# PHISH TARGETS
#
#  Check for the origin of email claiming to be from common/
#  known phish targets, such as eBay, various banks, various
#  stockbrokers, E-Gold, Solopay, and the like.  There have
#  also been phishes directed against AOL users to steal their
#  AOL accounts, and against Microsoft Windows users to direct
#  them to phony Windows Update sites and (presumably) install
#  a virus or trojan on their computers.
#
#  Phishing is a big problem in a number of arenas, spam one
#  of the lesser.  But phishes do fill up mailboxes with cr*p,
#  even when the user is far too aware to be fooled.  Hence
#  these recipes.
#
#  Updated and verified 4/16/06
#


# Affinity Plus Federal Credit Union
#
LT4=no

:0
* ^From:.*[^0-9a-z]Affinity( )*Plus([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^affinityplus\.org$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^affinityplus\.org$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   207\.225\.135\.3[2-9]|\
                   207\.225\.135\.[4-5][0-9]|\
                   207\.225\.135\.6[0-3])$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Affinity Plus Federal Credit Union)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Amazon.com
#
:0
* FROMDOMAIN ?? ^amazon\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.18\.117\.10[4-9]|\
                   12\.18\.117\.11[0-1]|\
                   12\.30\.177\.15[2-9]|\
                   12\.32\.32\.12[8-9]|\
                   12\.32\.32\.13[0-9]|\
                   12\.32\.32\.14[0-3]|\
                   12\.33\.10\.12[8-9]|\
                   12\.33\.10\.13[0-9]|\
                   12\.33\.10\.14[0-3]|\
                   12\.37\.81\.14[4-9]|\
                   12\.37\.81\.15[0-9]|\
                   12\.37\.84\.4[8-9]|\
                   12\.37\.84\.5[0-9]|\
                   12\.37\.84\.6[0-3]|\
                   12\.40\.178\.22[4-9]|\
                   12\.40\.178\.23[0-9]|\
                   12\.43\.23\.6[4-9]|\
                   12\.43\.23\.7[0-9]|\
                   12\.104\.32\.8[0-7]|\
                   12\.104\.66\.6[4-9]|\
                   12\.104\.66\.7[0-9]|\
                   12\.109\.105\.9[6-9]|\
                   12\.109\.105\.10[0-9]|\
                   12\.109\.105\.11[0-1]|\
                   12\.111\.209\.19[2-9]|\
                   12\.111\.209\.20[0-7]|\
                   12\.146\.22\.12[8-9]|\
                   12\.146\.22\.13[0-9]|\
                   12\.146\.22\.14[0-3]|\
                   12\.149\.186\.3[2-9]|\
                   12\.149\.186\.4[0-7]|\
                   12\.155\.161\.[0-7]|\
                   12\.158\.48\.1[6-9]|\
                   12\.158\.48\.2[0-9]|\
                   12\.158\.48\.3[0-1]|\
                   12\.158\.56\.14[4-9]|\
                   12\.158\.56\.15[0-9]|\
                   12\.163\.227\.9[6-9]|\
                   12\.163\.227\.1[0-1][0-9]|\
                   12\.163\.227\.12[0-7]|\
                   12\.164\.136\.23[2-9]|\
                   12\.164\.141\.16[0-9]|\
                   12\.164\.141\.17[0-5]|\
                   12\.169\.234\.11[2-9]|\
                   12\.169\.234\.12[0-7]|\
                   12\.178\.209\.[0-9]|\
                   12\.178\.209\.1[0-5]|\
                   12\.183\.78\.4[8-9]|\
                   12\.183\.78\.5[0-9]|\
                   12\.183\.78\.6[0-3]|\
                   12\.183\.163\.3[2-9]|\
                   12\.183\.163\.4[0-7]|\
                   63\.79\.109\.9[6-9]|\
                   63\.79\.109\.10[0-9]|\
                   63\.79\.109\.11[0-1]|\
                   63\.79\.232\.22[4-9]|\
                   63\.79\.232\.23[0-9]|\
                   63\.83\.9\.12[8-9]|\
                   63\.83\.9\.1[3-5][0-9]|\
                   63\.172\.60\.13[6-9]|\
                   63\.172\.60\.14[0-3]|\
                   63\.174\.37\.11[2-9]|\
                   63\.175\.98\.24[0-9]|\
                   63\.175\.98\.25[0-5]|\
                   65\.199\.110\.24[0-9]|\
                   65\.199\.110\.25[0-5]|\
                   65\.201\.206\.[0-9]|\
                   65\.201\.206\.[1-3][0-9]|\
                   65\.201\.206\.4[0-7]|\
                   65\.201\.233\.14[4-9]|\
                   65\.201\.233\.15[0-9]|\
                   65\.204\.202\.19[2-9]|\
                   65\.204\.202\.20[0-7]|\
                   65\.206\.219\.19[2-9]|\
                   65\.206\.219\.20[0-7]|\
                   65\.212\.6\.12[8-9]|\
                   65\.212\.6\.13[0-9]|\
                   65\.212\.6\.14[0-3]|\
                   65\.222\.194\.17[6-9]|\
                   65\.222\.194\.18[0-9]|\
                   65\.222\.194\.19[0-1]|\
                   206\.159\.98\.[0-9]|\
                   206\.159\.98\.1[0-5]|\
                   207\.171\.1[6-8][0-9]\.[0-9][0-9]?[0-9]?|\
                   207\.171\.19[0-1]\.[0-9][0-9]?[0-9]?|\
                   208\.192\.208\.[0-9][0-9]?[0-9]?|\
                   208\.216\.180\.[0-9][0-9]?[0-9]?|\
                   208\.226\.120\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Amazon)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# AmCore Bank
#
LT4=no

