khopesh at apache
Aug 10, 2013, 11:57 PM
Post #1 of 1
(8 views)
Permalink
|
|
svn commit: r1512885 - /spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
|
|
Author: khopesh
Date: Sun Aug 11 06:57:14 2013
New Revision: 1512885
URL: http://svn.apache.org/r1512885
Log:
auto-generated rules
Modified:
spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1512885&r1=1512884&r2=1512885&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Sun Aug 11 06:57:14 2013
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf v 201308102
+## khop-sc-neighbors.cf v 201308112
## Khopesh's syndication of SpamCop's top offenders and top offending networks.
##
## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -21,7 +21,7 @@ meta __KHOP_SC_EXCLUSIONS __VIA_ML || __
# http://spamcop.net/w3m?action=map;mask=4294967295;net=0;sort=56
# Due to the massive block size, this rule only examines the last untrusted
-header __KHOP_SC_CIDR8 X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b(?:1(?:1[37]|88)|95)(?:\.[012]?\d{1,2}){3}\b) /
+header __KHOP_SC_CIDR8 X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b(?:1(?:8[68]|17)|95)(?:\.[012]?\d{1,2}){3}\b) /
# and gets cleaned up a bit
meta KHOP_SC_CIDR8 __KHOP_SC_CIDR8 && !__KHOP_SC_EXCLUSIONS
describe KHOP_SC_CIDR8 Relay CIDR /8 is among worst in SpamCop
@@ -101,7 +101,7 @@ score KHOP_SC_TOP_CIDR16 0.6 0.2 0.7 0
# http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:4\.4(?:2\.1(?:3[6789]|4[01]|5[23])|4\.96)|8\.244\.239)|37\.135\.115|78\.207\.158|90\.0\.60)|2(?:01\.18\.9|\.183\.15)5|54\.2(?:35\.106|48\.80)|41\.226\.11|93\.123\.54)\.[012]?\d{1,2}\b)/
+header KHOP_SC_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:4\.42\.1(?:3[6789]|5[234]|4[01])|1\.249\.165)|78\.20(?:7\.15|\.14)8|37\.135\.115)|2(?:1(?:3\.132\.241|2\.26\.134)|01\.18\.95)|54\.235\.106|41\.226\.11|93\.123\.54)\.[012]?\d{1,2}\b)/
describe KHOP_SC_CIDR24 Relay CIDR /24 is among worst in SpamCop
tflags KHOP_SC_CIDR24 nopublish
score KHOP_SC_CIDR24 0.6 0 0.6 0
@@ -122,7 +122,7 @@ score KHOP_SC_CIDR24 0.6 0 0.6 0
# 0.4428/0 1.000 20130705 [at] 376 resume scores -> .6 0 .6 0
-header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:1\.249\.1(?:4[26]|50|65)|4\.42\.13[05])|68\.62\.183|76\.192\.15|41\.0\.61)|86\.111\.144|217\.198\.3)\.[012]?\d{1,2}\b)/
+header KHOP_SC_TOP_CIDR24 Received =~ /(?-xism:\b(?:1(?:1(?:1\.249\.1(?:4[26]|50)|4\.42\.13[05]|8\.244\.239)|68\.62\.183|41\.0\.61|90\.0\.60)|86\.111\.144|217\.198\.3)\.[012]?\d{1,2}\b)/
describe KHOP_SC_TOP_CIDR24 Relay CIDR /24 leads SpamCop in worst /24s
tflags KHOP_SC_TOP_CIDR24 nopublish
score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0.5
@@ -142,7 +142,7 @@ score KHOP_SC_TOP_CIDR24 1.7 0.5 1.7 0
