spamassassin-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From khop...@apache.org
Subject svn commit: r1568739 - /spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
Date Sun, 16 Feb 2014 07:57:17 GMT
Author: khopesh
Date: Sun Feb 16 07:57:17 2014
New Revision: 1568739

URL: http://svn.apache.org/r1568739
Log:
auto-generated rules

Modified:
    spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf

Modified: spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf?rev=1568739&r1=1568738&r2=1568739&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/khopesh/20_khop_sc_bug_6114.cf Sun Feb 16 07:57:17
2014
@@ -1,4 +1,4 @@
-## khop-sc-neighbors.cf	v 201402152
+## khop-sc-neighbors.cf	v 201402162
 ## Khopesh's syndication of SpamCop's top offenders and top offending networks.
 ## 
 ## Spamassassin rules written by Adam Katz <antispamATkhopiscom>
@@ -21,7 +21,7 @@ meta	__KHOP_SC_EXCLUSIONS	__VIA_ML || __
 
 # http://spamcop.net/w3m?action=map;mask=4294967295;net=0;sort=56
 # Due to the massive block size, this rule only examines the last untrusted
-header __KHOP_SC_CIDR8  X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b(?:(?:18|4)6|9?5)(?:\.[012]?\d{1,2}){3}\b)
/
+header __KHOP_SC_CIDR8  X-Spam-Relays-Untrusted =~ /^[^\]]* (?:by|ip)=(?-xism:\b(?:18[68]|9?5)(?:\.[012]?\d{1,2}){3}\b)
/
 # and gets cleaned up a bit
 meta	 KHOP_SC_CIDR8	__KHOP_SC_CIDR8 && !__KHOP_SC_EXCLUSIONS
 describe KHOP_SC_CIDR8  Relay CIDR /8 is among worst in SpamCop
@@ -81,7 +81,7 @@ score	 KHOP_SC_CIDR16  0.4 0.1 0.4 0.1
 # crap, still empty   20130629@465k net
 # crap, still empty   20130705@376k net. lowering for low vol -> .4 .1 .4 .1
 
-header	 KHOP_SC_TOP_CIDR16  Received =~ /(?-xism:\b121\.88(?:\.[012]?\d{1,2}){2}\b)/
+header	 KHOP_SC_TOP_CIDR16  Received =~ /___ FAILED TO POPULATE ___/
 describe KHOP_SC_TOP_CIDR16  Relay CIDR /16 leads SpamCop in worst /16s
 tflags	 KHOP_SC_TOP_CIDR16  nopublish
 score	 KHOP_SC_TOP_CIDR16  0.6 0.2 0.7 0.3
@@ -101,7 +101,7 @@ score	 KHOP_SC_TOP_CIDR16  0.6 0.2 0.7 0
 
 
 # http://spamcop.net/w3m?action=map;net=cmaxcnt;mask=65535;sort=spamcnt
-header	 KHOP_SC_CIDR24  Received =~ /(?-xism:\b(?:2(?:(?:21\.214\.20|3\.231\.4)8|10\.183\.179)|1(?:2(?:8\.140\.21|3\.64\.19)9|16\.112\.66)|6(?:0\.29\.104|8\.65\.240)|37\.48\.66|5\.255\.64)\.[012]?\d{1,2}\b)/
+header	 KHOP_SC_CIDR24  Received =~ /(?-xism:\b(?:1(?:(?:78\.175\.15|23\.64\.19)9|(?:98\.143\.12|41\.105\.6)8)|2(?:(?:21\.214\.20|3\.231\.4)8|10\.183\.179|02\.234\.40)|68\.65\.240|5\.255\.64)\.[012]?\d{1,2}\b)/
 describe KHOP_SC_CIDR24  Relay CIDR /24 is among worst in SpamCop
 tflags	 KHOP_SC_CIDR24  nopublish
 score	 KHOP_SC_CIDR24  0.6 0 0.6 0
@@ -122,7 +122,7 @@ score	 KHOP_SC_CIDR24  0.6 0 0.6 0
 # 0.4428/0      1.000 20130705@376k  resume scores -> .6 0 .6 0
 
 
-header	 KHOP_SC_TOP_CIDR24  Received =~ /(?-xism:\b(?:1(?:9(?:8\.143\.1(?:28|50)|0\.234\.10[56])|8(?:1\.66\.15[67]|3\.182\.39)|03\.25\.14[56]|20\.143\.5)|(?:221\.238\.2|31\.192\.11)1|6(?:1\.163\.101|8\.65\.252)|9(?:3\.115\.85|4\.20\.224)|50\.193\.157|79\.124\.58)\.[012]?\d{1,2}\b)/
+header	 KHOP_SC_TOP_CIDR24  Received =~ /(?-xism:\b(?:1(?:9(?:0\.234\.10[56]|8\.143\.150|4\.105\.9)|8(?:1\.66\.15[67]|3\.182\.39)|0(?:3\.25\.14[56]|1\.14\.89)|20\.143\.5)|(?:221\.238\.2|31\.192\.11)1|9(?:1\.218\.24|4\.20\.22)4|50\.193\.157|68\.65\.252|79\.124\.58)\.[012]?\d{1,2}\b)/
 describe KHOP_SC_TOP_CIDR24  Relay CIDR /24 leads SpamCop in worst /24s
 tflags	 KHOP_SC_TOP_CIDR24  nopublish
 score	 KHOP_SC_TOP_CIDR24  1.7 0.5 1.7 0.5
@@ -142,7 +142,7 @@ score	 KHOP_SC_TOP_CIDR24  1.7 0.5 1.7 0
 
