You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/09/05 08:57:28 UTC
svn commit: r1520230 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Thu Sep 5 06:57:28 2013
New Revision: 1520230
URL: http://svn.apache.org/r1520230
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1520230&r1=1520229&r2=1520230&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Thu Sep 5 06:57:28 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 20130942
+## khop-sc-neighbors.cf v 20130952
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -21,7 +21,7 @@ meta __KHOP_SC_EXCLUSIONS __VIA_ML || __
# http://spamcop.net/w3m?action=map;mask=4294967295;net=0;sort=56
# Due to the massive block size, this rule only examines the last untrusted
-header __KHOP_SC_CIDR8 X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b(?:1(?:8[68]|22)|37)(?:\.[012]?\d{1,2}){3}\b) /
+header __KHOP_SC_CIDR8 X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b(?:1(?:8[68]|13)|37)(?:\.[012]?\d{1,2}){3}\b) /
# and gets cleaned up a bit
meta KHOP_SC_CIDR8 __KHOP_SC_CIDR8 && !__KHOP_SC_EXCLUSIONS
describe KHOP_SC_CIDR8 Relay CIDR /8 is among worst in SpamCop
@@ -101,7 +101,7 @@ score KHOP_SC_TOP_CIDR16 0.6 0.2 0.7 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:7\.239\.107|9\.184\.214|2\.124\.15|6\.112\.66)|0(?:9\.228\.13|3\.30\.7)2|95\.229\.106|21\.54\.54)|8(?:6\.111\.144|2\.207\.51)|61\.175\.223|212\.68\.44)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:7\.239\.107|5\.71\.238|6\.112\.66)|9(?:5\.245\.118|8\.24\.173)|03\.30\.72|21\.54\.54)|2(?:1(?:7\.12\.113|8\.2\.129)|22\.92\.141|\.183\.155)|61\.175\.223)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.6 0 0.6 0
@@ -122,7 +122,7 @@ score KHOP_SC_CIDR24 0.6 0 0.6 0
# 0.4428/0 1.000 20130705@376k resume scores -> .6 0 .6 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:9(?:8\.24\.17[45]|5\.245\.118)|(?:15\.71\.23|03\.20\.)8|25\.60\.156|4\.139\.229|76\.192\.15|87\.4\.111)|9(?:1\.233\.188|0\.150\.9)|2\.183\.155)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:7(?:6\.192\.15|8\.20\.148)|4(?:\.139\.229|1\.0\.61)|98\.24\.17[45]|19\.184\.214|25\.60\.156|87\.4\.111|03\.20\.8)|86\.111\.144|90\.150\.9)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0.5
@@ -142,7 +142,7 @@ score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:1(?:24\.15\.141|70\.181\.99)|216\.86\.253|90\.222\.134)|8\.(?:2(?:17\.180\.116|44\.239\.2)|130\.107\.235|46\.127\.36)|6\.1(?:12\.(?:66\.102|5\.136)|24\.128\.138|93\.90\.26)|(?:0\.164\.70\.21|5\.71\.238\.14)1|7\.(?:131\.158\.34|239\.107\.21)|9\.(?:184\.214\.18|201\.141\.81)|1\.(?:68\.104\.132|30\.77\.129))|9(?:5\.(?:2(?:29\.106\.222|45\.118\.5)|138\.195\.125)|8\.24\.1(?:7(?:4\.16[67]|5\.[234]|3\.80)|80\.91)|0\.(?:107\.140\.77|221\.18\.114|0\.60\.238)|(?:3\.255\.143\.|6\.3\.181\.1)62|2\.1(?:63\.193\.199|57\.58\.136)|4\.11\.24\.156|9\.255\.11\.29)|8(?:4\.(?:22\.(?:1(?:77\.5[12]|1\.23)|2(?:30\.213|7\.171))|82\.(?:53\.1(?:06|1)|179\.117|214\.35))|3\.(?:1(?:36\.146\.110|01\.38\.202)|98\.23\.158)|7\.(?:111\.255\.130|4\.111\.218)|0\.211\.179\.30|9\.3\.25\.146)|2(?:1\.(?:22\.(?:127\.17|34\.166)|78\.119\.193|88\.255\.202)|4\.(?:42\.124\.136|207\.34\.91)|3\.234\.230\.45|5\.75\.235\.127|8\.134\.37\.121)|7(?:7\.(?:39\.193\.109|5\.23