:0
* ^From:.*[^0-9a-z]AmCore( )*Bank([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^amcore\.com$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^amcore\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   66\.84\.225\.8[0-9]|\
                   66\.84\.225\.9[0-5])$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (AmCore Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# ANZ (Australia & New Zealand Banking Group, Ltd.)
#
:0
* FROMDOMAIN ?? ^anz\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   202\.2\.5[6-9]\.[0-9][0-9]?[0-9]?|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (ANZ Banking Group, Ltd.)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# AOL
#
# Updated and domains verified 1/21/05
# Last reported spam/fraud:  1/21/05
#
# Other Relevant Info:
#
LT4=no

:0
* FROMEMAIL ?? ^(billing|remindingyou|updating)@aol\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   64\.76\.[0-9]\.[0-9][0-9]?[0-9]?|\
                   64\.76\.[1-5][0-9]\.[0-9][0-9]?[0-9]?|\
                   64\.76\.6[0-3]\.[0-9][0-9]?[0-9]?)$
{ LT4=yes }

:0
* ^Received: from AOL[^0-9a-z]*Billing[^0-9a-z]*(Center|Department)([^0-9a-z]|$)
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   64\.76\.[0-9]\.[0-9][0-9]?[0-9]?|\
                   64\.76\.[1-5][0-9]\.[0-9][0-9]?[0-9]?|\
                   64\.76\.6[0-3]\.[0-9][0-9]?[0-9]?)$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (AOL)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Arizona State Savings and Credit Union
#
:0
* FROMDOMAIN ?? ^azstcu\.org$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   65\.200\.48\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Arizona State Savings and Credit Union)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Armed Forces National Bank
#
LT4=no

:0
* ^From:.*[^0-9a-z]Armed( )*Forces( )*(National( )*)?Bank([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^(afbank\.com|\
                    dfckc\.com)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(afbank\.com|\
                  dfckc\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   198\.6\.1\.[0-9][0-9]?[0-9]?|\
                   207\.42\.8[4-5]\.[0-9][0-9]?[0-9]?)$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Armed Forces National Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Associated Banc-Corp
#
:0
* FROMDOMAIN ?? ^associatedbank\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   66\.72\.88\.1[6-9]|\
                   66\.72\.88\.2[0-3]|\
                   207\.67\.18\.[0-9][0-9]?[0-9]?|\
                   207\.170\.[0-9]\.[0-9][0-9]?[0-9]?|\
                   207\.170\.[1-5][0-9]\.[0-9][0-9]?[0-9]?|\
                   207\.170\.6[0-3]\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Associated Banc-Corp)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Banca Intesa
#
:0
* FROMDOMAIN ?? ^bancointesa\.it$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   64\.192\.216\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Banca Intesa)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Banco Nacional de Mexico
#
LT4=no

:0
* ^From:.*[^0-9a-z]Banco( )*(Nacional( )*)?de( )*Mexico([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^banamex\.com\.mx$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^banamex\.com\.mx$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   192\.193\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?)$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Banco Nacional de Mexico)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Banco Posta
#
:0
* FROMDOMAIN ?? ^poste\.it$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   62\.241\.[4-5]\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Banco Posta)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# BankNorth N.A.
#
:0
* FROMDOMAIN ?? ^banknorth\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.15\.146\.[0-9][0-9]?[0-9]?|\
                   12\.130\.11\.180|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (BankNorth N.A.)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Bank of America
#
LT4=no

