~semi-hallikas/sspamm/3.0-devel

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
[main]
name:		sspamm
port:		inet:8003
daemon:		False
sspammdir:	.
tmpdir:		/dev/shm
logfile:	sspamm.log
debugfile:	debug.log
#savedir:	saved
timeme:		Yes
verbose:	2
watchmode:	Yes

[filter]
defaulttests:	connect, helo, accept, block, samefromto, ipfromto, headers, dyndns, rbl, wordscan, bayesian, charset
domains:
		.*: -connect, -accept, -helo, -block, -ipfromto
rules:
		.*: flagall

[actions]
samefromto:	Flag
connect:	Flag
helo:		Flag
ipfromto:	Reject
headers:	Reject
dyndns:		Flag
rbl:		Flag

[rules]
hide:
		^10\.|^192\.168\.
		crescom.fi
		jatkuu.iki.fi

connect:
		(?#accept)^193.93.133.|^192.168.
		(?#block)^(41.178.206.33|59.97.228.77|62.33.151.228|93.46.245.100|94.178.74.109|95.56.110.10|95.79.45.230|111.65.136.240|114.34.95.232|117.207.84.67|119.42.126.187|124.107.86.195|188.93.135.34|190.178.93.116|201.254.80.39|201.34.214.16)$

accept:
		(?#flag):abuse@

block:
		firstname.(last|sure)name@|etunimi.sukunimi@
		(?#reject)roskaposti@hallikas.com$

ipfromto:
		(?#accept)(.facebook.com|.tfbnw.net):notification\[\d\w_+-]@facebookmail.com:

headers:
		(?#reject)\<(halen@iki.fi|samipekka.hallikas@nic.fi)\>

dyndns:
		(?#authmx)^([\w\d-]+)?(mail|smtp|relay|proxy)([\w\d-]+)?\.
		(?#authmx)^(\w)?(mail|smtp(in|out)?|out|mx|mq|secmx|post|relay|proxy|ns|gw|list|mta|pop|imap|sender|spamgw|filter|filtteri|gate|posti|(e|www)mail)(\d)?(\d)?
		(?#skip)(\.sta(tic)?)\.(dnainternet.net|netsonic.fi|smilehouse.com|louhi.net|ac-net.se|estpak.ee)

