sb-blockdomains.rc

这是一个从音频信号里提取特征参量的程序

{ BLOCKTHIS=yes }
}


# Inflow.com netblocks
#
# Updated and domains verified 8/17/02
# Other Relevant Info:
#   Apparent ISP of choice for a number of "respectable"
#   spam-for-hire outfits that has a professional CRM
#   package in use with its abuse@ addresses. :/  Does
#   nothing about spam but listwash, though.  I think
#   this one deserves to be in the spammer ISP category,
#   but am blocking for now.
# Status: Irresponsible Sites
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](66\.45\.[0-9]\.|\
          66\.45\.[1-9][0-9]\.|\
          66\.45\.1[1-1][0-9]\.|\
          66\.45\.12[0-7]\.)
{
:0 f
| ${FORMAIL} -A"X-SBRule: Inflow netblock"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}


# Inprof.net netblocks
#
# Updated and domains verified 6/17/02
# Other Relevant Info:
#   Hosts a number of porn spam sites, unresponsive to complaints.
# Status: Irresponsible Sites
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z]81\.9\.6\.
{
:0 f
| ${FORMAIL} -A"X-SBRule: Inprof.net netblock"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}


# Internet Connect netblocks
#
# Updated and domains verified 8/05/02
# Other Relevant Info:
#   Hosts a number of porn spam sites, unresponsive to complaints.
# Status: Irresponsible Sites
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z]208\.244\.15[2-9]\.
{
:0 f
| ${FORMAIL} -A"X-SBRule: Internet Connect netblock"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}


# kundenserver.de
#
# Updated and domains verified 11/10/01
# Other Relevant Info:
#    No responses whatsoever to spam complaints -- dead air.  I am told
#    this is part of a large provider in Germany, so I am not listing them
#    as spammers, but I have seen =nothing= from this site but spam for
#    the last several months at least.
#
# Status: Irresponsible Site
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](195\.20\.22[4-5]\.|\
          kundenserver\.de([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: kundenserver.de"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}


# Lauderdale.net (PG&C Leasing)
#
# Updated and domains verified 11/10/01
# Other Relevant Info:
#   ISP and former ISP for numerous extremely abusive spam sites.
#   This one almost deserves to be treated as a spam site itself,
#   but it has too many legitimate customers as well as spammers.
#
# Status: Irresponsible Site
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](209\.236\.[0-9]\.|\
          209\.236\.[1-5][0-9]\.|\
          209\.236\.6[0-3]\.)
{ LAUDERDALE=yes }

:0 BH
* LEANTAG ?? no
* !^Subject: .*\(fwd\)
* !--.*forwarded message --
* !^forwarded message:
* !^-----BEGIN PGP MESSAGE-----
* !^-----BEGIN PGP SIGNED MESSAGE-----
* -1000^0
*  -500^0   ^Subject: Re:
*  -200^1   ^[:;#>]
*  -600^1    ^Subject:.*spam
*  -200^1    UCE
*  1100^0    209\.236\.[0-9]\.
*  1100^0    209\.236\.[1-5][0-9]\.
*  1100^0    209\.236\.6[0-3]\.
{ LAUDERDALE=yes }

:0
* LAUDERDALE ?? yes
{
:0 f
| ${FORMAIL} -A"X-SBRule: PG&C Leasing"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}


# Nevada Hosting
#
# Updated and domains verified 11/10/01
# Other Relevant Info:
#   Has lots of spamming customers, no known non-spamming customers.
#   Probably spammers, but just blocked until this is confirmed.
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z]12\.36\.242\.
{
:0 f
| ${FORMAIL} -A"X-SBRule: Nevada Hosting netblock"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}


# NuCul -- NiUang Culture
#
# Updated and domains verified 11/10/01
# Other Relevant Info:
#   Despite the name, appears to be a Chinese based host of spamvertized.
#   web sites.
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z]211\.101\.236\.
{
:0 f
| ${FORMAIL} -A"X-SBRule: NuCul netblock"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}


