?|3[01]?)|197\.(?:17[567]|2[89]))|7\.(?:18(?:3\.(?:2(?:2[0123]|[01]\d)|19[23456789])|9\.(?:[0456789]|[12]\d?|3[01]?))|22\.(?:2(?:5[012345]|[01234]\d)|19[23456789])|32\.1(?:[345]\d|2[89]))|0\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|22\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|105\.(?:3[23456789]|4[01234567])|3\.1(?:4[0123]|2[89]|3\d))|8\.(?:8(?:1\.1(?:3[6789]|4[0123])|5\.3[23456789])|9(?:3\.1(?:4[456789]|5[01])|0\.[01234567]))|1\.7(?:1\.(?:[023456789]|1[012345]?)|\.2(?:2[0123]|0[89]|1\d))|3\.3(?:1\.8[89]|4\.7[01])|2\.61\.108)|1(?:6\.(?:212\.(?:2(?:2[0123]|[01]\d)|19[23456789])|151\.(?:19[23456789]|20[01234567]))|3\.109\.(?:2(?:2[0123]|0[89]|1\d)|6[456789]|9[6789]|7\d))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5
])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|9(?:1\.(?:2(?:1(?:2\.(?:1(?:07|23|35|98)|2(?:01|20)|4[15]|65)|3\.(?:1(?:7[45]|21|57)|2(?:17|9)|9[34]|72)|7\.(?:1(?:62|78)|2(?:00|49))|1\.(?:6[4567]|8[89]|9[01])|6\.(?:1(?:22|90|1)|7?3)|0\.17[2345])|0(?:0\.(?:1(?:6[4567]|7[6789])|2(?:4[012389]|5[01]))|9\.(?:1(?:8[346]|4)|(?:[45]|23)8|63)|1\.(?:(?:12)?[4567]|23[6789])|4\.4[01234567]|8\.(?:162|228)|3\.9[2345])|3(?:0\.1(?:4[37]|11)|8\.(?:18[01]|82)|9\.(?:15|24)|6\.12[01]|7\.9[123]|5\.2)|2(?:9\.(?:15[6789]|4[67]|248)|8\.(?:132|39)|0\.(?:62|90)|3\.77)|4(?:0\.16|3\.11)5)|19(?:6\.2(?:1[6789]|3[2345])|3\.1(?:9[2345]|1[01])|5\.(?:25[45]|1[01])|4\.(?:[01]|21[45])|8\.1(?:09|27)|7\.9[6789]))|4\.(?:1(?:5(?:4\.1(?:[345678]\d|2[89]|9[01])|8\.2(?:5[012345]|4\d))|3[01]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|6(?:3\.(?:1(?:4[679]|5[01])|24[0134567])|0\.12[123]|1\.247)|232\.2(?:5[012345]|4[89]))|3\.1(?:20\.(?:3[23456789]|6[0123]|[45]\d)|7(?:5\.2(?:5[012345]|4\d)|4\.164)|68\.(?:2[012345]|1[89])|88\.16[01234567])|5\
.(?:21(?:[67]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|5\.14[0123])|64\.(?:3[789]|1[13]|9[89]))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2\.249\.(?:[0789]|[12345]\d?|6[0123]?))|6(?:4\.(?:1(?:12\.(?:1(?:[012345678]\d?|9[01]?)?|[23456789]\d?|0)|5\.(?:[023456789]|1[012345]?))|44\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|28\.1(?:7[6789]|9[01]|8\d))|7\.21(?:0\.(?:[023456789]|1[012345]?)|[18]\.2(?:2[0123]|0[89]|1\d)|3\.1(?:4[0123]|2[89]|3\d))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2\.1(?:22\.(?:3[23456789]|7[23])|82\.15[23456789])|8\.232\.(?:1(?:1[01]|0\d)|9[6789])|6\.231\.(?:6[456789]|7\d))|8(?:5\.(?:2(?:02\.(?:1(?:9[23456789]|7[012345]|6\d)|20[01234567])|55\.1(?:1[23456789]|2[01234567]))|12(?:0\.9[45]|1\.39))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|4\.22\.(?:1(?:2[01234567]|[01]\d)|9[6789])|8\.135\.(?:1[6789]|3[01]|2\d)|9\.(?:114\.97?|45\.14)|6\.55\.(?:21[01]|140)|1\.22\.15[23])|7(?:9\.1(?:10\.(?:1(?:[678]\d?|9[01]?
