khopesh at apache
Aug 9, 2013, 11:57 PM
Post #1 of 1
(10 views)
Permalink
|
|
svn commit: r1512571 - /spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
|
|
Author: khopesh
Date: Sat Aug 10 06:57:16 2013
New Revision: 1512571
URL: http://svn.apache.org/r1512571
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1512571&r1=1512570&r2=1512571&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Sat Aug 10 06:57:16 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 20130892
+## khop-sc-neighbors.cf v 201308102
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -21,7 +21,7 @@ meta __KHOP_SC_EXCLUSIONS __VIA_ML || __
# http://spamcop.net/w3m?action=map;mask=4294967295;net=0;sort=56
# Due to the massive block size, this rule only examines the last untrusted
-header __KHOP_SC_CIDR8 X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b(?:11[37]|9[35])(?:\.[012]?\d{1,2}){3}\b) /
+header __KHOP_SC_CIDR8 X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b(?:1(?:1[37]|88)|95)(?:\.[012]?\d{1,2}){3}\b) /
# and gets cleaned up a bit
meta KHOP_SC_CIDR8 __KHOP_SC_CIDR8 && !__KHOP_SC_EXCLUSIONS
describe KHOP_SC_CIDR8 Relay CIDR /8 is among worst in SpamCop
@@ -101,7 +101,7 @@ score KHOP_SC_TOP_CIDR16 0.6 0.2 0.7 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:4\.4(?:2\.1(?:3[6789]|4[01]|5[23])|4\.96)|9\.184\.214)|9(?:0\.(?:144\.228|0\.60)|3\.34\.8)|37\.135\.115|78\.207\.158|68\.62\.183)|86\.111\.144|217\.198\.3|41\.226\.11)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:4\.4(?:2\.1(?:3[6789]|4[01]|5[23])|4\.96)|8\.244\.239)|37\.135\.115|78\.207\.158|90\.0\.60)|2(?:01\.18\.9|\.183\.15)5|54\.2(?:35\.106|48\.80)|41\.226\.11|93\.123\.54)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.6 0 0.6 0
@@ -122,7 +122,7 @@ score KHOP_SC_CIDR24 0.6 0 0.6 0
# 0.4428/0 1.000 20130705 [at] 376 resume scores -> .6 0 .6 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:1\.249\.1(?:4[26]|50|65)|4\.42\.13[05]|8\.244\.239|2\.97\.24)|76\.192\.15|41\.0\.61)|2\.183\.155|54\.248\.80)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:1\.249\.1(?:4[26]|50|65)|4\.42\.13[05])|68\.62\.183|76\.192\.15|41\.0\.61)|86\.111\.144|217\.198\.3)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0.5
@@ -142,7 +142,7 @@ score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:1(?:1\.(?:24(?:9\.1(?:4(?:6\.141|2\.42)|50\.81|65\.57)|0\.99\.193)|30\.77\.129)|6\.(?:112\.(?:66\.102|5\.136)|58\.65\.226)|8\.2(?:17\.180\.116|44\.239\.2)|4\.(?:27\.40\.187|42\.130\.22)|9\.(?:184\.214\.18|69\.10\.3)|0\.93\.215\.186|5\.156\.236\.13|7\.131\.158\.34)|9(?:0\.(?:1(?:4(?:4\.228\.198|7\.36\.33)|07\.140\.77)|0\.(?:60\.238|19\.82))|2\.(?:1(?:63\.197\.135|98\.106\.162)|228\.102\.102)|3\.(?:95\.(?:90\.194|69\.58)|34\.8\.101)|5\.242\.161\.161|7\.220\.193\.38|6\.3\.181\.162|9\.255\.11\.29|8\.84\.68\.86)|7(?:6\.(?:1(?:00\.110\.74|92\.15\.229)|28\.49\.192)|3\.2(?:12\.205\.158|42\.113\.185|00\.90\.196)|7\.(?:5\.230\.114|1\.223\.73|69\.8\.50)|4\.36\.1(?:6(?:0\.157|4\.184)|37\.170)|8\.20(?:7\.158\.230|\.148\.11))|8(?:3\.(?:1(?:36\.146\.110|01\.38\.202)|238\.169\.86)|0\.(?:211\.17(?:0\.86|9\.30)|92\.170\.173)|8\.(?:127\.230\.28|252\.0\.237)|4\.82\.53\.1(?:06|1)|6\.226\.48\.16|7\.4\.111\.218)|2(?:1\.(?:2(?:2\.(?:127\.17|34\.166)|6\.
