You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/08/15 08:57:18 UTC
svn commit: r1514182 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Thu Aug 15 06:57:17 2013
New Revision: 1514182
URL: http://svn.apache.org/r1514182
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1514182&r1=1514181&r2=1514182&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Thu Aug 15 06:57:17 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201308142
+## khop-sc-neighbors.cf v 201308152
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -101,7 +101,7 @@ score KHOP_SC_TOP_CIDR16 0.6 0.2 0.7 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:4\.42\.1(?:3[6789]|4[01]|5[24])|8\.244\.239)|9(?:2\.157\.58|0\.0\.60)|37\.135\.82|20\.28\.8)|2(?:12\.26\.134|01\.18\.95)|86\.111\.144|41\.220\.28|61\.55\.156)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:4\.42\.1(?:3[6789]|4[01]|54)|8\.244\.239|6\.112\.66)|7(?:8\.207\.158|6\.192\.15)|9(?:2\.157\.58|0\.0\.60)|87\.4\.111)|54\.235\.106|86\.111\.144|2\.183\.155)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.6 0 0.6 0
@@ -122,7 +122,7 @@ score KHOP_SC_CIDR24 0.6 0 0.6 0
# 0.4428/0 1.000 20130705@376k resume scores -> .6 0 .6 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:1\.249\.1(?:4[26]|50)|4\.42\.13[05])|68\.62\.183|78\.20\.148|98\.24\.175|41\.0\.61)|54\.235\.106|93\.123\.54)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:1\.249\.1(?:4[26]|50)|4\.42\.13[05])|68\.62\.183|78\.20\.148|98\.24\.175|41\.0\.61)|41\.220\.28|93\.123\.54)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0.5
@@ -142,7 +142,7 @@ score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:9(?:0\.(?:1(?:4(?:4\.228\.198|7\.36\.33)|09\.164\.81|81\.113\.2)|2(?:0(?:2\.116\.101|8\.22\.227)|52\.249\.18)|0\.(?:60\.238|19\.82)|82\.89\.156)|2\.(?:1(?:63\.197\.135|98\.106\.162|57\.58\.136)|227\.157\.158)|9\.(?:167\.150\.25|255\.11\.29|59\.63\.10)|8\.(?:24\.175\.[23]|136\.60\.235)|3\.95\.(?:90\.194|69\.58)|4\.126\.140\.247|7\.220\.193\.21|6\.40\.9\.113)|1(?:1\.(?:24(?:9\.1(?:4(?:6\.141|2\.42)|50\.81|65\.57)|0\.106\.103)|30\.77\.129)|8\.(?:(?:69\.205\.20|244\.239\.)2|46\.127\.36)|9\.(?:(?:184\.214\.1|79\.235\.13)8|69\.10\.3)|2\.(?:161\.232\.157|216\.105\.90)|6\.1(?:12\.66\.102|93\.90\.26)|0\.93\.215\.186|3\.130\.70\.113|5\.80\.247\.147|7\.131\.158\.34|4\.42\.130\.22)|8(?:4\.(?:22\.(?:177\.5[12]|230\.213)|82\.53\.1(?:06|1))|3\.(?:1(?:36\.146\.110|01\.38\.202)|98\.23\.158)|0\.(?:149\.96\.1(?:69|70)|211\.179\.30)|7\.(?:111\.255\.130|4\.111\.218)|9\.(?:112\.88\.65|75\.63\.114)|8\.137\.120\.236)|7(?:8\.(?:2(?:0(?:7\.158\.230|\.148\