)|6[0123]|[25]\d|3[01]|4[89])|74\.(?:[0456789]|[12]\d?|3[01]?))|2\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|13\.(?:1[6789]|3[01]|2\d))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|8\.31\.1(?:8[456789]|9[01]))|3(?:1\.(?:1(?:3(?:1\.2(?:5[012345]|4[89])|5\.[01234567])|(?:4\.10|1\.4)3|84\.242)|42\.1(?:[345]\d|2[89])|222\.20[01234567])|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|7\.(?:148\.2(?:1[6789]|2[0123])|230\.212|9\.58))|5(?:\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|34\.242)|8\.83\.(?:[89]|1[01]))|4\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1(?:(?:9(?:9\.(?:2(?:4(?:8\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|6\.(?:21[35]|137)|5\.138)|6\.(?:1(?:2[01234567]|[01]\d)|9[6789])|00\.(?:6[456789]|9[012345]|[78]\d)|30\.(?:6[456789]|10[0123]|[789]\d)|54\.(?:3[23456789]|4[01234567])|12\.(?:1(?:1[01]|0\d)|9[6789]))|1(?:9(?:6\.(?:2(?:2[0123]|[01]\d)|
19[23456789])|8\.1(?:8[01234589]|[67]\d|9[01]))|6(?:5\.(?:3[23456789]|6[0123]|[45]\d)|6\.20[0123])|85\.(?:19[23456789]|20[01234567])|20\.163)|8(?:4\.(?:6[456789]|9[012345]|[78]\d)|8\.(?:3[23456789]|5[01]|4\d)|9\.(?:1[6789]|3[01]|2\d))|3(?:4\.1(?:[345678]\d|2[89]|9[01])|3\.145)|46\.(?:3[23456789]|6[0123]|[45]\d)|71\.(?:19[23456789]|20[01234567])|5\.15[23]|60\.102)|8\.(?:1(?:8(?:1\.(?:6[456789]|9[012345]|[78]\d)|3\.(?:3[23456789]|6[0123]|[45]\d)|6\.25)|51\.(?:1(?:2[01234567]|5[2345]|[01]\d)|6[456789]|[789]\d)|3\.(?:[023456789]|1[012345]?)|62\.2(?:2[0123]|0[89]|1\d))|2(?:0(?:5\.(?:6[456789]|9[012345]|[78]\d)|\.(?:1[6789]|3[01]|2\d)|4\.[01234567])|3\.(?:3[23456789]|4[01234567]))|4(?:5\.(?:3[23456789]|4[01234567])|8\.(?:1[6789]|3[01]|2\d))|96\.2(?:2[456789]|3\d)|57\.(?:6[456789]|7\d))|2\.(?:2(?:2(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|9\.(?:3[23456789]|6[0123]|[45]\d))|19\.(?:2(?:1[012345]|0\d)|1[23456789]\d)|6\.25)|1(?:71\.(?:6[456789]|9[012345]|[78]\d)|12\.1(?:1[234
56789]|2[01234567])|01\.2(?:0[01234567]|4\d)|60\.44|97\.87)|43\.1(?:5[3456789]|7[56789]|8[01234]|60)|31\.21[23]|67\.16|86\.85)|3\.(?:1(?:0(?:5\.(?:1(?:[24]1|[58]4)|2(?:07|45))|4\.(?:1(?:10|53|76|2)|[39]4|41)|6\.3[2345]|7\.1[6789])|6(?:\.(?:100|213)|9\.25[01])|1(?:0\.136|1\.235)|4(?:2\.244|8\.47)|78\.172)|2(?:0(?:1\.19[23]|0\.167)|2(?:7\.24[01]|8\.145)|3(?:8\.[0123]|\.126)|7\.2(?:3[23]|4[67])|43\.166)|4(?:3\.134|6\.211|1\.38)|0\.(?:14[67]|212))|5\.(?:1(?:4(?:9\.(?:88|90)|\.11[23])|9(?:1\.10[23]|0\.157)|8(?:4\.8[67]|2\.57)|14\.[89]|62\.[67])|2(?:2(?:6\.(?:197|220)|5\.17[6789])|3(?:4\.159|8\.242)|8\.1[01]|\.21[23]|46\.200)|9(?:3\.(?:18[45]|20[89])|5\.15[15])|8(?:8\.(?:19[01]|22[67])|5\.204)|5(?:4\.17[01]|\.161)|7(?:8\.10|4\.8)[89]|43\.128)|4\.(?:1(?:1(?:0\.16[0123]|6\.14[67])|4(?:6\.20[4567]|0\.229)|\.(?:22[01]|184)|26\.(?:193|251)|65\.[45])|2(?:8\.4[4567]|42\.[23]|9\.185)|6(?:0\.2(?:05|42)|3\.14[4567])|5(?:4\.15[6789]|0\.116)|0\.221|44\.4)|6\.32\.2(?:1[6789]|2[0123]))|5(?:7\.2
