You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/05/25 08:57:20 UTC
svn commit: r1486293 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Sat May 25 06:57:20 2013
New Revision: 1486293
URL: http://svn.apache.org/r1486293
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1486293&r1=1486292&r2=1486293&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Sat May 25 06:57:20 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201305242
+## khop-sc-neighbors.cf v 201305252
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -74,7 +74,7 @@ score KHOP_SC_CIDR16 1.0 0.2 1.0 0.2
# crap, still empty 20100410 bad scrape, script failed to populate rule
# crap, still empty 20110227 this is due to safety net exclusions -> 1 .2 1 .2
-header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b178\.127(?:\.[012]?\d{1,2}){2}\b)/
+header KHOP_SC_TOP_CIDR16 Received =~ /(?-xism:\b(?:178\.127|222\.252)(?:\.[012]?\d{1,2}){2}\b)/
describe KHOP_SC_TOP_CIDR16 Relay CIDR /16 leads SpamCop in worst /16s
tflags KHOP_SC_TOP_CIDR16 nopublish
score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0.4
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.128\.2|1\.54\.54)|17\.102\.116|89\.58\.251|03\.30\.72)|2(?:0(?:2\.107\.224|0\.31\.105)|21\.194\.128|10\.21\.225)|6(?:1\.175\.22|0\.8\.6)3|95\.159\.105)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:2(?:0(?:(?:2\.107\.22|8\.82\.11)4|0\.31\.105)|21\.194\.128|17\.198\.3)|1(?:2(?:0\.128\.2|1\.54\.54)|89\.(?:108\.118|58\.251)|03\.30\.72)|87\.236\.232|61\.77\.210)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:12\.9(?:0\.90|7\.33)|78\.151\.68|84\.82\.154|20\.84\.13)|2(?:1(?:7\.12\.248|0\.51\.44)|03\.210\.83|\.139\.178)|(?:61\.77\.21|80\.36\.13)0|42\.121\.127)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:2(?:1(?:0\.(?:21\.225|51\.44)|7\.12\.248)|03\.210\.83|\.139\.178)|1(?:12\.9(?:0\.90|7\.33)|78\.151\.68|84\.82\.154|20\.84\.13)|42\.121\.127|80\.36\.130)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:7\.(?:2(?:11\.91\.147|0\.3\.231)|102\.116\.253)|2\.(?:90\.90\.(?:1[678]|2[01])|185\.80\.100)|3\.(?:1(?:32\.128\.8|07\.43\.7)5|31\.42\.30)|1\.(?:67\.103\.180|93\.108\.194)|8\.(?:129\.166\.86|97\.196\.163)|9\.1(?:61\.161\.188|93\.93\.25)|0\.93\.215\.186|4\.141\.253\.14|5\.88\.119\.132)|8(?:9\.(?:(?:58\.251\.23|75\.63\.11)4|1(?:08\.118\.194|\.181\.53))|4\.82\.(?:1(?:5(?:9\.237|4\.51)|09\.14)|232\.167)|0\.(?:225\.131\.176|159\.216\.41)|8\.127\.230\.28|5\.12\.14\.225|6\.226\.48\.16)|7(?:3\.(?:192\.144\.105|212\.250\.230|45\.114\.86)|8\.(?:1(?:51\.68\.21|68\.43\.13)0|20\.148\.11)|4\.36\.167\.116|7\.137\.0\.123)|9(?:0\.(?:8(?:2\.89\.156|5\.132\.83)|107\.140\.77)|9\.(?:180\.113\.1(?:1[36]|09)|255\.11\.29)|5\.191\.184\.82|4\.9\.15\.13)|0(?:3\.9\.15(?:7\.181|8\.143|6\.89)|8\.(?:174\.202\.78|62\.62\.235)|6\.187\.35\.127|1\.44\.12\.250|9\.195\.23\.55)|2(?:8\.204\.197\.54|0\.50\.86\.3)|33\.242\.115\.44|42\.0\.46\.206|\.34\.158\.12
8)|2(?:0(?:8\.(?:8(?:2\.114\.(?:2[0124679]|3[09]|4[02])|4\.135\.110)|71\.172\.(?:8[579]|9[124]))|0\.(?:7(?:2\.11\.132|9\.27\.60)|142\.133\.21|31\.105\.172|206\.14\.26)|2\.(?:10(?:9\.133\.181|7\.224\.20)|29\.241\.57)|3\.(?:93\.108\.142|210\.83\.23)|4\.13\.169\.3[67]|9\.190\.73\.156|1\.24\.129\.2)|1(?:0\.(?:21\.225\.2(?:3[2589]|4[1257]|52)|5(?:1\.44\.199|6\.23\.100))|7\.1(?:(?:2\.248|98\.3)\.238|1\.177\.26)|9\.(?:143\.207\.14|223\.252\.15)0|6\.15(?:3\.136\.125|8\.66\.190)|1\.1(?:47\.211\.16|15\.68\.32)|8\.(?:56\.37\.250|2\.129\.53)|3\.230\.128\.226|2\.6\.152\.211)|2(?:1\.(?:1(?:94\.128\.22[34]|32\.35\.7)|2(?:32\.247\.27|\.144\.135))|2\.(?:2(?:31\.57\.104|11\.91\.20)|174\.54\.164|92\.112\.66)|3\.(?:4\.(?:179\.153|233\.162)|25\.242\.62)|0\.(?:225\.253\.12|94\.235\.200))|4\.127\.201\.172|7\.50\.140\.133|\.139\.178\.81)|6(?:1\.(?:1(?:(?:33\.125\.16|75\.223\.14)2|6(?:4\.42\.158|6\.55\.153)|87\.186\.150|91\.27\.118|55\.159\.9)|2(?:8\.114\.3[3456]|52\.138\.195)|7(?:7\.210\.75|8\.109\