.11)|10\.36\.222)|150\.174\.97)|7\.(?:5\.230\.114|1\.223\.73|69\.8\.50)|3\.2(?:12\.205\.158|00\.90\.196)|4\.36\.16(?:0\.157|4\.184)|2\.245\.216\.160|6\.192\.15\.229)|2(?:1\.(?:1(?:34\.238\.129|2\.167\.95)|2(?:6\.229\.197|2\.34\.166))|2\.(?:225\.36\.101|154\.57\.20|70\.220\.99)|3\.234\.230\.45|4\.42\.124\.136|5\.39\.163\.161|0\.28\.8\.194)|37\.1(?:1(?:6\.11(?:4\.1(?:13|51)|3\.185)|7\.(?:67\.117|83\.205))|35\.(?:11(?:5\.228|7\.20)|82\.(?:11[28]|99)))|0(?:1\.15\.1(?:12\.244|21\.219)|3\.9\.158\.181|7\.23\.24\.248)|6(?:2\.216\.3\.1[23]|8\.62\.183\.73)|4(?:1\.0\.61\.16[56]|\.52\.137\.54)|\.234\.38\.106)|2(?:1(?:9\.(?:14(?:3\.207\.14|5\.93\.11)0|239\.227\.81|80\.238\.185)|2\.(?:2(?:6\.134\.1|20\.1\.)15|144\.254\.122|6\.152\.211)|8\.(?:2(?:34\.108\.1|\.129\.5)3|4\.100\.252|56\.37\.250)|7\.(?:1(?:2\.113\.67|98\.3\.238)|218\.43\.130)|1\.1(?:74\.120\.123|19\.86\.224|47\.211\.16)|3\.1(?:40\.116\.188|99\.238\.22|32\.241\.7)|0\.(?:45\.117\.249|109\.97\.63)|6\.157\.85\.107)|2(?:1\.(?:2(?:(?:14\.20
8\.22|34\.24\.4)6|\.144\.135)|194\.(?:128\.223|43\.10))|0\.(?:136\.228\.159|227\.90\.238)|2\.2(?:00\.186\.18|9\.45\.27))|0(?:2\.(?:1(?:(?:37\.22\.20|58\.39\.25)0|29\.52\.94)|29\.241\.60|65\.216\.52)|1\.(?:18\.95\.158|45\.114\.3)|0\.113\.187\.242)|4\.1(?:27\.201\.172|82\.136\.146)|\.183\.155\.2)|6(?:1\.(?:1(?:33\.125\.162|47\.112\.104|55\.159\.9|89\.20\.21)|238\.148\.161|55\.156\.210|33\.162\.92|98\.77\.169)|0\.(?:(?:29\.75\.14|8\.63\.5)2|190\.(?:136\.9|43\.1)0)|6\.(?:203\.32\.54|35\.65\.48)|9\.198\.197\.156|5\.125\.155\.90)|8(?:2\.(?:2(?:21\.102\.245|07\.51\.92)|99\.246\.10)|5\.(?:120\.148\.111|234\.22\.126)|6\.111\.144\.194|7\.239\.221\.138|0\.255\.2\.41)|9(?:5\.(?:15(?:4\.106\.18|9\.105\.2)|78\.123\.159)|1\.2(?:12\.124\.153|33\.188\.154|03\.69\.41)|2\.253\.123\.95|3\.123\.54\.138)|4(?:1\.(?:22(?:0\.28\.138|6\.11\.117)|84\.135\.22)|2\.121\.118\.123|6\.105\.31\.6)|5(?:4\.2(?:35\.106\.157|48\.80\.211)|8\.21(?:5\.176\.210|3\.157\.68)|9\.8\.26\.22)|7(?:7\.(?:106\.232\.178|222\.142\.37)
|2\.35\.20\.131)|37\.(?:0\.122\.1(?:27|36)|123\.98\.115|59\.238\.178))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:9(?:0\.(?:1(?:4(?:4\.228\.198|7\.36\.33)|09\.164\.81|81\.113\.2)|2(?:0(?:2\.116\.101|8\.22\.227)|52\.249\.18)|0\.(?:60\.238|19\.82)|82\.89\.156)|2\.(?:1(?:63\.197\.135|98\.106\.162|57\.58\.136)|227\.157\.158)|8\.(?:24\.1(?:75\.[234]|80\.91)|136\.60\.235)|9\.(?:167\.150\.25|59\.63\.10)|3\.95\.(?:90\.194|69\.58)|4\.126\.140\.247|7\.220\.193\.21|6\.40\.9\.113)|1(?:1\.(?:249\.1(?:4(?:6\.141|2\.42)|50\.81|65\.57)|30\.77\.129)|8\.(?:(?:69\.205\.20|244\.239\.)2|46\.127\.36)|9\.