You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/04/13 08:57:18 UTC
svn commit: r1467565 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Sat Apr 13 06:57:18 2013
New Revision: 1467565
URL: http://svn.apache.org/r1467565
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1467565&r1=1467564&r2=1467565&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Sat Apr 13 06:57:18 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201304122
+## khop-sc-neighbors.cf v 201304132
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:03\.(?:20\.75|30\.72|9\.156)|1(?:4\.141\.25|2\.97\.3)3|2(?:0\.128\.2|1\.54\.54)|41\.105\.64|76\.31\.36)|5\.39\.2(?:16|20)|222\.236\.16|78\.138\.101)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:4\.(?:141\.25|207\.11)|2\.97\.3)3|2(?:0\.128\.2|1\.54\.54)|03\.(?:30\.72|9\.156)|41\.105\.64|76\.31\.36)|222\.122\.79|67\.222\.145|91\.121\.250|5\.39\.216)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:12\.97\.(?:24|33)|83\.221\.1[23]|78\.33\.144|20\.84\.13)|21(?:7\.2(?:00\.184|3\.1?2)|0\.21\.225)|6(?:6\.199\.228|7\.222\.145)|72\.42\.224|80\.36\.130)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:12\.97\.(?:24|33)|83\.221\.1[23]|78\.33\.144|20\.84\.13)|2(?:1(?:7\.2(?:00\.184|3\.1?2)|0\.21\.225)|08\.82\.114)|66\.199\.228|72\.42\.224|80\.36\.130)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:78\.6\.1(?:31|88)|186\.46\.107|90\.90\.16)|4\.(?:141\.253\.13?4|207\.113\.55)|5\.(?:249\.63\.164|88\.119\.132)|6\.(?:255\.164\.18|90\.162\.116)|8\.(?:219\.232\.24|97\.196\.16)3|9\.1(?:84\.214\.18|93\.93\.25)|7\.20\.3\.231)|9(?:5\.1(?:3(?:8\.195\.125|\.200\.218)|91\.1(?:66\.25|84\.82)|28\.253\.152)|3\.(?:2(?:00\.126\.14|55\.143\.63)|6\.1\.169)|9\.(?:46\.117\.226|255\.11\.29)|2\.69\.200\.118|8\.91\.90\.31)|2(?:1\.(?:1(?:81\.251\.188|58\.198\.76)|22\.127\.17|78\.152\.51|49\.107\.2)|5\.(?:1(?:29\.124\.206|41\.204\.82)|63\.65\.45)|2\.11(?:2\.97\.124|5\.57\.26)|4\.243\.124\.206)|7(?:8\.(?:33\.(?:144\.1(?:4[17]|37)|38\.178)|2(?:07\.158\.230|18\.48\.23))|(?:3\.200\.90\.19|6\.53\.233\.7)6|4\.13(?:7\.168\.212|3\.169\.98))|8(?:8\.(?:1(?:27\.230\.28|68\.46\.53)|252\.0\.237)|0\.2(?:11\.1(?:91\.25|79\.3)0|25\.131\.176)|2\.237\.2\.115|7\.32\.52\.161)|4(?:1\.105\.64\.(?:100|91)|\.63\.74\.204)|(?:06\.241\.3\.21|\.234\.6\.)7)|2(?
:1(?:1\.(?:1(?:47\.211\.16|96\.186\.53|15\.68\.32)|3(?:3\.121\.196|6\.19\.58)|238\.108\.113|99\.212\.154|43\.149\.60)|7\.(?:2(?:3\.(?:2\.1(?:2[5678]|0[47]|3[23]|5[35]|45|61)|12\.1(?:8[02]|96))|00\.184\.87)|17\.35\.146)|3\.(?:2(?:30\.128\.226|51\.186\.229|21\.9\.13)|1(?:71\.39\.154|92\.73\.136|86\.39\.43))|0\.(?:1(?:1(?:8\.26\.183|7\.6\.152)|68\.50\.16)|(?:245\.89\.6|51\.44\.19)9)|8\.(?:232\.111\.227|194\.91\.238|56\.32\.11)|2\.(?:227\.159\.133|6\.152\.211|49\.70\.48)|6\.153\.136\.125|9\.223\.252\.150)|0(?:2\.(?:1(?:42\.203\.19|58\.39\.250|04\.22\.42)|71\.136\.200|53\.13\.187|44\.53\.64)|0\.(?:7(?:2\.11\.132|9\.27\.60)|247\.100\.178|142\.133\.21)|3\.(?:2(?:28\.43\.207|36\.93\.142)|155\.102\.2)|9\.(?:105\.248\.|62\.115\.7)4|1\.(?:22\.7\.225|45\.114\.3)|8\.82\.114\.38)|2(?:2\.(?:1(?:22\.79\.121|74\.163\.2)|23(?:6\.16\.14|7\.5\.193))|1\.(?:214\.208\.226|143\.46\.13)|0\.94\.235\.200))|9(?:3\.(?:15(?:7\.148\.102|9\.160\.164)|89\.225\.96)|4\.2(?:42\.227\.2(?:20|49)|3\.2\.185)|1\.(?