# http://www.spamcop.net/w3m?action=hoshame
-header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:9(?:0\.(?:1(?:4(?:4\.228\.198|7\.36\.33)|07\.140\.77|81\.113\.2)|2(?:02\.116\.101|52\.249\.18)|0\.(?:60\.238|19\.82)|82\.89\.156)|2\.1(?:63\.197\.135|98\.106\.162|57\.58\.136)|3\.(?:95\.(?:90\.194|69\.58)|34\.8\.101)|(?:5\.242\.161\.16|7\.220\.193\.2)1|6\.(?:3\.181\.162|40\.9\.113)|8\.136\.60\.235|9\.255\.11\.29)|1(?:1\.(?:24(?:9\.1(?:4(?:6\.141|2\.42)|50\.81|65\.57)|0\.99\.193)|30\.77\.129)|9\.(?:(?:184\.214\.1|79\.235\.13)8|69\.10\.3)|6\.(?:112\.(?:66\.102|5\.136)|58\.65\.226)|8\.2(?:17\.180\.116|44\.239\.2)|4\.(?:27\.40\.187|42\.130\.22)|0\.93\.215\.186|7\.131\.158\.34)|7(?:7\.(?:1(?:55\.240\.10|\.223\.73)|5\.230\.114|69\.8\.50)|8\.(?:20(?:7\.158\.230|\.148\.11)|150\.174\.97)|3\.2(?:12\.205\.158|42\.113\.185|00\.90\.196)|4\.36\.1(?:6(?:0\.157|4\.184)|37\.170)|6\.192\.15\.229)|8(?:3\.(?:1(?:36\.146\.110|01\.38\.202)|238\.169\.86)|0\.(?:211\.179\.30|92\.170\.173)|7\.4\.(?:111\.21|80\.18)8|4\.82\.53\.1(?:0[69]|1)|9\.112\.88\.65)|
2(?:1\.(?:2(?:2\.(?:127\.17|34\.166)|6\.229\.197)|12\.167\.95)|2\.(?:225\.36\.101|154\.57\.20|70\.220\.99)|3\.234\.230\.45|0\.28\.8\.194)|0(?:1\.(?:15\.121\.219|99\.28\.194)|3\.9\.158\.1(?:10|47|81)|6\.186\.18\.55|7\.23\.24\.248)|37\.1(?:35\.(?:11(?:5\.228|7\.20)|82\.(?:118|99))|1(?:7\.(?:67\.117|74\.115)|6\.113\.185))|4(?:\.(?:(?:52\.137\.5|63\.74\.20)4|220\.56\.66)|1\.0\.61\.16[56]|8\.247\.195\.4)|\.(?:2(?:15\.206\.242|24\.164\.19|34\.38\.106)|168\.39\.189|34\.181\.22)|(?:57\.56\.178\.6|68\.62\.183\.7)3)|2(?:1(?:1\.(?:1(?:40\.207\.100|57\.114\.133|19\.86\.224)|232\.59\.155|87\.190\.186|44\.103\.11)|9\.(?:14(?:3\.244\.170|6\.2\.105)|2(?:39\.227\.8|40\.39\.20)1|80\.238\.185)|8\.(?:1(?:08\.222\.217|92\.175\.84)|2(?:34\.108\.1|\.129\.5)3|4\.100\.252)|7\.(?:1(?:2\.(?:248\.238|113\.67)|98\.3\.238)|218\.43\.130|97\.194\.222)|2\.(?:(?:144\.254\.12|73\.75\.24)2|26\.134\.115|6\.152\.211)|3\.1(?:(?:64\.18\.14|32\.241\.)7|40\.116\.188|99\.238\.22)|0\.(?:45\.117\.249|109\.97\.63|51\.44\.48)|6\
.157\.85\.107)|0(?:2\.(?:1(?:(?:29\.216\.6|37\.22\.20|58\.39\.25)0|09\.133\.181|11\.175\.97|42\.203\.19)|(?:71\.136\.20|29\.241\.6)0|65\.216\.52)|0\.(?:1(?:1(?:3\.187\.2|\.218\.1)42|42\.133\.21)|247\.100\.178)|3\.(?:196\.170\.194|239\.45\.202)|1\.(?:234\.158\.154|18\.95\.158))|2(?:1\.(?:194\.(?:128\.22[34]|43\.10)|214\.208\.226|6\.120\.211)|2\.(?:29\.45\.27|74\.200\.2)|0\.227\.90\.238)|4\.1(?:27\.201\.172|82\.136\.146)|\.183\.155\.2)|6(?:1\.(?:1(?:(?:33\.125\.16|77\.248\.20)2|55\.159\.9|89\.20\.21)|238\.148\.161|55\.156\.210)|0\.(?:2(?:14\.223\.178|9\.75\.142)|190\.43\.10|8\.63\.52)|6\.(?:203\.32\.54|35\.65\.48)|9\.198\.197\.156|5\.125\.155\.90)|8(?:5\.(?:2(?:14\.242\.208|34\.22\.126)|120\.148\.111)|2\.(?:2(?:21\.102\.245|07\.51\.92)|114\.79\.254)|6\.111\.144\.194|7\.239\.221\.138|0\.255\.2\.41)|9(?:5\.15(?:4\.106\.18|9\.105\.2)|1\.212\.124\.153|2\.253\.123\.95|3\.123\.54\.138)|5(?:4\.2(?:35\.106\.157|48\.80\.211)|8\.21(?:5\.176\.210|3\.157\.68))|4(?:6\.(?:229\.192\.208|105\.31\.6)|
1\.22(?:0\.28\.138|6\.11\.117))|7(?:7\.106\.232\.178|2\.35\.20\.131)|37\.59\.238\.178)\b)/