(?:3(?:2\.(?:1(?:[3456789]|2[01234567]?|[01]\d?)?|(?:[01]?\d?\d|2[0-4]\d|25[0-5])|[23456789]\d?|0)|1\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|26\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|(?:1\.1|9\.2)23|0\.1(?:26|41)|2\.147|5\.190)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|4(?:\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|192\.(?:[06789]|[125]\d?|3[01]?|4[89]?))|(?:8\.(?:1(?:05|78)|248)|(?:0\.17|7\.5)0|3\.(?:135|49))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1\.136\.(?:1[67]|2[27])|6\.185\.2(?:18|54))|7(?:6\.(?:1(?:07\.7[23456789]|12\.8[01234567])|47\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|98\.(?:5[6789]|6[0123]))|8\.(?:159\.1(?:7[6789]|9[01]|8\d)|218\.1(?:4[0123]|2[89]|3\d))|0\.(?:1(?:06|13|20)|67)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1\.25\.190)|1(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.(?:44\.1(?:4[0123]|2[89]|3\d)|232\.1(?:7[012345]|6\d))|6\.19(?:9\.1(?:[345]\d|2[89])|7\.15[23456789])|3\.20\.1(?:[678]\d|9[01]))|2(?:(?:\.(
?:[01]?\d?\d|2[0-4]\d|25[0-5])|8\.1(?:68|99))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|(?:1\.4|9\.7)6\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|2\.202\.(?:1(?:2[01234567]|[01]\d)|9[6789]))|6(?:7\.(?:2(?:8\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|24\.(?:[0456789]|[12]\d?|3[01]?))|97\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|2\.125\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|3(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|4\.(?:1(?:27|72)|2(?:09|3)|33)|2\.(?:145|232)|0\.2(?:01|22)|6\.228|9\.167|8\.43)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|3\.(?:10\.(?:6[89]|7[01])|246\.7[2345])|9\.94\.2(?:2[0123]|0[89]|1\d))|8(?:8\.2(?:47\.(?:135|230)|11\.2[45])|6\.190\.2(?:2[456789]|3[01])))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.0\.0))|0(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|5\.0\.0\.0))\b)/
