You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by kh...@apache.org on 2013/05/03 08:57:21 UTC
svn commit: r1478658 -
/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Author: khopesh
Date: Fri May 3 06:57:21 2013
New Revision: 1478658
URL: http://svn.apache.org/r1478658
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1478658&r1=1478657&r2=1478658&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Fri May 3 06:57:21 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 20130522
+## khop-sc-neighbors.cf v 20130532
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -92,7 +92,7 @@ score KHOP_SC_TOP_CIDR16 2.0 0.3 2.0 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:84\.(?:82\.(?:1(?:09|54)|29)|22\.53)|1(?:5\.88\.247|2\.97\.33)|2(?:4\.42\.133|1\.54\.54)|78\.32\.230|03\.30\.72)|65\.(?:181\.127|60\.15)|46\.53\.195|70\.32\.34)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:2\.9(?:0\.197|7\.33)|5\.88\.247)|84\.(?:82\.(?:154|29)|22\.53)|78\.32\.230|03\.30\.72|21\.54\.54)|58\.253\.216|65\.181\.127|46\.53\.195|70\.32\.34)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.1 0 0.1 0
@@ -111,7 +111,7 @@ score KHOP_SC_CIDR24 0.1 0 0.1 0
# 0.4157/0.5009 0.454 20110227 something is wrong here! -> .1 0 .1 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.(?:128\.2|84\.13)|5\.60\.156)|78\.172\.(?:1(?:5[234]|8[36])|229)|12\.9(?:0\.(?:197|90)|7\.33)|99\.180\.113|03\.20\.37)|2(?:08\.82\.114|10\.21\.225|\.139\.178)|58\.25(?:3\.216|4\.168)|98\.139\.44)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:2(?:0\.(?:128\.2|84\.13)|5\.60\.156)|78\.172\.(?:1(?:5[234]|8[36])|229)|12\.9(?:0\.90|7\.33)|99\.180\.113|84\.82\.109|03\.20\.37)|2(?:08\.82\.114|10\.21\.225|\.139\.178)|58\.254\.168|98\.139\.44|65\.60\.15)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0.5
@@ -129,7 +129,7 @@ score KHOP_SC_TOP_CIDR24 2.7 0.5 2.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:2(?:1(?:6\.181\.110|7\.218\.218)|20\.30\.210)|9(?:0\.90\.1[6789]|7\.33\.45)|1(?:21\.163\.147|64\.62\.8))|5\.(?:2(?:49\.63\.164|2\.80\.197)|88\.(?:119\.132|247\.131)|90\.96\.85)|(?:9\.192\.252\.|7\.20\.3\.23)1|4\.141\.253\.14|8\.129\.166\.86|1\.8\.37\.20)|9(?:9\.(?:18(?:0\.113\.(?:1(?:0[12357]|1[136])|99)|9\.108\.124)|2(?:31\.227\.173|55\.11\.29))|5\.(?:1(?:91\.1(?:66\.25|84\.82)|28\.253\.152|38\.195\.125)|29\.81\.30)|3\.255\.143\.63|4\.213\.122\.34|8\.143\.159\.90)|7(?:6\.(?:53\.2(?:0\.1(?:6[59]|70)|33\.76)|31\.207\.186)|3\.(?:2(?:12\.250\.230|00\.90\.196)|192\.144\.105)|4\.36\.1(?:67\.11|39\.8)6|5\.196\.73\.189)|8(?:4\.(?:82\.(?:1(?:09\.14|54\.51)|29\.3[34])|22\.53\.211)|(?:0\.225\.131\.17|1\.164\.3\.2)6|8\.127\.230\.28)|2(?:1\.(?:181\.251\.188|78\.152\.51)|5\.(?:129\.124\.206|63\.65\.45)|3\.110\.194\.207|4\.243\.124\.206)|03\.9\.157\.181|49\.255\.3\.158|61\.58\.203\.93)|2(?:1(?:0\.(?:2(?:1\.225\.2(?:5[01234]|2
[789]|[34]\d)|45\.89\.69)|1(?:18\.26\.183|68\.50\.16)|51\.44\.199)|1\.(?:147\.211\.1|206\.121\.6|33\.121\.19)6|3\.(?:230\.128\.226|81\.164\.57)|7\.1(?:7\.35\.146|98\.3\.238)|8\.2(?:2\.17\.235|\.0\.60)|6\.153\.136\.125|2\.6\.152\.211)|0(?:2\.(?:1(?:31\.237\.134|42\.203\.19)|71\.136\.200|44\.53\.64)|1\.(?:195\.239\.27|22\.7\.225|45\.114\.3)|8\.82\.114\.(?:5[246789]|2[06]|6[02]|36)|0\.(?:142\.133\.21|72\.11\.132)|6\.190\.129\.2[02])|2(?:2\.(?:174\.163\.2|236\.16\.14)|1\.163\.170\.10)|\.139\.178\.81)|6(?:5\.(?:181\.127\.(?:2(?:2[19]|36|49)|1(?:39|40|91))|60\.15\.1(?:73|86))|1\.(?:1(?:64\.42\.158|10\.156\.4|9\.97\.69)|80\.254\.220)|4\.(?:235\.49\.208|15\.155\.49)|6\.(?:96\.213\.138|84\.50\.133)|9\.90\.120\.188)|5(?:8\.2(?:5(?:3\.216\.1(?:3[01245689]|4[023]|28)|4\.168\.(?:5[6789]|6[123]))|32\.221\.43|27\.21\.27)|9\.150\.255\.35)|7(?:0\.32\.34\.(?:7[13578]|69)|6\.74\.186\.237|2\.35\.20\.131|4\.9\.203\.186|9\.188\.87\.18)|8(?:7\.2(?:22\.247\.192|36\.232\.231)|3\.238\.208\.55|4\.54\.