:215\.156\.119|121\.184\.12)|0\.83\.184\.211|5\.51\.156\.218)|7(?:2\.(?:42\.224\.(?:1[13456789]|2[0235])|35\.20\.131|55\.179\.55|9\.150\.200)|4\.(?:122\.227\.124|9\.203\.186)|8\.138\.10(?:1\.12|2\.29)|9\.188\.87\.18)|6(?:6\.(?:199\.228\.2(?:0[345678]|1[01235])|84\.(?:50\.133|49\.9))|1\.(?:1(?:66\.55\.153|9\.97\.69)|98\.131\.141)|9\.90\.120\.188|5\.48\.43\.149)|8(?:(?:0\.36\.130\.13|1\.15\.172\.14|3\.238\.208\.5)5|4\.(?:15\.191\.254|54\.160\.128)|9\.(?:107\.224\.242|42\.216\.55)|2\.186\.161\.252)|5(?:\.39\.2(?:20\.2(?:3[12]|26)|16\.34)|8\.180\.26\.203|9\.150\.255\.35)|4(?:6\.(?:105\.131\.17|32\.235\.64)|9\.128\.40\.70|1\.137\.24\.4)|3(?:7\.(?:122\.208\.18|59\.36\.217)|1\.210\.47\.230))\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:78\.6\.1(?:31|88)|217\.218\.218|186\.46\.107|90\.90\.16)|4\.(?:141\.253\.13?4|207\.113\.55)|5\.(?:249\.63\.164|88\.119\.132)|6\.(?:255\.164\.18|90\.162\.116)|8\.(?:219\.232\.24|97\.196\.16)3|9\.1(?:84\.214\.18|93\.93\.25)|7\.20\.3\.231)|9(?:5\.(?:1(?:3(?:8\.195\.125|\.200\.218)|91\.1(?:66\.25|84\.82)|28\.253\.152)|29\.81\.30)|4\.(?:177\.40\.195|213\.122\.34)|3\.(?:255\.143\.63|6\.1\.169)|0\.104\.199\.148|8\.91\.90\.3[15]|9\.255\.11\.29)|7(?:8\.(?:33\.(?:144\.1(?:4[17]|37)|38\.178)|2(?:07\.158\.230|18\.48\.23))|3\.2(?:00\.90\.196|24\.125\.98)|4\.13(?:7\.168\.212|3\.169\.98)|6\.53\.233\.76)|8(?:8\.(?:1(?:27\.230\.28|68\.46\.53)|252\.0\.237)|0\.2(?:25\.131\.176|11\.179\.30)|7\.(?:32\.52\.161|16\.28\.18)|2\.237\.2\.115)|2(?:1\.(?:181\.251\.188|22\.127\.17|78\.152\.51|49\.107\.2)|(?:4\.243\.124\.20|2\.115\.57\.2)6|5\.1(?:29\.124\.206|41\.204\.82))|4(?:1\.105\.64\.(?:100|91)|\.63\.74\.204)|03\.9\.157\.181|\.234\.6\.7)
|2(?:1(?:7\.(?:2(?:3\.(?:2\.1(?:2[678]|0[47]|33|45|61)|12\.1(?:8[02]|96))|00\.184\.87)|17\.35\.146)|1\.(?:1(?:47\.211\.16|15\.68\.32)|3(?:3\.121\.196|6\.19\.58)|238\.108\.113|99\.212\.154)|3\.(?:1(?:92\.(?:73\.13|3\.6)6|71\.39\.154|86\.39\.43)|2(?:30\.128\.226|21\.9\.13))|0\.(?:1(?:1(?:8\.26\.183|7\.6\.152)|68\.50\.16)|(?:245\.89\.6|51\.44\.19)9)|2\.(?:227\.159\.133|6\.152\.211|49\.70\.48)|8\.(?:232\.111\.227|194\.91\.238)|6\.153\.136\.125|9\.223\.252\.150)|0(?:2\.(?:1(?:42\.203\.19|58\.39\.250|04\.22\.42)|4(?:3\.44\.32|4\.53\.64)|62\.104\.115|71\.136\.200|53\.13\.187)|0\.(?:7(?:2\.11\.132|9\.27\.60)|247\.100\.178|142\.133\.21)|3\.(?:228\.43\.207|155\.102\.2)|9\.(?:105\.248\.|62\.115\.7)4|1\.(?:22\.7\.225|45\.114\.3)|8\.82\.114\.(?:4[02]|38))|2(?:2\.(?:1(?:22\.79\.121|74\.163\.2)|236\.16\.14)|0\.(?:110\.167\.228|94\.235\.200)|1\.(?:214\.208\.226|143\.46\.13)))|9(?:4\.(?:2(?:42\.227\.2(?:20|49)|3\.2\.185)|100\.89\.158)|3\.(?:15(?:7\.148\.102|9\.160\.164)|89\.225\.96)|1\.1(?:2
1\.(?:250\.218|184\.12)|02\.161\.10)|5\.(?:51\.156\.218|48\.24\.10)|0\.83\.184\.211)|6(?:6\.(?:199\.228\.2(?:1[0123456]|0[3578])|84\.(?:50\.133|49\.9))|1\.(?:1(?:66\.55\.153|9\.97\.69)|98\.131\.141)|4\.(?:15\.155\.49|20\.44\.140)|9\.90\.120\.188|5\.48\.43\.149|7\.90\.21\.150)|7(?:2\.(?:42\.224\.(?:1[3456789]|2[02357])|35\.20\.131|55\.179\.55|9\.150\.200)|(?:7\.106\.232\.17|9\.188\.87\.1)8|4\.(?:122\.227\.124|9\.203\.186)|8\.138\.10(?:2\.2[79]|1\.1))|8(?:(?:0\.36\.130\.13|1\.15\.172\.14|3\.238\.208\.5)5|2\.1(?:86\.161\.252|95\.224\.101)|4\.(?:15\.191\.254|54\.160\.128)|9\.(?:107\.224\.242|42\.216\.55))|5(?:8\.180\.26\.203|9\.150\.255\.35|\.39\.216\.34)|3(?:1\.210\.47\.230|7\.59\.36\.217)|4(?:6\.32\.235\.6|1\.137\.24\.)4)\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work