+header KHOP_SPAMHAUS_DROP_LE X-Spam-Relays-External =~ /^[^]]*(?-xism: (?:by|ip)=(?:(?:2(?:0(?:4\.(?:1(?:0(?:6\.(?:1(?:[3456789]\d|2[89])|2(?:2[0123]|[01]\d))|7\.208)|87\.(?:2(?:[01234]\d|5[01234])|1(?:5[56789]|[6789]\d))|4(?:7\.2(?:5[012345]|4\d)|\.[01234567])|55\.1(?:4[0123]|2[89]|3\d)|94\.1(?:8[456789]|9[01])|26\.24[45]|30\.167)|2(?:36\.(?:[0456789]|[12]\d?|3[01]?)|25\.(?:159|210))|44\.(?:2(?:0[01234567]|2[456789]|3\d)|19[23456789])|5(?:7\.(?:1[6789]|3[01]|2\d)|2\.255)|89\.224)|5\.(?:1(?:4(?:4\.(?:[023456789]|1(?:[012345]|7[6789]|9[01]|8\d)?)|2\.10[4567])|7(?:5\.1(?:[678]\d|9[01])|2\.24[4567])|37\.(?:[023456789]|1[012345]?)|89\.7[123]|59\.180)|2(?:03\.(?:[0456789]|2(?:[016789]|2[456789]?|5[012345]?|[34]\d?)?|3[01]?|1\d?)|3(?:3\.2(?:2[456789]|3\d)|5\.(?:6[456789]|7\d)|6\.189)|14\.1(?:[345]\d|2[89])))|9\.(?:1(?:4(?:8\.(?:6[456789]|9[012345]|[78]\d)|5\.(?:[0456789]|[12]\d?|3[01]?))|82\.(?:6[456789]|9[012345]|[78]\d)|98\.1(?:7[6789]|9[01]|8\d))|95\.(?:2(?:2[0123]|[01]\d)|19[
23456789])|205\.(?:19[23456789]|2[0123]\d)|51\.(?:3[23456789]|4[01234567]))|6\.(?:2(?:0(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|1\.(?:6[0123]|4[89]|5\d)|9\.(?:9[012345]|8\d))|2(?:7\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|4\.1(?:[678]\d|9[01])))|81\.(?:[0456789]|[12]\d?|3[01]?)|197\.(?:17[567]|2[89]))|7\.(?:18(?:3\.(?:2(?:2[0123]|[01]\d)|19[23456789])|9\.(?:[0456789]|[12]\d?|3[01]?))|22\.(?:2(?:5[012345]|[01234]\d)|19[23456789])|32\.1(?:[345]\d|2[89]))|0\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|22\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|105\.(?:3[23456789]|4[01234567])|3\.1(?:4[0123]|2[89]|3\d))|8\.(?:8(?:1\.1(?:3[6789]|4[0123])|5\.3[23456789])|9(?:3\.1(?:4[456789]|5[01])|0\.[01234567]))|1\.7(?:1\.(?:[023456789]|1[012345]?)|\.2(?:2[0123]|0[89]|1\d))|3\.3(?:1\.8[89]|4\.7[01])|2\.61\.108)|1(?:6\.(?:212\.(?:2(?:2[0123]|[01]\d)|19[23456789])|151\.(?:19[23456789]|20[01234567]))|3\.109\.(?:2(?:2[0123]|0[89]|1\d)|6[456789]|9[6789]|7\d)))|9(?:1\.(?:2(?:1(?:2\.(?:1(?:07
|23|35|98)|2(?:01|20)|4[15]|65)|3\.(?:1(?:7[45]|21|57)|2(?:17|9)|9[34]|72)|7\.(?:1(?:62|78)|2(?:00|49))|1\.(?:6[4567]|8[89]|9[01])|6\.(?:1(?:22|90|1)|7?3)|0\.17[2345])|0(?:0\.(?:1(?:6[4567]|7[6789])|2(?:4[012389]|5[01]))|9\.(?:1(?:8[346]|4)|(?:[45]|23)8|63)|1\.(?:(?:12)?[4567]|23[6789])|4\.4[01234567]|8\.(?:162|228)|3\.9[2345])|3(?:0\.1(?:4[37]|11)|8\.(?:18[01]|82)|9\.(?:15|24)|6\.12[01]|7\.9[123]|5\.2)|2(?:9\.(?:15[6789]|4[67]|248)|8\.(?:132|39)|0\.(?:62|90)|3\.77)|4(?:0\.16|3\.11)5)|19(?:6\.2(?:1[6789]|3[2345])|3\.1(?:9[2345]|1[01])|5\.(?:25[45]|1[01])|4\.(?:[01]|21[45])|8\.1(?:09|27)|7\.9[6789]))|4\.(?:1(?:5(?:4\.1(?:[345678]\d|2[89]|9[01])|8\.2(?:5[012345]|4\d))|3[01]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|6(?:3\.(?:1(?:4[679]|5[01])|24[0134567])|0\.12[123]|1\.247)|232\.2(?:5[012345]|4[89]))|3\.1(?:20\.(?:3[23456789]|6[0123]|[45]\d)|7(?:5\.2(?:5[012345]|4\d)|4\.164)|68\.(?:2[012345]|1[89])|88\.16[01234567])|5\.(?:21(?:[67]\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|5\.14[0123])|64\.(?:
3[789]|1[13]|9[89]))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|2\.249\.(?:[0789]|[12345]\d?|6[0123]?))|6(?:4\.(?:1(?:12\.(?:1(?:[012345678]\d?|9[01]?)?|[23456789]\d?|0)|5\.(?:[023456789]|1[012345]?))|44\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|28\.1(?:7[6789]|9[01]|8\d))|7\.21(?:0\.(?:[023456789]|1[012345]?)|[18]\.2(?:2[0123]|0[89]|1\d)|3\.1(?:4[0123]|2[89]|3\d))|2\.1(?:22\.(?:3[23456789]|7[23])|82\.15[23456789])|8\.232\.(?:1(?:1[01]|0\d)|9[6789])|6\.231\.(?:6[456789]|7\d))|8(?:5\.(?:2(?:02\.(?:1(?:9[23456789]|7[012345]|6\d)|20[01234567])|55\.1(?:1[23456789]|2[01234567]))|12(?:0\.9[45]|1\.39))|\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|4\.22\.(?:1(?:2[01234567]|[01]\d)|9[6789])|8\.135\.(?:1[6789]|3[01]|2\d)|9\.(?:114\.97?|45\.14)|6\.55\.(?:21[01]|140)|1\.22\.15[23])|7(?:9\.1(?:10\.(?:1(?:[678]\d?|9[01]?)|6[0123]|[25]\d|3[01]|4[89])|74\.(?:[0456789]|[12]\d?|3[01]?))|2\.(?:50\.(?:2(?:2[0123]|[01]\d)|19[23456789])|13\.(?:1[6789]|3[01]|2\
d))|8\.31\.1(?:8[456789]|9[01]))|3(?:1\.(?:1(?:3(?:1\.2(?:5[012345]|4[89])|5\.[01234567])|(?:4\.10|1\.4)3|84\.242)|42\.1(?:[345]\d|2[89])|222\.20[01234567])|7\.(?:148\.2(?:1[6789]|2[0123])|230\.212|9\.58))|5(?:8\.83\.(?:[89]|1[01])|\.34\.242))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1(?:(?:9(?:9\.(?:2(?:4(?:8\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|6\.(?:21[35]|137)|5\.138)|6\.(?:1(?:2[01234567]|[01]\d)|9[6789])|00\.(?:6[456789]|9[012345]|[78]\d)|30\.(?:6[456789]|10[0123]|[789]\d)|54\.(?:3[23456789]|4[01234567])|12\.(?:1(?:1[01]|0\d)|9[6789]))|1(?:9(?:6\.(?:2(?:2[0123]|[01]\d)|19[23456789])|8\.1(?:8[01234589]|[67]\d|9[01]))|6(?:5\.(?:3[23456789]|6[0123]|[45]\d)|6\.20[0123])|85\.(?:19[23456789]|20[01234567])|20\.163)|8(?:4\.(?:6[456789]|9[012345]|[78]\d)|8\.(?:3[23456789]|5[01]|4\d)|9\.(?:1[6789]|3[01]|2\d))|3(?:4\.1(?:[345678]\d|2[89]|9[01])|3\.145)|46\.(?:3[23456789]|6[0123]|[45]\d)|71\.(?:19[23456789]|20[01234567])|5\.15[23]|60\.102)|8\.(?:1(?:8(?:1\.(?:6[456789]|9[012345]
|[78]\d)|3\.(?:3[23456789]|6[0123]|[45]\d)|6\.25)|51\.(?:1(?:2[01234567]|5[2345]|[01]\d)|6[456789]|[789]\d)|3\.(?:[023456789]|1[012345]?)|62\.2(?:2[0123]|0[89]|1\d))|2(?:0(?:5\.(?:6[456789]|9[012345]|[78]\d)|\.(?:1[6789]|3[01]|2\d)|4\.[01234567])|3\.(?:3[23456789]|4[01234567]))|4(?:5\.(?:3[23456789]|4[01234567])|8\.(?:1[6789]|3[01]|2\d))|96\.2(?:2[456789]|3\d)|57\.(?:6[456789]|7\d))|2\.(?:2(?:2(?:3\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|9\.(?:3[23456789]|6[0123]|[45]\d))|19\.(?:2(?:1[012345]|0\d)|1[23456789]\d)|6\.25)|1(?:71\.