# Optus.net.au/BayNetworks Inc.
#
# Updated and domains verified 11/10/01
# Other Relevant Info:
#    Hosts of nasty Indian-based spam nest including lustingforu.com.
#    Not listed in aunic.net.au whois database, nearly untraceable.
#
# Status: Irresponsible Site
#
:0
* ^Received:.*(192\.65\.8[2-9]\.|\
               192\.65\.9[0-1]\.|\
               202\.139\.[0-1]\.|\
               202\.139\.[6-7]\.|\
               202\.139\.1[8-9]\.|\
               202\.139\.3[2-3]\.|\
               202\.139\.39\.|\
               202\.139\.46\.|\
               202\.139\.49\.|\
               202\.139\.50\.|\
               202\.139\.63\.|\
               202\.139\.8[2-3]\.|\
               202\.139\.8[7-8]\.|\
               202\.139\.94\.|\
               202\.139\.110\.|\
               202\.139\.113\.|\
               202\.139\.120\.|\
               202\.139\.12[3-4]\.|\
               202\.139\.12[7-9]\.|\
               202\.139\.13[0-9]\.|\
               202\.139\.14[0-3]\.|\
               202\.139\.166\.|\
               202\.139\.169\.|\
               202\.139\.181\.|\
               202\.139\.18[8-9]\.|\
               202\.139\.19[0-1]\.|\
               203\.202\.2\.12[8-9]|\
               203\.202\.2\.1[3-5][0-9]|\
               203\.202\.5\.[0-7]|\
               203\.202\.5\.1[6-9]|\
               203\.202\.5\.2[0-9]|\
               203\.202\.5\.3[0-1]|\
               203\.202\.3[0-2]\.|\
               203\.202\.48\.|\
               203\.202\.70\.6[4-9]|\
               203\.202\.70\.7[0-9]|\
               203\.202\.70\.24[8-9]|\
               203\.202\.70\.25[0-5]|\
               203\.202\.88\.|\
               203\.202\.109\.|\
               203\.202\.130\.|\
               203\.202\.13[7-8]\.|\
               203\.202\.14[8-9]\.|\
               203\.202\.15[0-3]\.)
{ OPTUS=yes }

:0 BH
* LEANTAG ?? no
* !^Subject: .*\(fwd\)
* !--.*forwarded message --
* !^forwarded message:
* !^-----BEGIN PGP MESSAGE-----
* !^-----BEGIN PGP SIGNED MESSAGE-----
* -1000^0
*  -200^1   ^[:;#>]
*  1100^0    192\.65\.8[2-9]\.
*  1100^0    192\.65\.9[0-1]\.
*  1100^0    202\.139\.[0-1]\.
*  1100^0    202\.139\.[6-7]\.
*  1100^0    202\.139\.1[8-9]\.
*  1100^0    202\.139\.3[2-3]\.
*  1100^0    202\.139\.39\.
*  1100^0    202\.139\.46\.
*  1100^0    202\.139\.49\.
*  1100^0    202\.139\.50\.
*  1100^0    202\.139\.63\.
*  1100^0    202\.139\.8[2-3]\.
*  1100^0    202\.139\.8[7-8]\.
*  1100^0    202\.139\.94\.
*  1100^0    202\.139\.110\.
*  1100^0    202\.139\.113\.
*  1100^0    202\.139\.120\.
*  1100^0    202\.139\.12[3-4]\.
*  1100^0    202\.139\.12[7-9]\.
*  1100^0    202\.139\.13[0-9]\.
*  1100^0    202\.139\.14[0-3]\.
*  1100^0    202\.139\.166\.
*  1100^0    202\.139\.169\.
*  1100^0    202\.139\.181\.
*  1100^0    202\.139\.18[8-9]\.
*  1100^0    202\.139\.19[0-1]\.
*  1100^0    203\.202\.2\.12[8-9]
*  1100^0    203\.202\.2\.1[3-5][0-9]
*  1100^0    203\.202\.5\.[0-7]
*  1100^0    203\.202\.5\.1[6-9]
*  1100^0    203\.202\.5\.2[0-9]
*  1100^0    203\.202\.5\.3[0-1]
*  1100^0    203\.202\.3[0-2]\.
*  1100^0    203\.202\.48\.
*  1100^0    203\.202\.70\.6[4-9]
*  1100^0    203\.202\.70\.7[0-9]
*  1100^0    203\.202\.70\.24[8-9]
*  1100^0    203\.202\.70\.25[0-5]
*  1100^0    203\.202\.88\.
*  1100^0    203\.202\.109\.
*  1100^0    203\.202\.130\.
*  1100^0    203\.202\.13[7-8]\.
*  1100^0    203\.202\.14[8-9]\.
*  1100^0    203\.202\.15[0-3]\.
{ OPTUS=yes }