.61))|6\.(?:199\.22(?:4\.(?:[23457]|11)|7\.19[578])|96\.213\.13[48]|84\.49\.9)|0\.(?:190\.25\.4|8\.63\.5)2|4\.120\.1(?:70\.138|81\.94))|5(?:8\.(?:2(?:54\.168\.(?:5[6789]|6[0123])|13\.157\.68)|151\.149\.118)|9\.(?:34\.57\.88|60\.7\.146)|\.39\.220\.228)|9(?:(?:1\.205\.52\.25|6\.9\.138\.23)3|2\.(?:255\.235\.215|51\.109\.182)|5\.159\.105\.2)|8(?:(?:0\.36\.130\.13|3\.238\.208\.5|4\.17\.27\.24)5|7\.236\.232\.231|2\.99\.246\.10)|72\.(?:42\.224\.(?:[4589]|1[13])|35\.20\.131)|4(?:1\.211\.125\.123|2\.121\.127\.201)|37\.206\.210\.130)\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:7\.(?:2(?:11\.91\.147|0\.3\.231)|102\.116\.253)|2\.(?:90\.90\.(?:1[678]|2[012])|185\.80\.100)|3\.(?:1(?:32\.128\.8|07\.43\.7)5|31\.42\.30)|1\.(?:67\.103\.180|93\.108\.194)|8\.(?:129\.166\.86|97\.196\.163)|9\.1(?:61\.161\.188|93\.93\.25)|0\.93\.215\.186|5\.22\.80\.197)|8(?:9\.(?:(?:58\.251\.23|75\.63\.11)4|1(?:08\.118\.194|\.181\.53))|4\.82\.(?:1(?:5(?:9\.237|4\.51)|09\.14)|232\.167)|0\.(?:225\.131\.176|159\.216\.41)|5\.12\.14\.225|6\.226\.48\.16|8\.252\.0\.237)|9(?:0\.(?:8(?:2\.89\.156|5\.132\.83)|107\.140\.77)|9\.(?:180\.113\.1(?:1[36]|09)|255\.11\.29)|5\.1(?:38\.195\.125|91\.184\.82)|4\.(?:106\.16\.6|9\.15\.13))|0(?:8\.(?:174\.(?:202\.7|62\.16)8|62\.62\.235)|3\.9\.15(?:7\.181|8\.143|6\.89)|6\.187\.35\.127|1\.44\.12\.250|9\.195\.23\.55)|7(?:8\.(?:1(?:51\.68\.21|68\.43\.13)0|20\.148\.11)|3\.(?:192\.144\.105|212\.250\.230)|4\.36\.167\.116|7\.137\.0\.123)|2(?:8\.204\.197\.54|0\.50\.86\.3)|33\.242\.115\.44|42\.0\.46\.206
|\.34\.158\.128)|2(?:0(?:8\.(?:8(?:2\.114\.(?:2[01469]|4[57]|39)|4\.135\.110)|71\.172\.(?:8[4579]|9[1234]))|2\.(?:1(?:0(?:9\.133\.181|7\.224\.20)|42\.203\.19)|71\.136\.200|29\.241\.57)|0\.(?:7(?:2\.11\.132|9\.27\.60)|142\.133\.21|31\.105\.172|206\.14\.26)|3\.(?:2(?:55\.15\.146|10\.83\.23)|93\.108\.142)|4\.13\.169\.3[67]|9\.190\.73\.156|1\.24\.129\.2)|1(?:0\.(?:2(?:1\.225\.2(?:3[259]|4[25]|52)|45\.89\.69)|5(?:1\.44\.199|6\.23\.100))|7\.1(?:(?:2\.248|98\.3)\.238|1\.177\.26)|(?:9\.143\.207\.14|8\.56\.37\.25)0|6\.15(?:3\.136\.125|8\.66\.190)|1\.1(?:47\.211\.16|15\.68\.32)|3\.230\.128\.226|2\.6\.152\.211)|2(?:1\.(?:1(?:94\.128\.22[34]|32\.35\.7)|2(?:32\.247\.27|\.144\.135))|2\.(?:2(?:31\.57\.104|11\.91\.20)|174\.54\.164|92\.112\.66)|3\.(?:4\.(?:179\.153|233\.162)|25\.242\.62)|0\.(?:225\.253\.12|94\.235\.200))|4\.127\.201\.172|7\.50\.140\.133|\.139\.178\.81)|6(?:1\.(?:1(?:6(?:4\.42\.158|6\.55\.153)|75\.223\.142|87\.186\.150|91\.27\.118|55\.159\.9)|2(?:8\.114\.3[3456]|52\.138\.195)
|7(?:7\.210\.75|8\.109\.61))|6\.(?:199\.22(?:4\.(?:[4567]|1?3)|7\.19[78])|96\.213\.13[48]|84\.49\.9)|0\.(?:190\.25\.4|8\.63\.5)2|4\.120\.170\.138|9\.65\.43\.46)|5(?:8\.(?:2(?:54\.168\.(?:5[6789]|6[0123])|13\.157\.68)|151\.149\.118)|9\.(?:34\.57\.88|60\.7\.146)|\.39\.220\.228)|8(?:(?:0\.(?:36\.130\.13|70\.2\.18)|3\.238\.208\.5|4\.17\.27\.24)5|7\.236\.232\.231|2\.99\.246\.10)|9(?:2\.(?:255\.235\.215|51\.109\.182)|1\.205\.52\.253|5\.159\.105\.2)|7(?:2\.(?:42\.224\.(?:[4589]|1[13])|35\.20\.131)|5\.127\.110\.39)|4(?:1\.211\.125\.123|2\.121\.127\.201|6\.182\.24\.130)|37\.206\.210\.130)\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work