 
 # http://www.spamcop.net/w3m?action=hoshame
-header	 KHOP_SC_TOP200  Received =~ /(?-xism:\b(?:1(?:1(?:4\.(?:1(?:12\.129\.167|41\.253\.14)|247\.23\.66|32\.177\.77|4\.31\.90)|8\.(?:1(?:29\.166\.86|42\.19\.172|63\.29\.53)|244\.239\.2|46\.127\.36)|2\.(?:1(?:48\.206\.195|84\.172\.244)|216\.(?:86\.253|30\.50))|6\.(?:112\.66\.102|48\.159\.51)|0\.189\.168\.171|3\.196\.70\.128|5\.88\.119\.132|9\.42\.147\.114)|9(?:2\.(?:1(?:19\.174\.(?:13|9)|29\.253\.174)|208\.183\.198|3\.46\.236)|3\.(?:1(?:09\.69\.14[79]|11\.62\.157)|238\.111\.26|35\.58\.205)|8\.143\.1(?:50\.2(?:4[0789]|5[012]|39)|28\.1(?:32|44))|(?:5\.205\.237\.1|4\.105\.9\.8)5|0\.107\.140\.76|7\.253\.6\.68)|8(?:(?:0\.67\.207\.16|5\.25\.150\.21)2|4\.(?:107\.159\.154|82\.123\.85)|8\.(?:138\.237\.211|73\.128\.28)|2\.172\.22\.5[79]|7\.162\.253\.250)|2(?:3\.(?:64\.199\.2(?:27|35)|200\.28\.77)|1\.(?:151\.122\.38|88\.54\.17)|5\.88\.123\.244|4\.160\.35\.2|\.172\.93\.58)|7(?:8\.(?:175\.159\.93|248\.43\.106)|3\.212\.205\.158)|0(?:9\.236\.89\.2(?:18|27)|1\.14\.89\.0)|4(?:8\.223\.59\.140|\.63\.
 74\.204)|59\.224\.80\.43)|2(?:1(?:1\.(?:2(?:1(?:8\.27\.112|\.100\.250)|20\.194\.144|3\.152\.19)|115\.71\.18|44\.103\.11)|0\.(?:183\.179\.(?:3[89]|4[45])|2(?:09\.18\.73|8\.96\.54)|51\.23\.91)|9\.(?:14(?:0\.69\.12|7\.172\.)2|238\.181\.120)|3\.1(?:35\.113\.197|71\.39\.154)|2\.98\.171\.157|8\.151\.141\.75)|0(?:2\.(?:(?:82\.202\.22|64\.73\.14|77\.108\.5)8|1(?:30\.114\.130|97\.68\.201)|234\.40\.41)|0\.(?:7(?:2\.11\.132|9\.27\.60)|206\.12\.250)|9\.(?:239\.115\.85|50\.156\.232)|1\.164\.155\.14|3\.239\.45\.202)|2(?:1\.(?:2(?:3(?:8\.21\.251|4\.24\.46)|14\.2(?:08\.226|14\.187))|178\.236\.19)|2\.(?:7(?:8\.247\.67|4\.200\.2)|200\.182\.65)|0\.(?:255\.37\.152|68\.224\.45))|3\.231\.48\.(?:10|72)|7\.151\.127\.13|4\.48\.219\.49)|6(?:8\.65\.2(?:5(?:2\.1(?:8[789]|90)|4\.251)|40\.25[023])|1\.(?:3(?:8\.252\.21|5\.92\.92)|163\.101\.42)|0\.(?:190\.92\.234|29\.104\.197)|7\.(?:210\.247\.25|90\.21\.150)|9\.(?:65\.48\.125|9\.42\.219)|4\.235\.49\.183)|5(?:9\.(?:1(?:2(?:0\.(?:66\.8|76\.2)3|5\.41\.70)|0\.248\.207
 )|4\.113\.117)|8\.64\.(?:164\.116|200\.150)|\.255\.64\.2(?:4[689]|50)|0\.193\.157\.62)|8(?:(?:2\.117\.194\.2|8\.208\.231\.1)29|3\.(?:18\.234\.202|238\.208\.55)|5\.185\.(?:30\.163|112\.8)|4\.203\.244\.50)|7(?:7\.(?:106\.232\.178|89\.162\.82)|2\.(?:35\.20\.131|9\.107\.69)|4\.122\.196\.16|8\.29\.4\.78)|9(?:3\.(?:1(?:15\.85\.245|88\.8\.67)|90\.102\.194)|1\.218\.244\.136|4\.77\.199\.148)|31\.192\.111\.(?:[789]\d|6[89]|100)|4(?:6\.182\.92\.117|1\.137\.24\.4))\b)/
