sb-blockips.rc

这是一个从音频信号里提取特征参量的程序

# Argentinian Netblocks
#
# Updated and domains verified 7/27/02
# Other Relevant Info:
#  Due to a recent court ruling in Argentina, it is impossible
#  to prosecute for spamming there.  Unfortunately the country
#  is near meltdown, and dealing with the flood of Argentinian
#  spammers is a low priority.  So all netblocks assigned to
#  Argentinian companies that have NOT published strong
#  no-spamming AUP/TOS statements and shown that they will
#  disconnect spammers are listed.
#
:0
* ^Received:.*(24\.232\.[1-9][0-9]?[0-9]?\.|\
               64\.76\.3[2-9]\.|\
               64\.76\.4[0-7]\.|\
               200\.42\.[1-9][0-9]?[0-9]?\.|\
               200\.45\.[1-9][0-9]?[0-9]?\.|\
               200\.49\.9[6-9]\.|\
               200\.49\.10[0-9]\.|\
               200\.49\.111\.|\
               200\.59\.[1-9][0-9]?[0-9]?\.|\
               200\.63\.12[8-9]\.|\
               200\.63\.1[3-8][8-9]\.|\
               200\.63\.19[0-1]\.|\
               200\.69\.3[2-9]\.|\
               200\.69\.[4-5][0-9]\.|\
               200\.69\.6[0-3]\.|\
               200\.80\.18\.|\
               200\.82\.[0-9]\.|\
               200\.82\.[1-5][0-9]\.|\
               200\.82\.6[0-3]\.|\
               209\.99\.22[4-9]\.|\
               209\.99\.23[0-9]\.|\
               209\.224\.22[4-9]\.|\
               209\.224\.23[0-9]\.)
{
:0 f
| ${FORMAIL} -A"X-SBRule: Argentinian Netblock"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}


# Brazilian spamhaus netblocks and open relays
#
# Updated and domains verified 6/22/02
# Other Relevant Info:
#   Netblocks in .br domain that originate a lot of spam.
# Status: Irresponsible Sites
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](200\.12[8-9]\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
          200\.1[3-9][0-9]\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
          200\.2[0-4][0-9]\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
          200\.25[0-5]\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
          200\.204\.[0-9][0-9]?[0-9]?\.)
{
:0 f
| ${FORMAIL} -A"X-SBRule: Brazilian netblock"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}


# British dial-up netblocks
#
# Updated and domains verified 6/22/02
# Other Relevant Info:
#   Netblocks in .uk domain that are assigned to dial-ups or
#   that generate a lot of spam.
# Status: Irresponsible Sites
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](217\.4[2-4]\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?)
{
:0 f
| ${FORMAIL} -A"X-SBRule: .uk dial-up IP"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}


# Chinese spamhaus netblocks and open relays
#
# Updated and domains verified 11/10/01
# Other Relevant Info:
#   Open relays and other stuff in .cn domain
# Status: Irresponsible Sites
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](61\.12[8-9]\.[0-9][0-9]?[0-9]?\.|\
          61\.1[3-8][0-9]\.[0-9][0-9]?[0-9]?\.|\
          61\.19[0-1]\.[0-9][0-9]?[0-9]?\.|\
          202\.10[1-3]\.[0-9][0-9]?[0-9]?\.|\
          202\.106\.[0-9][0-9]?[0-9]?\.|\
          202\.108\.[0-9][0-9]?[0-9]?\.|\
          202\.181\.155\.|\
          202\.198\.45\.38|\
          203\.78\.77\.|\
          203\.208\.7\.|\
          210\.76\.19[4-5]\.|\
          211\.9[6-7]\.[0-9][0-9]?[0-9]?\.|\
          211\.154\.[0-9][0-9]?[0-9]?\.|\
          218\.5\.133\.[0-9][0-9]?[0-9]?)
{
:0 f
| ${FORMAIL} -A"X-SBRule: .cn domain spamhaus IP"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}


# Japanese spamhaus netblocks and open relays
#
# Updated and domains verified 4/26/02
# Other Relevant Info:
#   Open relays and other stuff in .jp domain
# Status: Irresponsible Sites
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](203\.17[8-9]\.[1-9][0-9]?[0-9]?\.|\
          203\.18[0-3]\.[1-9][0-9]?[0-9]?\.|\
          211\.1[8-9][0-9]\.[0-9][0-9]?[0-9]?\.)
{
:0 f
| ${FORMAIL} -A"X-SBRule: .jp domain relay or spamhaus IP"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}


# Korean spamhaus netblocks and open relays
#
# Updated and domains verified 11/10/01
# Other Relevant Info:
#   Open relays and other stuff in .kr domain
# Status: Irresponsible Sites
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](210\.105\.42\.85|\
          211\.4[0-1]\.[0-9][0-9]?[0-9]?\.|\
          211\.17[2-9]\.[0-9][0-9]?[0-9]?\.|\
          211\.1[8-9][0-9]\.[0-9][0-9]?[0-9]?\.)
{
:0 f
| ${FORMAIL} -A"X-SBRule: .kr domain relay or spamhaus IP"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}


# Nigerian Netblocks
#
# Updated and domains verified 6/15/02
# Last reported spam: 6/15/02
# Other Relevant Info:
#  Huge number of Advance Fee Fraud spams come from Nigerian ISPs.
#
:0
* ^Received:.*(193\.110\.[2-3]\.|\
               193\.110\.[2-3]\.|\
               193\.110\.[2-3]\.|\
               213\.181\.64\.)
{
:0 f
| ${FORMAIL} -A"X-SBRule: Nigerian Netblock"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}