(?:6[456789]|9[012345]|[78]\d)|12\.1(?:1[23456789]|2[01234567])|01\.2(?:0[01234567]|4\d)|60\.44|97\.87)|43\.1(?:5[3456789]|7[56789]|8[01234]|60)|31\.21[23]|67\.16|86\.85)|3\.(?:1(?:0(?:5\.(?:1(?:[24]1|[58]4)|2(?:07|45))|4\.(?:1(?:10|53|76|2)|[39]4|41)|6\.3[2345]|7\.1[6789])|6(?:\.(?:100|213)|9\.25[01])|1(?:0\.136|1\.235)|4(?:2\.244|8\.47)|78\.172)|2(?:0(?:1\.19[23]|0\.167)|2(?:7\.24[01]|8\.145)|3(?:8\.[0123]|\.126)|7\.2(?:3[23]|4[67])|43\.166)|4
(?:3\.134|6\.211|1\.38)|0\.(?:14[67]|212))|5\.(?:1(?:4(?:9\.(?:88|90)|\.11[23])|9(?:1\.10[23]|0\.157)|8(?:4\.8[67]|2\.57)|14\.[89]|62\.[67])|2(?:2(?:6\.(?:197|220)|5\.17[6789])|3(?:4\.159|8\.242)|8\.1[01]|\.21[23]|46\.200)|9(?:3\.(?:18[45]|20[89])|5\.15[15])|8(?:8\.(?:19[01]|22[67])|5\.204)|5(?:4\.17[01]|\.161)|7(?:8\.10|4\.8)[89]|43\.128)|4\.(?:1(?:1(?:0\.16[0123]|6\.14[67])|4(?:6\.20[4567]|0\.229)|\.(?:22[01]|184)|26\.(?:193|251)|65\.[45])|2(?:8\.4[4567]|42\.[23]|9\.185)|6(?:0\.2(?:05|42)|3\.14[4567])|5(?:4\.15[6789]|0\.116)|0\.221|44\.4)|6\.32\.2(?:1[6789]|2[0123]))|5(?:7\.2(?:3(?:2\.(?:1(?:[3456789]|2[01234567]?|[01]\d?)?|(?:[01]?\d?\d|2[0-4]\d|25[0-5])|[23456789]\d?|0)|1\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|26\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|(?:1\.1|9\.2)23|0\.1(?:26|41)|2\.147|5\.190)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|4(?:\.(?:(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|192\.(?:[06789]|[125]\d?|3[01]?|4[89]?))|(?
:8\.(?:1(?:05|78)|248)|(?:0\.17|7\.5)0|3\.(?:135|49))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1\.136\.(?:1[67]|2[27])|6\.185\.2(?:18|54))|7(?:6\.(?:1(?:07\.7[23456789]|12\.8[01234567])|47\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|98\.(?:5[6789]|6[0123]))|8\.(?:159\.1(?:7[6789]|9[01]|8\d)|218\.1(?:4[0123]|2[89]|3\d))|0\.(?:1(?:06|13|20)|67)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|1\.25\.190)|1(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0\.(?:44\.1(?:4[0123]|2[89]|3\d)|232\.1(?:7[012345]|6\d))|6\.19(?:9\.1(?:[345]\d|2[89])|7\.15[23456789])|3\.20\.1(?:[678]\d|9[01]))|2(?:(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|8\.1(?:68|99))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|(?:1\.4|9\.7)6\.(?:1(?:2[01234567]|[01]\d)|6[456789]|[789]\d)|2\.202\.(?:1(?:2[01234567]|[01]\d)|9[6789]))|6(?:7\.(?:2(?:8\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|24\.(?:[0456789]|[12]\d?|3[01]?))|97\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|2\.125\.(?:[01]?\d?\d|2[0-4]\d|25[0-5]))|3(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|4\.(?:1(?:27|72)|2(?