# DNS names to be blocked
		\d{1,3}[\.-]\d{1,3}[\.-]\d{1,3}[\.-]\d{1,3}[\.-]


#		^(ip|ppp|ppoe|adsl|dsl|cable|host|pool)?(-)?\d+[-.]\d+[-.]\d+[-.].*.(ar|br|cn|cl|ru|hr|gr|co|tr|jp|pl|hr|il|in|it|rs|hu|vn|rs|es)
#		^(\d+[-.])?\d+[-.]\d+[-.]\d+[-.]((dynamic|dyn)[-.])?(user.ono.com|caiway.nl)
#		\d+.(pool|user).(einsundeins.de|veloxzone.com.br)
#		adsl-dynamic-pool-xxx.hcm.fpt.vn
# Spam
#		\w\w\d+-\*.dr.home.nl
##		^(a)?dsl[-.](dynamic[-.]?)?\d+[-.]\d+[-.]*.(globonet.hu|ttnet.net.tr)
##		^host\d+-.*-\d+-.*.retail.telecomitalia.it
##		^cable[-.]\d+[-.]\d+[-.]\d+[-.]\d+[-.].*.sbb.rs
#		(pppoe-)?\d+.adsl.ellink.ru
#		^(ppp).*-\d+-\d+.pppoe.spdop.ru
#		^.*-\d+-\d+.broadband.bashtel.ru
#		^.*-\d+-\d+.*.comcast.net
#		pool-\d.*\.verizon.net
#		^\d+-d+-d+-d+\..*\.(?:(?!(fi|se|ee))\w\w(\w)?(\w)?)
#		-\d+.pools.arcor-ip.net
#		-\d+.net.novis.pt
#		cust\d+.know.cable.virginmedia.com
#		Dynamic-IP-\d+.cable.net.co
#		adsl-\d+-\d+-\d+-\d.adsl2.iam.net.ma
#		cpe-\d+.\d+.\d+.\d+.in-addr.arpa
#		.dsl.brasiltelecom.net.br
#		dslb-\d+-\d+-\d+-\d.pools.arcor-ip.net
#		\d+.\d+-ppp.3menatwork.com
#		.dsl.telepac.pt
#		\d+-\d+-\d+-\d+.\w\w\w\d.kabel-badenwuerttemberg.de
#		cust\d+.\d+-\d+.cable.virginmedia.com
#		\d+-\d+-\d+.evo.net.br
#		Dynamic-IP-\d+.cable.net.co
#		.user.veloxzone.com.br
#		.hsd1.\w\w.comcast.net
#		c-\d+-\d+-\d+-\d+..*.(ca|ut|ct|mi).comcast.net
#		\d+-\d+-\d+-.*.cpe.(netcabo.pt|vivax.com.br)
#		\d+.\d+.\d+.\d+.dsl.intelnet.net.gt
#		\d+.user.veloxzone.com.br
#		\d+.\w+.\d+-\d+-\d+.astinet.telkom.net.id
#		\d+-\d+-\d+-\d+.rev.numericable.fr
#		mar\d+-\d+-\d+-\d+-\d+-\d+.fbx.proxad.net
#		pool-\d+-\d+-\d+-\d+.\w+.fios.verizon.net
#		-dhcp\d+.bb.online.no
#		.dbsch1.nb.home.nl
#		.codetel.net.do
#		.dynamic.jazztel.es
#		.dslaccess.aol.com
#		.adsl.cybercity.dk
#		.adsl.enternet.hu
#		.broadband.ctm.net
#		.pool.einsundeins.de
#		-dynamic-\d+.