:0
* ^From:.*[^0-9a-z]@bankofamer?ica[-_0-9a-z]*\.[a-z][a-z][a-z]?[a-z]?(\.[a-z][a-z])?([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^bankofamerica\.com$
{ LT4=yes }

:0
* ^From:.*[^0-9a-z]Bank( )*of( )*America([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^bankofamerica\.com$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^bankofamerica\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   4\.18\.48\.2[4-9]|\
                   4\.18\.48\.3[0-1]|\
                   4\.23\.182\.[0-9][0-9]?[0-9]?|\
                   12\.27\.254\.22[4-9]|\
                   12\.27\.254\.2[3-4][0-9]|\
                   12\.27\.254\.25[0-5]|\
                   12\.30\.254\.11[2-9]|\
                   12\.30\.254\.12[0-7]|\
                   12\.40\.139\.[0-9]|\
                   12\.40\.139\.[1-9][0-9]|\
                   12\.40\.139\.1[0-1][0-9]|\
                   12\.40\.139\.12[0-7]|\
                   12\.163\.0\.12[8-9]|\
                   12\.163\.0\.13[0-9]|\
                   12\.163\.0\.14[0-3]|\
                   63\.80\.12\.9[6-9]|\
                   63\.80\.12\.10[0-3]|\
                   63\.80\.147\.3[2-9]|\
                   63\.80\.147\.[4-5][0-9]|\
                   63\.80\.147\.6[0-3]|\
                   63\.82\.155\.17[6-9]|\
                   63\.82\.155\.18[0-3]|\
                   63\.84\.228\.19[2-9]|\
                   63\.97\.3\.[0-9][0-9]?[0-9]?|\
                   63\.116\.167\.[0-9][0-9]?[0-9]?|\
                   63\.118\.47\.20[8-9]|\
                   63\.118\.47\.21[0-5]|\
                   63\.121\.67\.[0-9][0-9]?[0-9]?|\
                   63\.126\.57\.17[6-9]|\
                   63\.126\.57\.18[0-3]|\
                   63\.143\.72\.22[4-9]|\
                   63\.143\.72\.2[3-4][0-9]|\
                   63\.143\.72\.25[0-5]|\
                   63\.150\.152\.12[8-9]|\
                   63\.150\.152\.1[3-5][0-9]|\
                   63\.150\.155\.[0-9][0-9]?[0-9]?|\
                   63\.202\.197\.7[2-9]|\
                   63\.207\.167\.[0-7]|\
                   64\.162\.36\.9[6-9]|\
                   64\.162\.36\.10[0-3]|\
                   64\.166\.81\.5[6-9]|\
                   64\.166\.81\.6[0-3]|\
                   64\.168\.239\.23[2-9]|\
                   64\.169\.64\.23[2-9]|\
                   64\.169\.176\.7[2-9]|\
                   64\.170\.107\.5[6-9]|\
                   64\.170\.107\.6[0-3]|\
                   64\.170\.147\.[0-9]|\
                   64\.170\.147\.1[0-5]|\
                   64\.174\.67\.17[6-9]|\
                   64\.174\.67\.18[0-3]|\
                   65\.65\.126\.5[6-9]|\
                   65\.65\.126\.6[0-3]|\
                   65\.88\.237\.14[4-9]|\
                   65\.88\.237\.15[0-1]|\
                   65\.124\.184\.[0-9][0-9]?[0-9]?|\
                   65\.200\.109\.12[0-7]|\
                   65\.204\.49\.22[4-9]|\
                   65\.204\.49\.23[0-1]|\
                   65\.210\.21\.[0-7]|\
                   65\.223\.84\.7[2-9]|\
                   65\.248\.73\.16[0-7]|\
                   66\.121\.187\.19[2-9]|\
                   66\.123\.113\.4[0-7]|\