:09|3)|33)|2\.(?:145|232)|0\.2(?:01|22)|6\.228|9\.167|8\.43)\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|0(?:\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|3\.(?:10\.(?:6[89]|7[01])|246\.7[2345])|9\.94\.2(?:2[0123]|0[89]|1\d))|8(?:8\.2(?:47\.(?:135|230)|11\.2[45])|6\.190\.2(?:2[456789]|3[01])))\.(?:[01]?\d?\d|2[0-4]\d|25[0-5])|\.0\.0\.0)|06\.0\.0\.0)\b)/
describe KHOP_SPAMHAUS_DROP_LE Relay listed in Spamhaus Don't Route Or Peer List
tflags KHOP_SPAMHAUS_DROP_LE nopublish
score KHOP_SPAMHAUS_DROP_LE 2 0 2 0 # adds to KHOP_SPAMHAUS_DROP
@@ -163,7 +163,7 @@ score KHOP_SPAMHAUS_DROP_LE 2 0 2 0 #
# PSBL-neighbors: any /24 with 73+ (2/7, 29%) IPs in the PSBL (not SpamCop),
# as obtained from rsync://psbl-mirror.surriel.com::psbl/psbl.txt
-header KHOP_PSBL_CIDR24 X-Spam-Relays-Untrusted =~ / (?:by|ip)=(?-xism:\b(?:1(?:0(?:9\.(?:102\.1(?:[38]8|40)|9(?:8\.106|9\.203))|3\.28\.187)|1(?:2\.(?:215\.(?:6[345]|4[45])|79\.36)|7\.242\.(?:144|252))|8(?:6\.12(?:3\.13[35]|\.251)|8\.132\.248|9\.84\.24)|2(?:3\.(?:136\.106|54\.189)|1\.63\.(?:1[6789]|21))|9(?:8\.(?:15\.101|98\.108)|4\.27\.24[012])|30\.193\.14[57]|\.38\.(?:16|24)|77\.47\.106)|4(?:1\.(?:2(?:23\.162|54\.5)|190\.[23])|6\.227\.191)|2(?:1(?:2\.96\.6[45]|7\.76\.69)|00\.85\.23)|9(?:4\.242\.2(?:4[12]|38)|5\.169\.242)|79\.1(?:70\.5[135]|06\.109)|37\.110\.211|59\.97\.232|67\.221\.46|85\.153\.90)\.[012]?\d{1,2}\b)/
+header KHOP_PSBL_CIDR24 X-Spam-Relays-Untrusted =~ / (?:by|ip)=(?-xism:\b(?:1(?:1(?:2\.(?:215\.(?:6[345]|4[45])|79\.36)|7\.24(?:2\.(?:144|252)|1\.144))|8(?:6\.12(?:3\.13[35]|\.251)|8\.132\.248|9\.84\.24)|9(?:8\.(?:15\.101|98\.108)|4\.27\.24[01]|7\.252\.0)|2(?:1\.63\.(?:1[6789]|21)|3\.136\.106|2\.201\.18)|0(?:9\.102\.1(?:[38]8|40)|3\.28\.187)|(?:77\.47\.10|\.38\.1)6|30\.193\.14[57])|4(?:1\.(?:2(?:23\.162|54\.5)|190\.[23])|6\.227\.191)|2(?:1(?:2\.96\.6[45]|7\.76\.69)|00\.85\.23)|9(?:4\.242\.2(?:4[12]|38)|5\.169\.242)|79\.1(?:70\.5[135]|06\.109)|37\.110\.211|67\.221\.46|85\.153\.90)\.[012]?\d{1,2}\b)/
describe KHOP_PSBL_CIDR24 Relay's IP/24 CIDR contains many PSBL hits
tflags KHOP_PSBL_CIDR24 nopublish
score KHOP_PSBL_CIDR24 2 0.6 2 0.6