You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2014/02/18 08:57:19 UTC
svn commit: r1569225 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Tue Feb 18 07:57:19 2014
New Revision: 1569225
URL: http://svn.apache.org/r1569225
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1569225&r1=1569224&r2=1569225&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Tue Feb 18 07:57:19 2014
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201402172
+## khop-sc-neighbors.cf v 201402182
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -21,7 +21,7 @@ meta __KHOP_SC_EXCLUSIONS __VIA_ML || __
# http://spamcop.net/w3m?action=map;mask=4294967295;net=0;sort=56
# Due to the massive block size, this rule only examines the last untrusted
-header __KHOP_SC_CIDR8 X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b(?:18[68]|9?5)(?:\.[012]?\d{1,2}){3}\b) /
+header __KHOP_SC_CIDR8 X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b(?:1(?:17|86)|9?5)(?:\.[012]?\d{1,2}){3}\b) /
# and gets cleaned up a bit
meta KHOP_SC_CIDR8 __KHOP_SC_CIDR8 && !__KHOP_SC_EXCLUSIONS
describe KHOP_SC_CIDR8 Relay CIDR /8 is among worst in SpamCop
@@ -101,7 +101,7 @@ score KHOP_SC_TOP_CIDR16 0.6 0.2 0.7 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:0\.183\.179|2\.146\.101)|02\.234\.40|21\.238\.21)|1(?:(?:98\.143\.12|41\.105\.6)8|03\.25\.146|23\.64\.199)|68\.65\.240|5\.255\.64)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:(?:98\.143\.12|41\.105\.6)8|23\.64\.199|84\.22\.53)|2(?:1(?:0\.183\.17|9\.140\.6)9|02\.234\.40)|5(?:8\.251\.146|\.255\.64)|68\.65\.240)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.6 0 0.6 0
@@ -122,7 +122,7 @@ score KHOP_SC_CIDR24 0.6 0 0.6 0
# 0.4428/0 1.000 20130705@376k resume scores -> .6 0 .6 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:9(?:0\.234\.10[56]|8\.143\.150|4\.105\.9)|8(?:1\.66\.15[67]|3\.182\.39)|0(?:3\.25\.14[56]|1\.14\.89)|20\.(?:143\.5|84\.13)|78\.175\.159)|(?:23\.231\.4|79\.124\.5)8|9(?:1\.218\.24|4\.20\.22)4|31\.192\.111|50\.193\.157|68\.65\.252)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:9(?:0\.234\.10[56]|8\.143\.150|4\.105\.9)|8(?:1\.66\.15[67]|3\.182\.39)|0(?:3\.25\.14[56]|1\.14\.89)|20\.(?:143\.5|84\.13))|2(?:12\.146\.101|3\.231\.48)|9(?:1\.218\.24|4\.20\.22)4|50\.(?:193\.157|2\.95)|31\.192\.111|68\.65\.252)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0.5
@@ -142,7 +142,7 @@ score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:8\.(?:1(?:29\.166\.86|42\.19\.172|63\.29\.53|89\.11\.10)|244\.239\.2)|4\.(?:1(?:12\.129\.167|41\.253\.14)|247\.23\.66|32\.177\.77)|2\.(?:216\.(?:86\.253|30\.50)|184\.172\.244)|9\.(?:110\.108\.92|42\.147\.114|73\.225\.13)|6\.(?:112\.66\.102|48\.159\.51)|0\.189\.168\.171|3\.196\.70\.128|5\.88\.119\.132)|9(?:2\.(?:1(?:19\.174\.(?:13|9)|29\.253\.174)|208\.183\.198|3\.46\.236)|3\.(?:1(?:09\.69\.14[79]|11\.62\.157)|238\.111\.26|35\.58\.205)|8\.143\.1(?:50\.2(?:4[789]|5[012]|39)|28\.1(?:32|44))|0\.107\.140\.76|4\.105\.9\.85|7\.253\.6\.68)|8(?:4\.(?:82\.1(?:7(?:1\.234|9\.117)|23\.85)|22\.53\.(?:201|19))|8\.(?:138\.237\.211|20\.27\.174)|2\.172\.22\.5[79]|7\.162\.253\.250|5\.25\.150\.212)|2(?:(?:3\.(?:64\.199\.22|200\.28\.7)|2\.219\.138\.22)7|5\.88\.123\.244|4\.160\.35\.2|0\.50\.86\.3)|0(?:9\.236\.89\.2(?:18|27)|6\.245\.250\.6|1\.14\.89\.0)|7(?:8\.(?:175\.159\.93|248\.43\.106)|3\.212\.205\.158)|59\.224\.80\.43)|2(?:1(?:1\.(?:2(?:1(?:8\