+header	 KHOP_SC_TOP200  Received =~ /(?-xism:\b(?:1(?:1(?:4\.(?:1(?:12\.129\.167|41\.253\.14)|247\.23\.66|32\.177\.77|4\.31\.90)|8\.(?:1(?:29\.166\.86|42\.19\.172|63\.29\.53|89\.11\.10)|244\.239\.2)|2\.(?:216\.(?:86\.253|30\.50)|184\.172\.244)|6\.(?:112\.66\.102|48\.159\.51)|0\.189\.168\.171|3\.196\.70\.128|5\.88\.119\.132|9\.42\.147\.114)|9(?:2\.(?:1(?:19\.174\.(?:13|9)|29\.253\.174)|208\.183\.198|3\.46\.236)|3\.(?:1(?:09\.69\.14[79]|11\.62\.157)|238\.111\.26|35\.58\.205)|8\.143\.1(?:50\.2(?:4[0789]|5[012]|39)|28\.1(?:32|44))|(?:5\.205\.237\.1|4\.105\.9\.8)5|0\.107\.140\.76|7\.253\.6\.68)|8(?:4\.(?:82\.1(?:7(?:1\.234|9\.117)|23\.85)|22\.53\.19)|8\.(?:138\.237\.211|73\.128\.28)|2\.172\.22\.5[79]|7\.162\.253\.250|5\.25\.150\.212)|2(?:3\.(?:64\.199\.22|200\.28\.7)7|5\.88\.123\.244|4\.160\.35\.2|\.172\.93\.58)|7(?:8\.(?:175\.159\.93|248\.43\.106)|3\.212\.205\.158)|0(?:9\.236\.89\.2(?:18|27)|1\.14\.89\.0)|4(?:8\.223\.59\.140|\.63\.74\.204)|59\.224\.80\.43)|2(?:1(?:0\.(?:183\.179\.(?:3[8
 9]|4[45])|2(?:09\.18\.73|8\.96\.54)|48\.156\.227|51\.23\.91)|1\.(?:2(?:1(?:8\.27\.112|\.100\.250)|3\.152\.19)|44\.103\.11)|9\.(?:14(?:0\.69\.12|7\.172\.)2|92\.57\.210)|2\.(?:146\.101\.154|98\.171\.157)|3\.135\.113\.197|8\.151\.141\.75)|0(?:2\.(?:(?:82\.202\.22|64\.73\.14|77\.108\.5)8|1(?:30\.114\.130|97\.68\.201)|234\.40\.41)|3\.23(?:0\.112\.45|9\.45\.202)|0\.(?:206\.12\.25|79\.27\.6)0|1\.164\.155\.14|9\.50\.156\.232)|2(?:1\.(?:2(?:3(?:8\.21\.251|4\.24\.46)|14\.2(?:08\.226|14\.187))|178\.236\.19)|2\.(?:7(?:8\.247\.67|4\.200\.2)|200\.182\.65)|0\.(?:255\.37\.152|68\.224\.45))|3\.231\.48\.(?:10|72)|4\.48\.219\.49)|6(?:8\.65\.2(?:5(?:2\.1(?:8[789]|90)|4\.251)|40\.25[023])|0\.(?:190\.92\.234|29\.104\.197)|7\.(?:210\.247\.25|90\.21\.150)|1\.(?:163\.101\.4|35\.92\.9)2|9\.(?:65\.48\.125|9\.42\.219)|4\.235\.49\.183)|5(?:9\.(?:12(?:0\.(?:66\.8|76\.2)3|5\.41\.70)|4\.113\.117)|8\.64\.(?:164\.116|200\.150)|\.255\.64\.2(?:4[689]|50)|0\.193\.157\.62)|8(?:(?:2\.117\.194\.2|8\.208\.231\.1)29|3\.(?:1
 8\.234\.202|238\.208\.55)|5\.185\.(?:30\.163|112\.8)|4\.203\.244\.50)|7(?:7\.(?:106\.232\.178|89\.162\.82)|2\.(?:35\.20\.131|9\.107\.69)|4\.122\.196\.16|8\.29\.4\.78)|9(?:1\.218\.244\.(?:1(?:9[1234567]|36)|20[234])|4\.77\.199\.148|3\.188\.8\.67)|31\.192\.111\.(?:[789]\d|6[89]|100)|4(?:6\.182\.92\.117|1\.137\.24\.4))\b)/
 describe KHOP_SC_TOP200  Relay listed in SpamCop top 200 spammer IPs
 tflags	 KHOP_SC_TOP200  nopublish
 score	 KHOP_SC_TOP200  4 0 4 0	# unnecessary if DNSBLs work



Mime
View raw message