229\.197)|1(?:43\.54\.140|2\.167\.95))|5\.(?:209\.110\.226|75\.235\.127)|2\.(?:225\.36\.101|154\.57\.20)|3\.234\.230\.45|0\.28\.8\.194)|4(?:\.(?:(?:52\.137\.5|63\.74\.20)4|220\.56\.66)|8\.2(?:23\.59\.180|47\.195\.4)|1\.0\.61\.16[56])|0(?:1\.(?:15\.121\.219|99\.28\.194)|3\.9\.158\.1(?:10|47|81)|8\.166\.205\.163|6\.186\.18\.55)|\.(?:2(?:15\.206\.242|24\.164\.19|34\.38\.106)|168\.39\.189|34\.181\.22)|37\.1(?:35\.(?:11(?:5\.228|7\.20)|82\.99)|17\.74\.115)|(?:57\.56\.178\.6|68\.62\.183\.7)3)|2(?:1(?:7\.(?:1(?:2\.(?:248\.238|113\.67)|98\.3\.238)|21(?:8\.43\.130|9\.123\.59)|97\.194\.222)|1\.(?:1(?:40\.207\.100|57\.114\.133)|232\.59\.155|87\.190\.186|44\.103\.11)|9\.(?:14(?:3\.244\.170|6\.2\.105)|240\.39\.201|80\.238\.185)|8\.(?:1(?:08\.222\.217|92\.175\.84)|4\.100\.252|2\.129\.53)|0\.(?:51\.44\.(?:199|48)|45\.117\.249|109\.97\.63)|3\.1(?:(?:64\.18\.14|32\.241\.)7|99\.238\.22)|2\.(?:138\.144\.5|6\.152\.211|73\.75\.242))|0(?:2\.(?:1(?:(?:29\.216\.6|58\.39\.25)0|09\.133\.181|11\.175\.97|42\.2
03\.19)|(?:71\.136\.20|29\.241\.6)0|65\.216\.52)|0\.(?:1(?:1(?:3\.187\.2|\.218\.1)42|42\.133\.21)|247\.100\.178)|1\.(?:2(?:34\.158\.154|45\.175\.177)|18\.95\.158)|3\.(?:1(?:96\.170\.194|87\.184\.29)|239\.45\.202)|8\.113\.254\.39)|2(?:1\.(?:19(?:4\.(?:128\.22[34]|43\.10)|2\.134\.91)|214\.208\.226|6\.120\.211)|2\.(?:174\.54\.164|29\.45\.27|74\.200\.2))|(?:4\.127\.201\.17|\.183\.155\.)2)|6(?:1\.(?:1(?:(?:33\.125\.16|77\.248\.20)2|55\.159\.9|89\.20\.21)|238\.148\.161|55\.156\.210)|0\.(?:2(?:14\.223\.178|9\.75\.142)|8\.63\.5[12]|5\.254\.168)|6\.(?:137\.207\.205|203\.32\.54|35\.65\.48)|(?:2\.141\.113\.5|5\.125\.155\.9)0|9\.198\.197\.156)|8(?:2\.(?:2(?:21\.102\.245|07\.51\.92)|114\.79\.254)|5\.2(?:14\.242\.208|34\.22\.126)|6\.111\.144\.194|7\.239\.221\.138|3\.111\.92\.120)|9(?:5\.(?:15(?:4\.106\.18|9\.105\.2)|71\.126\.175)|1\.212\.124\.153|2\.253\.123\.95|3\.123\.54\.138)|4(?:1\.(?:22(?:0\.28\.138|6\.11\.117)|78\.77\.253)|6\.(?:229\.192\.208|105\.31\.6))|5(?:4\.2(?:4(?:7\.19\.145|8\.80\.21
1)|35\.106\.157)|8\.215\.176\.210|9\.8\.26\.22)|7(?:(?:7\.106\.232\.17|9\.188\.87\.1)8|2\.35\.20\.131)|37\.59\.238\.178)\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:9(?:0\.(?:1(?:4(?:4\.228\.198|7\.36\.33)|07\.140\.77|81\.113\.2)|2(?:02\.116\.101|52\.249\.18)|0\.(?:60\.238|19\.82)|82\.89\.156)|2\.1(?:63\.197\.135|98\.106\.162|57\.58\.136)|3\.(?:95\.(?:90\.194|69\.58)|34\.8\.101)|(?:5\.242\.161\.16|7\.220\.193\.2)1|6\.(?:3\.181\.162|40\.9\.113)|8\.136\.60\.235|9\.255\.11\.29)|1(?:1\.(?:24(?:9\.1(?:4(?:6\.141|2\.42)|50\.81|65\.57)|0\.99\.193)|30\.77\.129)|9\.(?:(?:184\.214\.1|79\.235\.13)8|69\.10\.3)|6\.(?:112\.