160\.128|6\.34\.38\.16)|9(?:5\.(?:51\.156\.218|71\.126\.175)|1\.121\.(?:184\.131|46\.86))|3(?:7\.20(?:6\.210\.130|3\.17\.232)|1\.210\.47\.230)|41\.137\.24\.4)\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:2\.(?:2(?:1(?:6\.181\.110|7\.218\.218)|20\.30\.210)|9(?:0\.90\.1[6789]|7\.33\.42)|1(?:21\.163\.147|64\.62\.8))|5\.(?:2(?:49\.63\.164|54\.48\.189|2\.80\.197)|88\.(?:119\.132|247\.131)|90\.96\.85)|(?:9\.192\.252\.|7\.20\.3\.23)1|4\.141\.253\.14|8\.129\.166\.86|1\.8\.37\.20)|9(?:9\.(?:18(?:0\.113\.(?:1(?:0[1357]|1[136])|99)|9\.108\.124)|2(?:31\.227\.173|55\.11\.29))|5\.(?:1(?:91\.1(?:66\.25|84\.82)|28\.253\.152|38\.195\.125)|29\.81\.30)|4\.(?:150\.113\.87|213\.122\.34)|8\.143\.159\.90)|7(?:3\.(?:2(?:12\.250\.230|00\.90\.196)|192\.144\.105)|6\.53\.2(?:0\.1(?:69|70)|33\.76)|4\.36\.1(?:67\.11|39\.8)6|5\.196\.73\.189)|8(?:4\.(?:82\.(?:1(?:09\.14|54\.51)|29\.3[34])|22\.(?:108\.1(?:64|80)|53\.211))|0\.178\.42\.250|8\.127\.230\.28|1\.164\.3\.26)|2(?:1\.(?:181\.251\.188|78\.152\.51)|3\.1(?:10\.194\.207|93\.66\.191)|5\.(?:129\.124\.206|63\.65\.45)|4\.243\.124\.206)|03\.9\.157\.181|61\.58\.203\.93|58\.255\.0\.55)|2(?:1(?:0\.(?:2(?
:1\.225\.2(?:5[01234]|2[789]|[34]\d)|45\.89\.69)|1(?:18\.26\.183|68\.50\.16)|91\.133\.143|51\.44\.199)|1\.(?:(?:206\.121\.6|33\.121\.19)6|1(?:06\.90\.165|47\.211\.16))|8\.(?:2(?:2\.17\.235|\.0\.60)|153\.247\.68)|3\.(?:230\.128\.226|81\.164\.57)|7\.1(?:7\.35\.146|98\.3\.238)|6\.153\.136\.125|2\.6\.152\.211)|0(?:8\.(?:82\.114\.(?:2[0167]|5[2468]|6[02]|36)|73\.23\.216)|0\.(?:247\.100\.178|142\.133\.21|72\.11\.132)|2\.(?:142\.203\.19|71\.136\.200|44\.53\.64)|1\.(?:195\.239\.27|22\.7\.225|45\.114\.3)|6\.190\.129\.2[02]|4\.11\.60\.114)|22\.174\.163\.2|\.139\.178\.81)|6(?:5\.(?:181\.12(?:7\.(?:2(?:2[19]|36|49)|191)|6\.164)|60\.15\.1(?:73|86))|1\.(?:1(?:64\.42\.158|10\.156\.4|9\.97\.69)|80\.254\.220)|6\.(?:96\.213\.138|84\.50\.133)|9\.90\.120\.188|4\.15\.155\.49)|5(?:8\.2(?:5(?:3\.216\.1(?:3[01245689]|4[023]|28)|4\.168\.(?:5[6789]|6[123]))|32\.221\.43|27\.21\.27)|9\.150\.255\.35)|7(?:0\.32\.34\.7[3578]|6\.74\.186\.237|2\.35\.20\.131|4\.9\.203\.186|9\.188\.87\.18)|9(?:5\.(?:51\.156\.
218|71\.126\.175)|1\.121\.(?:184\.131|46\.86)|6\.9\.138\.233)|8(?:7\.2(?:22\.247\.192|36\.232\.231)|3\.238\.208\.55|4\.54\.160\.128)|3(?:7\.20(?:6\.210\.130|3\.17\.232)|1\.210\.47\.230)|41\.137\.24\.4)\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work