\d+.\d+.\d+.airtelbroadband.in
#		Adsl-\d+.\d+.\d+.\d+.aviso.ci
#		BAGa\d+.bag.pppool.de
#		\d+-\d+-\d+-\d+-dynip.superkabel.de
#		\d+-\d+-\d+-\d+-xdsl-dynamic.kuzbass.net
#		\d+-\d+-\d+-\d+.bois.qwest.net
#		\d+-\d+-\d+-\d+.btc-net.bg
#		\d+-\d+-\d+-\d+.dyn.dsl.cantv.net
#		\d+-\d+-\d+-\d+.pool.ukrtel.net
#		\d+.Red-\d+-\d+-\d+.dynamicIP.rima-tde.net
#		\d+.\d+.\d+-\d+.rev.gaoland.net
#		\d+.\d+.\d+.\d+.dynamic.jazztel.es
#		\d+.\d+.\d+.\d+.fast.net.id
#		\d+.\d+.broadband2.iol.cz
#		\d+.versanet.de
#		\d+E\d+AF\d+.dslaccess.aol.com
#		\d+d\d+f\d+bd.adsl.enternet.hu
#		\d+x\d+.adsl.cybercity.dk
#		\w\d+-\d+-\d+-\d+.broadband.bashtel.ru
#		\w\d+.adsl.alicedsl.de
#		\w\w\\d+.neoplus.adsl.tpnet.pl
#		\w\w\d+-\*.dr.home.nl
#		\w\w\d+\w\d+.virtua.com.br
#		\w\w\w-\d+-\d+-\d+-\d+.red.bezeqint.net
#		\w\w\w(\w)?\d+.neoplus.adsl.tpnet.pl
#		adsl-\d+-\d+.teol.net
#		adsl\d+-\d+-\d+-\d+-\d+.adsl\d+-\d+.iam.net.ma
#		apn-\d+-\d+-\d+-\d+.vodafone.hu
#		cdma-\d+-\d+-\d+-\d+.msk.skylink.ru
#		chello\d+.chello.pl
#		cm-\d+-\d+-\d+-\d+.telecable.es
#		dsl.dynamic\d+.ttnet.net.tr
#		dslb-\d+-\d+-\d+-\d+.pools.arcor-ip.net
#		herti-m.iservice.bg
#		host-\d+-\d+-\d+-\d+.hspa.orange.md
#		host\d+-\d+-dynamic.\d+-\d+-r.retail.telecomitalia.it
#		ip-\d+-\d+-\d+-\d+.vodafone-net.de
#		node-\d+-\d+-\d+-\d+.domolink.tula.net
#		p.+.dip.t-dialin.net
#		p.+.dip\d+.t-ipconnect.de
#		pool-\d+-\d+-\d+-\d+.washdc.fios.verizon.net
#		ppp-\d+-\d+-\d+-\d+.dsidata.sk
#		ppp\d+.dsl.hol.gr
#		rev-\d+-\d+-\d+-\d+.t-mobile.sk
#		triband-\w\w\w\w-\d+.\d+.\d+.\d+.(bol|mtnl).net.in
#		xdsl-\d+-\d+-\d+-\d+.netcologne.de
#		sub-\d\dip\d\d.onenet.an




