.27\.112|\.100\.250)|3\.152\.19)|176\.76\.198|44\.103\.11)|0\.(?:183\.179\.(?:3[89]|4[45])|2(?:09\.18\.73|8\.96\.54)|48\.156\.227)|9\.(?:14(?:0\.69\.12|7\.172\.)2|92\.57\.210)|2\.(?:146\.101\.154|98\.171\.157)|3\.135\.113\.197)|2(?:1\.(?:2(?:3(?:8\.21\.251|4\.24\.46)|14\.2(?:08\.226|14\.187))|178\.236\.19)|2\.(?:7(?:8\.247\.67|4\.200\.2)|200\.182\.65)|0\.(?:255\.37\.152|68\.224\.45))|0(?:2\.(?:(?:82\.202\.22|64\.73\.14|77\.108\.5)8|1(?:30\.114\.130|97\.68\.201)|234\.40\.41)|3\.23(?:0\.112\.45|9\.45\.202)|0\.206\.12\.250|9\.50\.156\.232)|3\.231\.48\.(?:10|72)|4\.48\.219\.49)|6(?:8\.65\.2(?:5(?:2\.1(?:8[789]|90)|4\.251)|40\.25[023])|0\.(?:190\.92\.234|29\.104\.197)|1\.(?:163\.101\.4|35\.92\.9)2|9\.(?:65\.48\.125|9\.42\.219)|4\.235\.49\.183|7\.210\.247\.25)|5(?:9\.(?:12(?:0\.(?:66\.8|76\.2)3|5\.41\.70)|4\.113\.117)|8\.64\.(?:164\.116|200\.150)|\.255\.64\.2(?:4[689]|50)|0\.193\.157\.62)|9(?:1\.218\.244\.(?:2(?:1[012345678]|0[2349])|1(?:9[1234567]|36))|4\.77\.199\.148)|7(?:7\.(?:106\.232
\.178|89\.162\.82)|4\.122\.196\.16|2\.9\.107\.69|8\.29\.4\.78)|8(?:5\.185\.(?:30\.163|112\.8)|8\.208\.231\.129|4\.203\.244\.50)|4(?:6\.182\.92\.117|9\.128\.43\.241|1\.137\.24\.4)|31\.192\.111\.(?:7[023456789]|[89]\d|100|68))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:4\.(?:1(?:12\.129\.167|41\.253\.14)|247\.23\.66)|9\.(?:110\.108\.92|42\.147\.114|73\.225\.13)|8\.1(?:29\.166\.86|42\.19\.172|89\.11\.10)|2\.(?:184\.172\.244|220\.67\.130)|6\.(?:193\.90\.26|48\.159\.51)|0\.189\.168\.171)|9(?:2\.(?:1(?:19\.174\.(?:13|9)|29\.253\.174)|208\.183\.198|3\.46\.236)|8\.143\.1(?:50\.2(?:4[789]|5[012]|39)|28\.1(?:32|44))|3\.(?:1(?:09\.69\.149|11\.62\.157)|35\.58\.205)|0\.107\.140\.76|4\.105\.9\.85|7\.253\.6\.68)|8(?:4\.(?:82\.1(?:7(?:1\.234|9\.117)|23\.85)|22\.(?:53\.(?:190?|201)|197\.216))|2\.172\.22\.5[79]|5\.25\.150\.212|8\.20\.27\.174)|2(?:2\.(?:219\.138\.227|155\.9\.59)|1\.182\.63\.196|5\.88\.123\.244|3\.200\.28\.77|4\.160\.35\.2|0\.50\.86\.3)|0(?:1\.(?:9\.205\.13|14\.89\.)0|9\.236\.89\.2(?:18|27)|6\.245\.250\.6)|7(?:8\.(?:175\.159\.93|248\.43\.106)|3\.212\.205\.158)|(?:62\.243\.213\.23|59\.224\.80\.4)3)|2(?:1(?:1\.(?:2(?:1(?:8\.27\.112|\.100\.250)|3\.152\.19)|17(?:4\.178\.177|6\.76\.198)|44\.103\.
11)|9\.(?:14(?:0\.69\.12|7\.172\.)2|92\.57\.210)|0\.(?:183\.179\.(?:38|45)|48\.156\.227)|2\.(?:146\.101\.154|98\.171\.157)|3\.135\.113\.197|8\.234\.17\.176)|0(?:2\.(?:(?:82\.202\.22|64\.73\.14|77\.108\.5)8|1(?:30\.114\.130|97\.68\.201)|234\.40\.41)|3\.23(?:0\.112\.45|9\.45\.202)|9\.50\.156\.232)|2(?:1\.(?:214\.2(?:08\.226|14\.187)|178\.236\.19)|2\.(?:200\.182\.65|78\.247\.67)|0\.255\.37\.152)|3\.231\.48\.(?:10|72)|4\.48\.219\.49|\.230\.25\.144)|6(?:8\.65\.2(?:5(?:2\.1(?:8[789]|90)|4\.251)|40\.25[023])|9\.(?:65\.48\.125|9\.42\.219)|0\.190\.92\.234|4\.235\.49\.183|7\.210\.247\.25|1\.35\.92\.92)|5(?:9\.(?:120\.(?:66\.8|76\.2)3|4\.113\.117)|8\.64\.(?:164\.116|200\.150)|\.255\.64\.2(?:4[689]|50)|0\.193\.157\.62)|8(?:8\.208\.2(?:31\.1(?:7[79]|29)|29\.189|09\.31)|5\.185\.(?:30\.163|112\.8)|7\.204\.110\.176|4\.203\.244\.50)|9(?:1\.218\.244\.(?:2(?:1[012345678]|2[23468]|0[2349]|3[34]|40)|1(?:9[124567]|36))|5\.85\.63\.150)|7(?:7\.(?:106\.232\.178|89\.162\.82)|4\.122\.196\.16|2\.9\.107\.69|8\.
29\.4\.78)|4(?:6\.182\.92\.117|9\.128\.43\.241|1\.137\.24\.4)|31\.192\.111\.(?:[789]\d|6[89]|100))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work