(?:(?:184\.214\.1|79\.235\.13)8|69\.10\.3)|6\.1(?:12\.(?:66\.102|5\.136)|93\.90\.26)|3\.13(?:0\.70\.113|2\.128\.85)|0\.93\.215\.186|2\.216\.105\.90|5\.80\.247\.147|7\.131\.158\.34|4\.42\.130\.22)|8(?:3\.(?:136\.146\.110|238\.169\.86|98\.23\.158)|0\.(?:149\.96\.1(?:69|70)|211\.179\.30)|7\.(?:111\.255\.130|4\.111\.218)|4\.22\.(?:177\.5[12]|230\.213)|9\.(?:112\.88\.65|75\.63\.114)|8\.137\.120\.236)|2(?:1\.(?:1(?:34\.238\.129|2\.167\.95)|2(?:6\.229\.197|2\.34\.166))|2
\.(?:180\.96\.110|225\.36\.101|70\.220\.99)|3\.234\.230\.45|4\.42\.124\.136|5\.39\.163\.161|0\.28\.8\.194)|7(?:8\.(?:2(?:0(?:7\.158\.230|\.148\.11)|10\.36\.222)|150\.174\.97)|7\.(?:5\.230\.114|1\.223\.73)|4\.36\.16(?:0\.157|4\.184)|2\.245\.216\.160|3\.200\.90\.196|6\.192\.15\.229)|37\.1(?:1(?:6\.11(?:4\.1(?:13|51)|3\.185)|7\.(?:67\.117|83\.205))|35\.(?:11(?:5\.228|7\.20)|82\.(?:11[28]|99)))|0(?:1\.(?:15\.1(?:12\.244|21\.219)|44\.3\.50)|7\.23\.24\.248)|6(?:2\.216\.3\.1[23]|8\.62\.183\.73)|41\.0\.61\.16[56])|2(?:1(?:9\.(?:14(?:3\.207\.14|5\.93\.11)0|239\.227\.81|80\.238\.185)|2\.(?:2(?:6\.134\.1|20\.1\.)15|144\.254\.122|6\.152\.211)|1\.1(?:(?:57\.114\.13|74\.120\.12)3|19\.86\.224)|7\.(?:1(?:2\.113\.67|98\.3\.238)|218\.43\.130)|3\.1(?:40\.116\.188|99\.238\.22|32\.241\.7)|0\.(?:45\.117\.249|109\.97\.63|51\.3\.42)|8\.(?:4\.100\.252|56\.37\.250|2\.129\.53)|6\.157\.85\.107)|2(?:1\.(?:2(?:(?:14\.208\.22|34\.24\.4)6|\.144\.135)|194\.(?:128\.223|43\.10))|2\.(?:2(?:00\.186\.18|9\.45\.27)|174\.
54\.164)|0\.(?:136\.228\.159|227\.90\.238))|0(?:2\.(?:1(?:37\.22\.200|29\.52\.94)|29\.241\.60|65\.216\.52)|0\.(?:113\.187\.242|247\.100\.178)|3\.239\.45\.202|1\.18\.95\.158)|4\.1(?:27\.201\.172|82\.136\.146)|\.183\.155\.2)|6(?:1\.(?:1(?:8(?:1\.252\.6|9\.20\.21)|33\.125\.162|47\.112\.104|55\.159\.9)|238\.148\.161|55\.156\.210|33\.162\.92|98\.77\.169)|0\.(?:29\.(?:15\.194|75\.142)|190\.(?:136\.9|43\.1)0|8\.63\.52)|(?:9\.198\.197\.15|4\.71\.156\.21)6|6\.(?:203\.32\.54|35\.65\.48)|5\.125\.155\.90)|9(?:5\.(?:7(?:1\.126\.175|8\.123\.159)|15(?:4\.106\.18|9\.105\.2))|1\.2(?:12\.124\.153|33\.188\.154|03\.69\.41)|2\.25(?:5\.235\.21|3\.123\.9)5|0\.83\.184\.211|3\.123\.54\.138)|8(?:2\.(?:2(?:21\.102\.245|07\.51\.92)|99\.246\.10)|5\.(?:120\.148\.111|234\.22\.126)|6\.111\.144\.194|0\.255\.2\.41)|4(?:1\.(?:22(?:0\.28\.138|6\.11\.117)|84\.135\.22)|2\.121\.118\.123|6\.105\.31\.6)|5(?:4\.2(?:35\.106\.157|48\.80\.211)|8\.21(?:5\.176\.210|3\.157\.68)|9\.8\.26\.22)|7(?:7\.(?:106\.232\.178|222\.142\.37)|
2\.35\.20\.131)|37\.(?:0\.122\.1(?:27|36)|123\.98\.115))\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work