0\.114|69\.8\.50)|3\.200\.90\.196|4\.36\.164\.184|6\.192\.15\.229|8\.20\.148\.11)|4(?:\.(?:139\.229\.3[46]|52\.137\.77|63\.74\.204)|1\.(?:0\.61\.16[56]|105\.65\.10)|8\.223\.59\.187)|0(?:3\.9\.15(?:8\.1(?:47|81)|7\.126)|9\.228\.132\.146|1\.15\.253\.4)|\.(?:2(?:2(?:0\.158\.3|6\.84\.27)|15\.206\.242)|93\.21\.147)|3(?:7\.116\.114\.52|8\.91\.176\.45)|(?:51\.236\.192|68\.62\.178)\.146)|2(?:1(?:1\.(?:1(?:7(?:2\.251\.168|4\.120\.123)|5(?:4\.151\.24|7\.114\.13)3|1(?:1\.250\.177|8\.37\.56))|232\.154\.6)|8\.(?:1(?:5(?:1\.141\.75|8\.3\.1|9\.9\.7)|48\.85\.130)|4\.100\.252|2\.129\.53)|2\.(?:144\.254\.122|247\.140\.71|68\.44\.194)|3\.1(?:64\.18\.147|95\.77\.114)|7\.(?:219\.123\.59|12\.113\.67)|0\.(?:109\.97\.63|51\.44\.199)|9\.2(?:39\.227\.81|55\.77\.42))|0(?:0\.(?:1(?:42\.133\.21|75\.56\.190)|72\.11\.132|222\.4\.90)|2\.(?:71\.136\.200|129\.52\.94|29\.241\.33)|1\.1(?:16\.199\.|8\.107\.2)34|8\.98\.25\.183)|2(?:2\.(?:2(?:00\.186\.1|31\.33\.3)8|74\.20(?:3\.194|0\.2)|92\.141\.155|100\.140\.4|35\.61\.1
96)|1\.214\.2(?:08\.226|21\.148)|0\.68\.224\.45)|\.183\.155\.2)|6(?:1\.(?:1(?:75\.223\.1(?:3[49]|4[12])|33\.125\.162|66\.55\.153|81\.252\.6)|238\.148\.161|55\.156\.210|36\.79\.99)|0\.(?:19(?:1\.142\.233|6\.58\.189|0\.43\.10)|29\.(?:15\.194|75\.142))|4\.(?:1(?:81\.43\.79|91\.34\.51|4\.85\.2)|71\.156\.216)|9\.(?:198\.197\.156|64\.49\.109)|5\.(?:125\.155\.90|60\.15\.184)|2\.141\.37\.85|7\.90\.21\.150)|9(?:1\.2(?:1(?:2\.124\.153|0\.0\.226)|33\.188\.154)|3\.1(?:59\.1(?:60\.164|91\.246)|23\.54\.138)|5\.(?:78\.123\.159|159\.105\.2)|0\.(?:83\.184\.211|150\.9\.38)|4\.77\.199\.148)|8(?:3\.(?:167\.231\.43|238\.208\.55)|(?:4\.17\.27\.24|0\.240\.35\.)5|2\.(?:207\.51\.92|99\.246\.10)|6\.111\.144\.194|7\.103\.197\.93)|5(?:9\.(?:1(?:1\.237\.151|51\.37\.8)|8\.26\.22)|8\.(?:215\.176\.(?:109|210)|150\.97\.242)|4\.216\.223\.122)|4(?:2\.12(?:1\.118\.123|0\.18\.118)|1\.(?:226\.11\.117|137\.24\.4)|9\.2(?:48\.113\.50|18\.46\.81))|7(?:9\.1(?:74\.204\.13|42\.176\.2)4|4\.216\.223\.82|2\.35\.20\.131)|37\.1(?:5
9\.192\.162|23\.98\.115))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:1(?:24\.15\.141|70\.181\.99|68\.141\.5)|216\.86\.253|90\.222\.134)|6\.1(?:12\.(?:66\.102|5\.136)|24\.128\.138|93\.90\.26)|8\.(?:130\.107\.235|244\.239\.2|46\.127\.36)|7\.(?:131\.158\.34|239\.107\.21)|9\.(?:184\.214\.18|201\.141\.81)|1\.(?:68\.104\.132|30\.77\.129)|5\.(?:71\.238\.141|31\.137\.27)|0\.164\.70\.211)|9(?:5\.(?:2(?:29\.106\.222|45\.118\.5)|138\.195\.125)|8\.24\.1(?:7(?:4\.16[67]|5\.[234]|3\.80)|80\.91)|0\.(?:107\.140\.77|221\.18\.114|0\.60\.238)|9\.(?:30\.137\.107|255\.11\.29)|2\.163\.193\.199|4\.11\.24\.156)|8(?:4\.(?:22\.(?:1(?:77\.5[12]|1\.23)|2(?:30\.213|7\.171))|82\.(?:53\.1(?:06|1)|179\.117|214\.35))|3\.(?:1(?:36\.146\.110|01\.38\.202)|98\.23\.158)|0\.211\.179\.30|2\.234\.77\.23|7\.4\.111\.218|9\.3\.25\.146)|2(?:1\.(?:22\.(?:127\.17|34\.166)|134\.238\.129|78\.119\.193)|4\.(?:42\.124\.136|207\.34\.91)|2\.1(?:82\.28\.245|55\.12\.88)|5\.75\.235\.127|8\.134\.37\.121)|7(?:3\.2(?:12\.205\.158|00\.90\.196)|7\.