+header KHOP_SC_TOP200 Received =~ /(?-xism:\b(?:1(?:9(?:0\.(?:1(?:4(?:4\.228\.198|7\.36\.33)|09\.164\.81|81\.113\.2)|2(?:0(?:2\.116\.101|8\.22\.227)|52\.249\.18)|0\.(?:60\.238|19\.82)|82\.89\.156)|2\.1(?:63\.197\.135|98\.106\.162|57\.58\.136)|9\.(?:167\.150\.25|255\.11\.29|59\.63\.10)|3\.(?:95\.(?:90\.194|69\.58)|34\.8\.101)|(?:5\.242\.161\.16|7\.220\.193\.2)1|8\.(?:136\.60\.235|24\.175\.3)|6\.(?:3\.181\.162|40\.9\.113))|1(?:1\.(?:249\.1(?:4(?:6\.141|2\.42)|50\.81|65\.57)|30\.77\.129)|9\.(?:(?:184\.214\.1|79\.235\.13)8|69\.10\.3)|6\.(?:112\.(?:66\.102|5\.136)|58\.65\.226)|4\.(?:27\.40\.187|42\.130\.22)|8\.(?:69\.205\.20|244\.239\.)2|0\.93\.215\.186|3\.130\.70\.113|7\.131\.158\.34)|8(?:0\.(?:149\.96\.1(?:69|70)|211\.179\.30|92\.170\.173)|3\.(?:136\.146\.110|238\.169\.86|98\.23\.158)|9\.(?:112\.88\.65|75\.63\.114)|4\.82\.53\.1(?:06|1)|8\.137\.120\.236|7\.4\.111\.218)|7(?:8\.(?:20(?:7\.158\.230|\.148\.11)|150\.174\.97)|7\.(?:5\.230\.114|1\.223\.73|69\.8\.50)|3\.2(?:12\.205\.158|42\.1
13\.185)|4\.36\.16(?:0\.157|4\.184)|6\.192\.15\.229)|2(?:1\.(?:2(?:2\.(?:127\.17|34\.166)|6\.229\.197)|12\.167\.95)|2\.(?:225\.36\.101|154\.57\.20|70\.220\.99)|3\.234\.230\.45|4\.42\.124\.136|0\.28\.8\.194)|0(?:1\.(?:15\.121\.219|99\.28\.194)|3\.9\.158\.1(?:10|47|81)|6\.186\.18\.55|7\.23\.24\.248)|37\.1(?:35\.(?:11(?:5\.228|7\.20)|82\.(?:118|99))|1(?:6\.11(?:3\.185|4\.151)|7\.74\.115))|\.(?:2(?:15\.206\.242|24\.164\.19)|168\.39\.189|34\.181\.22)|4(?:\.(?:220\.56\.66|52\.137\.54)|1\.0\.61\.16[56])|(?:57\.56\.178\.6|68\.62\.183\.7)3)|2(?:1(?:1\.(?:1(?:40\.207\.100|57\.114\.133|19\.86\.224)|87\.190\.186|44\.103\.11)|9\.(?:2(?:39\.227\.8|40\.39\.20)1|14(?:5\.93\.110|6\.2\.105)|80\.238\.185)|8\.(?:1(?:08\.222\.217|92\.175\.84)|4\.100\.252|56\.37\.250|2\.129\.53)|2\.(?:(?:144\.254\.12|73\.75\.24)2|2(?:6\.134\.1|20\.1\.)15)|3\.1(?:(?:64\.18\.14|32\.241\.)7|40\.116\.188|99\.238\.22)|7\.(?:1(?:2\.113\.67|98\.3\.238)|218\.43\.130)|0\.(?:45\.117\.249|109\.97\.63|51\.44\.48)|6\.157\.85\.107)|0(
?:2\.(?:1(?:(?:29\.216\.6|37\.22\.20|58\.39\.25)0|11\.175\.97|42\.203\.19)|(?:71\.136\.20|29\.241\.6)0|65\.216\.52)|0\.(?:11(?:3\.187\.2|\.218\.1)42|247\.100\.178)|1\.(?:234\.158\.154|18\.95\.158))|2(?:1\.(?:2(?:14\.208\.226|\.144\.135)|194\.(?:128\.22[34]|43\.10)|6\.120\.211)|2\.(?:2(?:00\.186\.18|9\.45\.27)|74\.200\.2)|0\.227\.90\.238)|4\.1(?:27\.201\.172|82\.136\.146)|\.183\.155\.2)|6(?:1\.(?:1(?:(?:33\.125\.16|77\.248\.20)2|55\.159\.9|89\.20\.21)|238\.148\.161|55\.156\.210)|0\.(?:2(?:14\.223\.178|9\.75\.142)|190\.(?:136\.9|43\.1)0|8\.63\.52)|6\.(?:203\.32\.54|35\.65\.48)|9\.198\.197\.156|5\.125\.155\.90)|8(?:2\.(?:2(?:21\.102\.245|07\.51\.92)|114\.79\.254|99\.246\.10)|5\.(?:2(?:14\.242\.208|34\.22\.126)|120\.148\.111)|6\.111\.144\.194|7\.239\.221\.138|0\.255\.2\.41)|4(?:1\.(?:22(?:0\.28\.138|6\.11\.117)|84\.135\.22)|6\.(?:229\.192\.208|105\.31\.6)|2\.121\.118\.123)|9(?:5\.(?:15(?:4\.106\.18|9\.105\.2)|78\.123\.159)|1\.212\.124\.153|2\.253\.123\.95|3\.123\.54\.138)|5(?:4\.2(?:35\
.106\.157|48\.80\.211)|8\.21(?:5\.176\.210|3\.157\.68))|(?:77\.106\.232|37\.59\.238)\.178)\b)/
describe KHOP_SC_TOP200 Relay listed in SpamCop top 200 spammer IPs
tflags KHOP_SC_TOP200 nopublish
score KHOP_SC_TOP200 4 0 4 0 # unnecessary if DNSBLs work
|
