>> Warren Togami wrote: >> # 2005/07/29, http://www.apnic.net/db/ranges.html >> header RCVD_VIA_APNIC Received =~ >> /[^0-9.](?:5[89]|6[01]|12[456]|20[23]|21[0189]|22[012])(?:\.[012]?[0-9]{1,2}){3}(?:\]|\)| >> >> )/ >> describe RCVD_VIA_APNIC Received through a relay in Asia/Pacific Network
>> Adam Katz had this rule in one of his channels. While it is wholly >> unsafe to be used alone, it could be useful in masscheck statistics and >> possibly if used in meta booleans in combination with other rules. >> >> http://www.apnic.net/publications/research-and-insights/ip-address-trends/apnic-resource-range >> Unfortunately, in testing the above rule on my own corpus I see it is >> missing some obvious Asian addresses. This page reveals that the regex >> is out of date. Does there exist a good automated way to convert many >> CIDR ranges to a single regex? >> >> Warren Togami Hi Warren, I am using the geoIP database in a similar context, but rather than converting to regex, I convert to a cdb file and do a lookup on that. To integrate with spamassassin, a perl cdb module would be needed More info about cdb is available at http://cr.yp.to/cdb.html Regards Wolfgang