(?:5\.230\.114|69\.8\.50)|4\.36\.1(?:37\.170|64\.184)|6\.192\.15\.229|8\.20\.148\.11)|4(?:\.(?:52\.137\.(?:54|77)|139\.229\.3[46]|63\.74\.204)|1\.(?:105\.65\.10|0\.61\.166)|4\.76\.136\.228|8\.223\.59\.187)|0(?:(?:9\.228\.132\.14|1\.12\.245\.9)6|3\.9\.15(?:8\.1(?:47|81)|7\.126))|\.(?:2(?:2(?:0\.158\.3|6\.84\.27)|15\.206\.242|09\.163\.3)|93\.21\.147)|3(?:7\.116\.114\.52|8\.91\.176\.45)|68\.62\.178\.146)|2(?:1(?:1\.(?:1(?:7(?:2\.251\.168|4\.120\.123)|5(?:4\.151\.24|7\.114\.13)3|1(?:1\.250\.177|8\.37\.56))|232\.154\.6)|8\.(?:1(?:5(?:1\.141\.75|8\.3\.1|9\.9\.7)|48\.85\.130)|4\.100\.252|2\.129\.53)|2\.(?:1(?:44\.254\.122|56\.44\.134)|247\.140\.71|68\.44\.194)|3\.1(?:32\.241\.13|64\.18\.147|95\.77\.114)|0\.51\.44\.199|7\.12\.113\.67|9\.255\.77\.42)|0(?:0\.(?:1(?:42\.133\.21|75\.56\.190)|72\.11\.132|222\.4\.90)|(?:3\.171\.233\.24|8\.98\.25\.18)3|1\.116\.199\.34|2\.71\.136\.200)|2(?:2\.(?:100\.14(?:0\.4|\.3)|92\.141\.155|231\.33\.38|74\.200\.2)|1\.214\.208\.226|0\.94\.235\.200)|4\.237\.229\.
37|\.183\.155\.2)|6(?:1\.(?:1(?:75\.223\.1(?:3[49]|4[12])|(?:36\.68\.7|81\.252\.)6|66\.55\.153|41\.21\.34)|23(?:1\.218\.234|8\.148\.161)|3(?:8\.186\.117|6\.79\.99))|4\.(?:1(?:81\.43\.79|91\.34\.51|4\.85\.2)|71\.156\.216)|0\.(?:29\.(?:15\.194|75\.142)|191\.142\.233)|9\.(?:198\.197\.156|64\.49\.109)|5\.(?:125\.155\.90|60\.15\.184)|6\.96\.205\.133|2\.141\.37\.85|7\.90\.21\.150)|8(?:(?:(?:1\.15\.172\.1|4\.17\.27\.2)4|0\.70\.2\.18)5|3\.(?:167\.231\.(?:38|43)|238\.208\.55)|2\.(?:117\.194\.229|207\.51\.92)|6\.111\.144\.194|7\.103\.197\.93)|5(?:8\.(?:2(?:15\.176\.(?:109|210)|54\.172\.163)|150\.97\.242)|9\.(?:1(?:1\.237\.151|51\.37\.8|2\.17\.6)|8\.26\.22)|4\.216\.223\.122|\.39\.77\.125)|9(?:(?:1\.233\.188\.15|3\.159\.160\.16)4|5\.(?:78\.123\.159|159\.105\.2)|0\.(?:83\.184\.211|150\.9\.38)|2\.85\.161\.156|4\.77\.199\.148)|4(?:9\.(?:2(?:48\.113\.50|18\.46\.81)|159\.218\.39)|1\.(?:226\.11\.117|137\.24\.4)|2\.120\.18\.118)|7(?:9\.174\.204\.134|4\.216\.223\.82|2\.35\.20\.131)|37\.(?:1(?:59\.192\.
162|23\.98\.115)|59\.238\.178))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work