#		(?#skip)(?#godaddy.com)smtpout??-??.prod.mesa1.secureserver.net
#		(?#skip)(?#tsl.fi/capnova)194.111.232.2
#		(?#skip)(?#lambert.fi)ip212-226-165-36.adsl.kpnqwest.fi
#		(?#skip)(?#enics.com)217-162-12-114.static.cablecom.ch
#		(?#skip)87.94.40.158
#		(?#skip)(?#ge.com)n003-000-000-000.static.ge.com
#		(?#skip)(?#finnmatkat.fi)ip212-226-135-225.adsl.kpnqwest.fi
#		(?#skip)client194-14-197-6.exicom.se
#		(?#skip)net2-2.24online.fi
#		(?#skip)(?#latribune.fr)84.96.40.221
#		(?#skip)84.96.40.221
#		(?#skip)(?#betonika.lt)82.135.208.149
#		(?#skip)(?#labs.softjoys.com)69.3.254.12
#		(?#skip)(?#loviisa.fi)87.94.36.34
#		(?#skip)(?#diamo.se)88.131.23.18
#		(?#skip)(?#dpu.se)82.182.83.75
#		(?#skip)(?#mbcint.se)82.182.83.75
#		(?#skip)(?#autoexperten.nu)213.150.159.45
#		(?#skip)(?#adfahrer.com)83.241.157.50
#		(?#skip)(?#fiskarsbrands.fi)62-241-242-2.customers.ktab.fn.fi
#		(?#skip)(?#mx1.kliway.se)62.127.104.130
#		(?#skip)(?#selefa.se)213.115.43.82
#		(?#skip)(?#aur.edu)81.208.13.138
#		(?#skip)(?#sydgym.se)212-162-184-234.skbbip.com
#		(?#skip)(?#poolia.com)84.17.195.242
#		(?#skip)(?#orebroporten.se)213.115.180.39
#		(?#skip)ip-87-86-88-161.easynet.co.uk
#		(?#skip)host217-45-253-116.in-addr.btopenworld.com
#		(?#skip)ded-rb.dedicated.tdcsong.se.222.42.195.in-addr.arpa
#		(?#skip)(?#veurs.nl)145.103.249.194
#		(?#skip)(?#hemtex.se)83.241.254.6[67]
#		(?#skip)(?#entec-biogas.at)81.223.126.208
#		(?#skip)(?#atea)193.183.18.18
#		(?#skip)72.36.164.18
#		(?#skip)209.209.150.70
#		(?#skip)62.181.213.66
#		(?#skip)212.129.164.69
#		(?#skip)82.165.241.227
#		(?#skip)81.216.82.100
#		(?#skip)217.112.126.199
#		(?#skip)213.61.125.92
#		(?#skip)194.23.76.5
#		(?#skip)194.239.147.110
#		(?#skip)212.214.10.2
#		(?#skip)213.35.200.41
#		(?#skip)213.50.2.(2|109)
#		(?#skip)213.150.148.53
#		(?#skip)217.119.4.77
#		(?#skip)217.212.20.191
#		(?#skip)82.134.94.34
#		(?#skip)212.226.164.177
#		(?#skip)209.217.122.144
#		(?#skip)212.226.32.5
#		(?#skip)82.175.95.122
#		(?#skip)(?#mail-relay.alcom.aland.fi)194.112.0.4
#		(?#skip)(?#colemont.fi)84.239.236.171
#		(?#skip)(?#meandi.fi)194.16.85.14
#		(?#skip)(?#tk.salonseutu.fi)195.165.113.93
#		(?#skip)(?#hammasvaline.fi)195.67.1.(2|3)
#		(?#skip)(?#mail.nordvalls.se)85.30.130.17
#		(?#skip)(?#alyata.se)213.115.91.238
#		(?#skip)(?#datacapture.co.uk)adsl-217.146.111.67.merula.net
#		(?#skip)(?#edu.loviisa.fi)87.94.36.34
#		(?#skip)(?#ebuf.org)81.17.197.50
#		(?#skip)(?#julkkikset.fi)62.220.235.62
#		(?#skip)(?#smilehouse.com)193.94.205.129
#		(?#skip)(?#tamroshop.fi)193.65.59.129
#		(?#skip)(?#mail.duodecim.fi)195.236.0.9
#		(?#skip)(?#jakomaenapteekki)212.226.146.137
#		(?#skip)(#?hcn.fi)79.134.112.194