(?:66\.102|5\.136)|58\.65\.226)|8\.2(?:17\.180\.116|44\.239\.2)|4\.(?:27\.40\.187|42\.130\.22)|0\.93\.215\.186|7\.131\.158\.34)|7(?:7\.(?:1(?:55\.240\.10|\.223\.73)|5\.230\.114|69\.8\.50)|8\.(?:20(?:7\.158\.230|\.148\.11)|150\.174\.97)|3\.2(?:12\.205\.158|42\.113\.185|00\.90\.196)|4\.36\.1(?:6(?:0\.157|4\.184)|37\.170)|6\.192\.15\.229)|8(?:3\.(?:1(?:36\.146\.110|01\.38\.202)|238\.169\.86)|0\.(?:211\.179\.30|92\.170\.173)|7\.4\.(?:111\.21|80\.18)8|4\.82\.53\.1(?:0[69]|1)|9\.112\.88\.65)|
2(?:1\.(?:2(?:2\.(?:127\.17|34\.166)|6\.229\.197)|12\.167\.95)|2\.(?:225\.36\.101|154\.57\.20|70\.220\.99)|3\.234\.230\.45|0\.28\.8\.194)|0(?:1\.(?:15\.121\.219|99\.28\.194)|3\.9\.158\.1(?:10|47|81)|6\.186\.18\.55|7\.23\.24\.248)|37\.1(?:35\.(?:11(?:5\.228|7\.20)|82\.(?:118|99))|1(?:7\.(?:67\.117|74\.115)|6\.113\.185))|4(?:\.(?:(?:52\.137\.5|63\.74\.20)4|220\.56\.66)|1\.0\.61\.16[56]|8\.247\.195\.4)|\.(?:2(?:15\.206\.242|24\.164\.19|34\.38\.106)|168\.39\.189|34\.181\.22)|(?:57\.56\.178\.6|68\.62\.183\.7)3)|2(?:1(?:1\.(?:1(?:40\.207\.100|57\.114\.133|19\.86\.224)|232\.59\.155|87\.190\.186|44\.103\.11)|9\.(?:14(?:3\.244\.170|6\.2\.105)|2(?:39\.227\.8|40\.39\.20)1|80\.238\.185)|8\.(?:1(?:08\.222\.217|92\.175\.84)|2(?:34\.108\.1|\.129\.5)3|4\.100\.252)|7\.(?:1(?:2\.(?:248\.238|113\.67)|98\.3\.238)|218\.43\.130|97\.194\.222)|2\.(?:(?:144\.254\.12|73\.75\.24)2|26\.134\.115|6\.152\.211)|3\.1(?:(?:64\.18\.14|32\.241\.)7|40\.116\.188|99\.238\.22)|0\.(?:45\.117\.249|109\.97\.63|51\.44\.48)|6\
.157\.85\.107)|0(?:2\.(?:1(?:(?:29\.216\.6|37\.22\.20|58\.39\.25)0|09\.133\.181|11\.175\.97|42\.203\.19)|(?:71\.136\.20|29\.241\.6)0|65\.216\.52)|0\.(?:1(?:1(?:3\.187\.2|\.218\.1)42|42\.133\.21)|247\.100\.178)|3\.(?:196\.170\.194|239\.45\.202)|1\.(?:234\.158\.154|18\.95\.158))|2(?:1\.(?:194\.(?:128\.22[34]|43\.10)|214\.208\.226|6\.120\.211)|2\.(?:29\.45\.27|74\.200\.2)|0\.227\.90\.238)|4\.1(?:27\.201\.172|82\.136\.146)|\.183\.155\.2)|6(?:1\.(?:1(?:(?:33\.125\.16|77\.248\.20)2|55\.159\.9|89\.20\.21)|238\.148\.161|55\.156\.210)|0\.(?:2(?:14\.223\.178|9\.75\.142)|190\.43\.10|8\.63\.52)|6\.(?:203\.32\.54|35\.65\.48)|9\.198\.197\.156|5\.125\.155\.90)|8(?:5\.(?:2(?:14\.242\.208|34\.22\.126)|120\.148\.111)|2\.(?:2(?:21\.102\.245|07\.51\.92)|114\.79\.254)|6\.111\.144\.194|7\.239\.221\.138|0\.255\.2\.41)|9(?:5\.15(?:4\.106\.18|9\.105\.2)|1\.212\.124\.153|2\.253\.123\.95|3\.123\.54\.138)|5(?:4\.2(?:35\.106\.157|48\.80\.211)|8\.21(?:5\.176\.210|3\.157\.68))|4(?:6\.(?:229\.192\.208|105\.31\.6)|
1\.22(?:0\.28\.138|6\.11\.117))|7(?:7\.106\.232\.178|2\.35\.20\.131)|37\.59\.238\.178)\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work
|