                   66\.136\.87\.20[8-9]|\
                   66\.136\.87\.21[0-5]|\
                   66\.137\.183\.8[8-9]|\
                   66\.137\.183\.9[0-5]|\
                   66\.195\.76\.9[6-9]|\
                   66\.195\.76\.1[0-1][0-9]|\
                   66\.195\.76\.12[0-7]|\
                   67\.112\.173\.20[8-9]|\
                   67\.112\.173\.21[0-5]|\
                   67\.115\.26\.9[6-9]|\
                   67\.115\.26\.10[0-3]|\
                   67\.115\.195\.6[4-9]|\
                   67\.115\.195\.7[0-1]|\
                   67\.116\.244\.18[4-9]|\
                   67\.116\.244\.19[0-1]|\
                   67\.117\.88\.12[8-9]|\
                   67\.117\.88\.13[0-5]|\
                   67\.117\.99\.3[2-9]|\
                   67\.117\.197\.7[2-9]|\
                   67\.117\.197\.8[0-7]|\
                   67\.118\.64\.5[6-9]|\
                   67\.118\.64\.6[0-3]|\
                   67\.118\.210\.7[2-9]|\
                   67\.121\.132\.11[2-9]|\
                   68\.20\.165\.10[4-9]|\
                   68\.20\.165\.11[0-1]|\
                   68\.20\.246\.16[0-7]|\
                   68\.22\.174\.6[4-9]|\
                   68\.22\.174\.7[0-1]|\
                   68\.120\.143\.8[8-9]|\
                   68\.120\.143\.9[0-5]|\
                   68\.126\.41\.16[8-9]|\
                   68\.126\.41\.17[0-5]|\
                   69\.224\.232\.8[8-9]|\
                   69\.224\.232\.9[0-5]|\
                   159\.68\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   164\.109\.82\.229|\
                   165\.3[2-9]\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   165\.4[0-8]\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   171\.12[8-9]\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   171\.1[3-9][0-9]\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   171\.20[0-6]\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   192\.136\.66\.[0-9][0-9]?[0-9]?|\
                   198\.70\.200\.[0-7]|\
                   204\.94\.162\.12[8-9]|\
                   204\.94\.162\.13[0-5]}\
                   204\.97\.253\.[0-7]|\
                   204\.254\.78\.12[8-9]|\
                   204\.254\.78\.13[0-5]}\
                   205\.246\.17[8-9]\.[0-9][0-9]?[0-9]?|\
                   206\.107\.208\.24[8-9]|\
                   206\.107\.208\.25[0-5]|\
                   207\.176\.168\.14[4-9]|\
                   207\.176\.168\.15[0-1]|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?|\
                   209\.23\.64\.[0-9][0-9]?[0-9]?|\
                   216\.62\.54\.[0-9]|\
                   216\.62\.54\.[1-2][0-9]|\
                   216\.62\.54\.3[0-1]|\
                   216\.94\.21\.[0-9][0-9]?[0-9]?|\
                   216\.95\.145\.19[2-9]|\
                   216\.95\.145\.2[0-1][0-9]|\
                   216\.95\.145\.22[0-3]|\
                   216\.100\.59\.14[4-9]|\
                   216\.100\.59\.15[0-1]|\
                   216\.100\.161\.13[6-9]|\
                   216\.100\.161\.14[0-3])$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Bank of America)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}