#		(?#authmx)fre.skanova.net
#		(?#authmx)^((pp|outbound)-)?mx(\d)?.phnet.fi
#		(?#authmx)^(smtpout|smgw\d\d|memailout\d\d.|eni-mailout\d\d|fmmailgate\d\d|hnexfw\d\d|bbnrelbas\d\d).
#		(?#authmx).hotmail.com$|.gmail.com$|nf-out-\d\d\d\d.google.com$|.yahoo.com$
#		(?#authmx)^(satakieli|isolokki).
# Known relay domains
#		(?#authmx).iki.fi|.hotmail.com|.gmail.com|.google.com|.yahoo.com|.sth.basefarm.net|.fre.skanova.net
# Orgs
#		(?#authmx)nazgul.intra.optinet.fi|basso.fimnet.fi|posti.fimnet.fi|rasia.welcomnet.fi
#		(?#authmx)mta-out-\d.luukku.com|datalinja1.datalinja.fi|ss.savonsanomat.fi|(saarni|sypressi|tulikuusama|sinikuusama|sirokuusama).dnainternet.net
#		(?#authmx)pop.fonet.fi|atlas.omnia.fi|cgw.ssp.fi
#		(?#authmx)(mail|smtp)(in|out)?(-gw)?(\d+)?.foobar.org
#		(?#authmx)beta.kotisivut.com|hyatt.suomi.net|[pm]ato.luukku.com|(videl|rasmus).multi.fi|hammer.wmhost.com
#		(?#authmx)galaxy.systems.pipex.net|sls-omail\d.wachovia.com|(emh\d\d|gw\d\d).mail.saunalahti.fi|korppi.suomicommunications.com|tarjoilu.luukku.com
#		(?#authmx)f\d\d.mail.ru|exprod\dog\d.obsmtp.com|pip\da\d.quicknet.nl|(mr|vw)\d.egroup.no|massmail.inforce.dk|karma.telenor.se
#		(?#authmx)(sender-\d\d.it|salama.atm).helsinki.fi|ajax.cnchost.com|amsfep17-int.chello.nl|angelface.telenor.se
#		(?#authmx)argent-web.appliedweb.com|astana.suomi.net|backup01.scalera.ch|blackhole.hus.fi|businessdata.com|net2-2.24online.fi
#		(?#authmx)chshlogs0123.chsh.plt.georgfischer.com|csmtp.b-one.net|elektra.telenor.se|email.PKCABLES.com|htverlag.de
#		(?#authmx)email.rs-solutions.net|eris\d.academica.fi|esc71.midphase.com|exchange.nbl.fi|exsmtp\d\d.hostedexchange.dk
#		(?#authmx)fire.nesenta.fi|imo-d\d\d.mx.aol.com|imp.kaapeli.fi|info\d\d.helia.fi|kle\d.pkcables.com|ls405.htnet.hr
#		(?#authmx)lyris.orcsweb.com|maili.uku.fi|mandy.eunet.fi|medone.fi|metrobizmail.com|msr\d.hinet.net|mxfep02.bredband.com
#		(?#authmx)newsletter\d.bvrp.com|ns\d.academica.fi|nsmx.tavitex.com|odin.mimer.no|omta02ps.mx.bigpond.com|c2bthomr\d\d.btconnect.com
#		(?#authmx)osl\dsm(out|inn)\d.broadpark.no|outmx\d\d\d.isp.belgacom.be|pfepb.post.tele.dk|pola.wasa.shh.fi|psu.karelia.ru
#		(?#authmx)r2d2.(sci|netello).fi|rele\d.veho.fi|repulse.concentric.com|ringotouch\d\w.ringo.com|rwcrmhc\d\d.comcast.net
#		(?#authmx)sink.edelkey.fi|sky.bmc.com|spectre.fbab.net|stardust.surffi.net|sunny.uusikaupunki.fi|tossu.ebaana.net|inmail.surfnet.fi
#		(?#authmx)uranium.nocdirect.com|virus.out.st.online.no|vissy.alko.fi|vmx\d\d.multikabel.net|www.verkkotunnukset.fi
#		(?#authmx)wwwmail.edu.lahti.fi|ext-\w\w\d\w\w-\d(\d)?.online-age.net|lotus.superhosting.bg|atro10.capnova.com
#		(?#authmx)(?#smilehouse shared mx)129.59.65.193.static.smilehouse.com
#		(?#authmx)(\w+|(saarni|sinikuusama)|(sini|saari|raita)makrilli).dnainternet.net|extra.hcn.fi
#		(?#authmx)seth.(inet|tele).fi
#		(?#authmx)(eni-mailout??|\w\w-smtp\d\d).sth.basefarm.net|gprs-internet.mobile.sonera.net|netsol.outbound.ed10.com|fmmailgate0\d.web.de
#		(?#authmx)(silppuri1|leimasin|jokotaas|uudestaan).iki.fi|digiletter.fi|.redhat.com|outgoing.optimalondemand.com|ousrvr.oulu.fi|inmail.surfnet.fi
#		(?#authmx)cert.transcender.com|enfocast.viper.enta.net|vms\d\d\dpub.verizon.net|pop-siberian.atl.sa.earthlink.net|(omr\d|mail).networksolutionsemail.com|mo\d.b-one.net|wtcfront.wtc.fi
#		(?#authmx)osl1smout1.broadpark.no|\d+.espoo.fi|smtp\d.pp.htv.fi|mailfe\d\d.swip.net|mxfep\d\d.bredband.com 
#		(?#authmx)legolas.alcom.aland.fi|roska.luukku.com|hyat.suomi.net|iris3.directnic.com|lists.securityfocus.com|sd-green-bigip-\d\d(\d)?.dreamhost.com
#		(?#authmx)dgate\d\d.fujitsu-siemens.com
#		(?#authmx)server-a97.esp.mediateam.fi
# Probably should be blocked?
#		(?#authmx)via-smtp\d.vianetworks.net|lists.proxima-tech.com|mq1.webstudio.fi|io.discshop.se|ms1.rwcmp.com|mta\d\d\d.fans.nba.com|sb-mansell.m6.net|nautilus.neoisis.net
#		(?#authmx)mailout\d\d.t-online.de|smtp\d\d.orange.fr|[ab]smtp\d.xs4all.nl