:0
* OPTUS ?? yes
{
:0 f
| ${FORMAIL} -A"X-SBRule: optus.net.au netblock"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}


# planet.nl
#
# Updated and domains verified 11/07/01
# Last reported spam: 10/27/01
# Other Relevant Info:
#   Email by system administrator states that planet.nl acts on spam
#   complaints only for spam sent from their servers, but will not
#   shut down a web site advertised in spam sent from somewhere else.
#   That makes them a spam haven.
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](62\.131\.[0-9][0-9]?[0-9]?\.|\
          80\.60\.[0-9][0-9]?[0-9]?\.|\
          195\.121\.0.|\
          195\.121\.1\.[0-9]|\
          195\.121\.1\.[0-8][0-9]|\
          195\.121\.1\.9[0-5]|\
          213\.10\.[0-9][0-9]?[0-9]?\.|\
          213\.75\.[0-9][0-9]?[0-9]?\.)
{
:0 f
| ${FORMAIL} -A"X-SBRule: planet.nl netblock"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}


# Safepages.com
#
# Updated and domains verified 10/31/01
# Relevant Info:
#   Reverse DNS for lots of spam sites.  For this reason, only email with
#   safepages.com in the Received: headers is blocked, not email from the
#   site itself.
#
# Status: Irresponsible Site
#
:0
* ^Received:.*[^0-9a-z]safepages\.com([^a-z0-9\.]|$)
{
:0 f
| ${FORMAIL} -A"X-SBRule: Safepages.com rDNS"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}


# seed.net.tw
#
# Updated and domains verified 8/11/02
# Last reported spam: 8/11/02
# Other Relevant Info:
#  Chinese network that appears in huge amounts of spam.  Probably rogue,
#  but just blocked as a precaution now.
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](139\.175\.[0-9]\.[0-9]?[0-9]?[0-9]|\
          139\.175\.[1-9][0-9]\.[0-9]?[0-9]?[0-9]|\
          139\.175\.1[0-9][0-9]\.[0-9]?[0-9]?[0-9]|\
          139\.175\.2[0-4][0-9]\.[0-9]?[0-9]?[0-9]|\
          139\.175\.25[0-5]\.[0-9]?[0-9]?[0-9]|\
          203\.73\.[0-9]\.[0-9]?[0-9]?[0-9]|\
          203\.73\.[1-9][0-9]\.[0-9]?[0-9]?[0-9]|\
          203\.73\.1[0-9][0-9]\.[0-9]?[0-9]?[0-9]|\
          203\.73\.2[0-4][0-9]\.[0-9]?[0-9]?[0-9]|\
          203\.73\.25[0-5]\.[0-9]?[0-9]?[0-9]|\
          211\.74\.[0-9]\.[0-9]?[0-9]?[0-9]|\
          211\.74\.[1-9][0-9]\.[0-9]?[0-9]?[0-9]|\
          211\.74\.1[0-1][0-9]\.[0-9]?[0-9]?[0-9]|\
          211\.74\.12[0-7]\.[0-9]?[0-9]?[0-9]|\
          (^|[^-_0-9a-z])seed\.net\.tw([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: seed.net.tw"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}


# seeder.net.tw/seeder.net
#
# Updated and domains verified 8/11/02
# Last reported spam: 8/11/02
# Other Relevant Info:
#  Chinese network that appears in huge amounts of spam.  Probably rogue,
#  but just blocked as a precaution now.
#
:0
* ^(From.|Reply-To:|Message-ID:|Received:).*[^0-9a-z](202\.43\.6[4-9]\.\[0-9]?[0-9]?[0-9]|\
          202\.43\.[7-8][0-9]\.\[0-9]?[0-9]?[0-9]|\
          202\.43\.9[0-5]\.\[0-9]?[0-9]?[0-9]|\
          (^|[^-_0-9a-z])seeder\.net(\.tw)?([^a-z0-9\.]|$))
{
:0 f
| ${FORMAIL} -A"X-SBRule: seeder.net.tw"

:0
{ BLOCKTAG=yes }

:0
* BLOCKREPLY ?? NOTIFY
{ BLOCKTHIS=yes }
}