# You can use NAME
#	client194-14-197-6.exicom.se
#	ded-rb.dedicated.tdcsong.se.222.42.195.in-addr.arpa
# IP
#	213.150.148.53
#	217.212.20.191|213.50.2.(2|109)
# Or even regexps with comments.
#	(?#hemtex.se)83.241.254.6[67]

##
## skip - Do not make dyndns test for match. If recursive mode is enabled,
##        skip to next received host.
##
#		(?#skip)(?#unified-dialogs.com)195.67.127.66|(?#sofokus.com)62.183.168.194|(?#optinet)79.134.123.122
#		(?#skip)(?#many_blocked).*dnainternet.net
#		(?#skip)(?#godaddy.com)smtpout??-??.prod.mesa1.secureserver.net
#		(?#skip).*.sta(tic)?.(smilehouse.com|louhi.net|ac-net.se|estpak.ee)
#		(?#skip).(smilehouse.com|louhi.net|ac-net.se|estpak.ee)
#		(?#skip)(?#tsl.fi/capnova)194.111.232.2|(?#lambert.fi)ip212-226-165-36.adsl.kpnqwest.fi|(?#enics.com)217-162-12-114.static.cablecom.ch
#		(?#skip)wire9.adsl.netsonic.fi|87.94.40.158|(?#ge.com)n003-000-000-000.static.ge.com|(?#finnmatkat.fi)ip212-226-135-225.adsl.kpnqwest.fi
#		(?#skip)client194-14-197-6.exicom.se|net2-2.24online.fi|(?#latribune.fr)84.96.40.221|84.96.40.221|(?#betonika.lt)82.135.208.149|(?#labs.softjoys.com)69.3.254.12|(?#loviisa.fi)87.94.36.34
#		(?#skip)(?#diamo.se)88.131.23.18|(?#dpu.se)82.182.83.75|(?#mbcint.se)82.182.83.75|(?#autoexperten.nu)213.150.159.45|(?#adfahrer.com)83.241.157.50|(?#fiskarsbrands.fi)62-241-242-2.customers.ktab.fn.fi|(?#mx1.kliway.se)62.127.104.130|(?#selefa.se)213.115.43.82
#		(?#skip)(?#aur.edu)81.208.13.138|(?#sydgym.se)212-162-184-234.skbbip.com|(?#poolia.com)84.17.195.242|(?#orebroporten.se)213.115.180.39
#		(?#skip)ip-87-86-88-161.easynet.co.uk|host217-45-253-116.in-addr.btopenworld.com|ded-rb.dedicated.tdcsong.se.222.42.195.in-addr.arpa
#		(?#skip)(?#veurs.nl)145.103.249.194|(?#hemtex.se)83.241.254.6[67]|(?#entec-biogas.at)81.223.126.208|(?#atea)193.183.18.18
#		(?#skip)72.36.164.18|209.209.150.70|62.181.213.66|212.129.164.69|82.165.241.227|81.216.82.100|217.112.126.199|213.61.125.92
#		(?#skip)194.23.76.5|194.239.147.110|212.214.10.2|213.35.200.41|213.50.2.(2|109)|213.150.148.53|217.119.4.77|217.212.20.191|82.134.94.34
#		(?#skip)212.226.164.177|209.217.122.144|212.226.32.5|82.175.95.122|(?#mail-relay.alcom.aland.fi)194.112.0.4
#		(?#skip)(?#colemont.fi)84.239.236.171|(?#meandi.fi)194.16.85.14|(?#tk.salonseutu.fi)195.165.113.93|(?#hammasvaline.fi)195.67.1.(2|3)|(?#mail.nordvalls.se)85.30.130.17
#		(?#skip)(?#alyata.se)213.115.91.238|(?#datacapture.co.uk)adsl-217.146.111.67.merula.net|(?#edu.loviisa.fi)87.94.36.34|(?#ebuf.org)81.17.197.50|(?#julkkikset.fi)62.220.235.62
#		(?#skip)(?#smilehouse.com)193.94.205.129|(?#tamroshop.fi)193.65.59.129|(?#mail.duodecim.fi)195.236.0.9
#		(?#skip)(?#jakomaenapteekki)212.226.146.137|(#?hcn.fi)79.134.112.194
#
## Regexp rules how to detect "dynamic" hostnames. If dynamic host should be
## allowed, hostname should be allowed in skip_dns (RBL section).
#
## TODO? Also RBL checkin' is skiped for those.
#
#		^(ip|ppp|ppoe|adsl|dsl|cable|host|pool)?(-)?\d+[-.]\d+[-.]\d+[-.].*.(ar|br|cn|cl|ru|hr|gr|co|tr|jp|pl|hr|il|in|it|rs|hu|vn|rs|es)
#		^(\d+[-.])?\d+[-.]\d+[-.]\d+[-.]((dynamic|dyn)[-.])?(user.ono.com|caiway.nl)
#		\d+.(pool|user).(einsundeins.de|veloxzone.com.br)
#		adsl-dynamic-pool-xxx.hcm.fpt.vn
# Spam
#		\w\w\d+-\*.dr.home.nl
##		^(a)?dsl[-.](dynamic[-.]?)?\d+[-.]\d+[-.]*.(globonet.hu|ttnet.net.tr)
##		^host\d+-.*-\d+-.*.retail.telecomitalia.it
##		^cable[-.]\d+[-.]\d+[-.]\d+[-.]\d+[-.].*.sbb.rs
#		(pppoe-)?\d+.adsl.ellink.ru
#		^(ppp).*-\d+-\d+.pppoe.spdop.ru
#		^.*-\d+-\d+.broadband.bashtel.ru
#		^.*-\d+-\d+.*.comcast.net
#		pool-\d.*\.verizon.net
#		^\d+-d+-d+-d+\..*\.(?:(?!(fi|se|ee))\w\w(\w)?(\w)?)
#		-\d+.pools.arcor-ip.net
#		-\d+.net.novis.pt
#		cust\d+.know.cable.virginmedia.com
#		Dynamic-IP-\d+.cable.net.co
#		adsl-\d+-\d+-\d+-\d.adsl2.iam.net.ma
#		cpe-\d+.\d+.\d+.\d+.in-addr.arpa
#		.dsl.brasiltelecom.net.br
#		dslb-\d+-\d+-\d+-\d.pools.arcor-ip.net
#		\d+.\d+-ppp.3menatwork.com
#		.dsl.telepac.pt
#		\d+-\d+-\d+-\d+.\w\w\w\d.kabel-badenwuerttemberg.de
#		cust\d+.\d+-\d+.cable.virginmedia.com
#		\d+-\d+-\d+.evo.net.br
#		Dynamic-IP-\d+.cable.net.co
#		.user.veloxzone.com.br
#		.hsd1.\w\w.comcast.net
#		c-\d+-\d+-\d+-\d+..*.(ca|ut|ct|mi).comcast.net
#		\d+-\d+-\d+-.*.cpe.(netcabo.pt|vivax.com.br)
#		\d+.\d+.\d+.\d+.dsl.intelnet.net.gt
#		\d+.user.veloxzone.com.br
#		\d+.\w+.\d+-\d+-\d+.astinet.telkom.net.id
#		\d+-\d+-\d+-\d+.rev.numericable.fr
#		mar\d+-\d+-\d+-\d+-\d+-\d+.fbx.proxad.net
#		pool-\d+-\d+-\d+-\d+.\w+.fios.verizon.net
#		-dhcp\d+.bb.online.no
#		.dbsch1.nb.home.nl
#		.codetel.net.do
#		.dynamic.jazztel.es
#		.dslaccess.aol.com
#		.adsl.cybercity.dk
#		.adsl.enternet.hu
#		.broadband.ctm.net
#		.pool.einsundeins.de
#		-dynamic-\d+.\d+.\d+.\d+.airtelbroadband.in
#		Adsl-\d+.\d+.\d+.\d+.aviso.ci
#		BAGa\d+.bag.pppool.de
#		\d+-\d+-\d+-\d+-dynip.superkabel.de
#		\d+-\d+-\d+-\d+-xdsl-dynamic.kuzbass.net
#		\d+-\d+-\d+-\d+.bois.qwest.net
#		\d+-\d+-\d+-\d+.btc-net.bg
#		\d+-\d+-\d+-\d+.dyn.dsl.cantv.net
#		\d+-\d+-\d+-\d+.pool.ukrtel.net
#		\d+.Red-\d+-\d+-\d+.dynamicIP.rima-tde.net
#		\d+.\d+.\d+-\d+.rev.gaoland.net
#		\d+.\d+.\d+.\d+.dynamic.jazztel.es
#		\d+.\d+.\d+.\d+.fast.net.id
#		\d+.\d+.broadband2.iol.cz
#		\d+.versanet.de
#		\d+E\d+AF\d+.dslaccess.aol.com
#		\d+d\d+f\d+bd.adsl.enternet.hu
#		\d+x\d+.adsl.cybercity.dk
#		\w\d+-\d+-\d+-\d+.broadband.bashtel.ru
#		\w\d+.adsl.alicedsl.de
#		\w\w\\d+.neoplus.adsl.tpnet.pl
#		\w\w\d+-\*.dr.home.nl
#		\w\w\d+\w\d+.virtua.com.br
#		\w\w\w-\d+-\d+-\d+-\d+.red.bezeqint.net
#		\w\w\w(\w)?\d+.neoplus.adsl.tpnet.pl
#		adsl-\d+-\d+.teol.net
#		adsl\d+-\d+-\d+-\d+-\d+.adsl\d+-\d+.iam.net.ma
#		apn-\d+-\d+-\d+-\d+.vodafone.hu
#		cdma-\d+-\d+-\d+-\d+.msk.skylink.ru
#		chello\d+.chello.pl
#		cm-\d+-\d+-\d+-\d+.telecable.es
#		dsl.dynamic\d+.ttnet.net.tr
#		dslb-\d+-\d+-\d+-\d+.pools.arcor-ip.net
#		herti-m.iservice.bg
#		host-\d+-\d+-\d+-\d+.hspa.orange.md
#		host\d+-\d+-dynamic.\d+-\d+-r.retail.telecomitalia.it
#		ip-\d+-\d+-\d+-\d+.vodafone-net.de
#		node-\d+-\d+-\d+-\d+.domolink.tula.net
#		p.+.dip.t-dialin.net
#		p.+.dip\d+.t-ipconnect.de
#		pool-\d+-\d+-\d+-\d+.washdc.fios.verizon.net
#		ppp-\d+-\d+-\d+-\d+.dsidata.sk
#		ppp\d+.dsl.hol.gr
#		rev-\d+-\d+-\d+-\d+.t-mobile.sk
#		triband-\w\w\w\w-\d+.\d+.\d+.\d+.(bol|mtnl).net.in
#		xdsl-\d+-\d+-\d+-\d+.netcologne.de
#		sub-\d\dip\d\d.onenet.an