# Bank of Oklahoma
#
LT4=no

:0
* ^From:.*[^0-9a-z](Bank( )*Of( )*Oklahoma|\
                    Oklahoma.*Bank)([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^(bankofoklahoma\.com|\
                    bokf\.com)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(bankofoklahoma\.com|\
                  bokf\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   63\.253\.56\.13[6-9]|\
                   63\.253\.56\.14[0-3]|\
                   65\.64\.53\.21[6-9]|\
                   65\.64\.53\.22[0-3]|\
                   66\.139\.33\.24[0-9]|\
                   66\.139\.33\.25[0-5]|\
                   208\.129\.104\.22[4-9]|\
                   208\.129\.104\.23[0-9]|\
                   208\.129\.120\.[0-9][0-9]?[0-9]?|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?|\
                   216\.60\.18\.[0-9][0-9]?[0-9]?)$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Bank of Oklahoma)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Bank of the West
#
LT4=no

:0
* ^From:.*[^0-9a-z](Bank( )*Of( )*The( )*West|\
                    Bank\.of\.the\.West)([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^(bankofthewest\.com|\
                    bow\.com)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(bankofthewest\.com|\
                  bow\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   63\.85\.100\.[0-9][0-9]?[0-9]?|\
                   64\.170\.212\.15[2-9]|\
                   66\.120\.222\.16[0-7]|\
                   67\.66\.65\.10[4-9]|\
                   67\.66\.65\.11[0-1]|\
                   67\.66\.70\.19[2-9]|\
                   67\.66\.70\.20[0-7]|\
                   67\.117\.84\.21[6-9]|\
                   67\.117\.84\.22[0-3]|\
                   67\.125\.76\.22[4-9]|\
                   67\.125\.76\.23[0-1]|\
                   67\.125\.77\.[0-7]|\
                   206\.169\.172\.20[8-9]|\
                   206\.169\.172\.21[0-5]|\
                   207\.114\.194\.[0-9][0-9]?[0-9]?|\
                   208\.2\.178\.[0-9][0-9]?[0-9]?|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?)$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Bank of the West)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# BankCorpSouth
#
LT4=no

:0
* ^From:.*[^0-9a-z]BankCorp( )*South([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^(bankcorpsouth\.com|\
                    bankcorpsouthonline\.com|\
                    bxs\.com)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(bankcorpsouth\.com|\
                  bankcorpsouthonline\.com|\
                  bxs\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   66\.45\.22[4-6]\.[0-9][0-9]?[0-9]?|\
                   204\.13\.16[0-3]\.[0-9][0-9]?[0-9]?|\
                   207\.203\.128\.[0-9][0-9]?[0-9]?|\
                   208\.2\.18[8-9]\.[0-9][0-9]?[0-9]?)$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (BankCorpSouth)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# BankOne
#
LT4=no

:0
* ^From:.*[^0-9a-z](Bank( )*One)([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^bankone\.com$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^bankone\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.60\.248\.1[6-9]|\
                   12\.60\.248\.2[0-3]|\
                   63\.73\.151\.12[8-9]|\
                   63\.73\.151\.1[3-9][0-9]|\
                   63\.73\.151\.2[0-4][0-9]|\
                   63\.73\.151\.25[0-5]|\
                   63\.86\.135\.4[0-7]|\
                   63\.86\.136\.19[2-9]|\
                   63\.86\.136\.2[0-1][0-9]|\
                   63\.86\.136\.22[0-3]|\
                   64\.108\.8\.10[4-9]|\
                   64\.108\.8\.11[0-1]|\
                   64\.108\.9\.12[8-9]|\
                   64\.108\.9\.13[0-5]|\
                   64\.109\.245\.22[4-9]|\
                   64\.109\.245\.23[0-1]|\
                   66\.210\.244\.9[6-9]|\
                   66\.210\.244\.1[0-1][0-9]|\
                   66\.210\.244\.12[0-7]|\
                   68\.23\.95\.6[4-9]|\
                   68\.23\.95\.7[0-1]|\
                   68\.73\.134\.12[0-7]|\
                   68\.251\.211\.4[0-7]|\
                   159.53\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   206\.18\.233\.1[6-9]|\
                   206\.18\.233\.2[0-3]|\
                   207\.24\.209\.[0-9][0-9]?[0-9]?|\
                   207\.122\.21[6-7]\.[0-9][0-9]?[0-9]?|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?)$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (BankOne)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Barclay's Bank, PLC
#
LT4=no

:0
* ^From:.*[^0-9a-z](Barclay's( )*Bank)([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^barclays\.co\.uk$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^barclays\.co\.uk$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   4\.17\.129\.20[0-7]|\
                   12\.146\.82\.6[4-9]|\
                   12\.146\.82\.7[0-9]|\
                   62\.172\.239\.[0-9][0-9]?[0-9]?|\
                   63\.197\.24\.12[8-9]|\
                   63\.197\.24\.13[0-5]|\
                   64\.161\.137\.12[8-9]|\
                   64\.161\.137\.13[0-9]|\
                   64\.161\.137\.14[0-3]|\
                   64\.175\.56\.15[2-9]|\
                   65\.200\.250\.3[2-9]|\
                   65\.205\.20[4-5]\.[0-9][0-9]?[0-9]?|\
                   65\.223\.212\.9[6-9]|\
                   65\.223\.212\.10[0-3]|\
                   66\.100\.125\.6[4-9]|\
                   66\.100\.125\.[7-9][0-9]|\
                   66\.100\.125\.1[0-1][0-9]|\
                   66\.100\.125\.12[0-7]|\
                   67\.119\.4\.8[0-7]|\
                   69\.52\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   69\.104\.37\.[8-9]|\
                   69\.104\.37\.1[0-5]|\
                   194\.128\.130\.[0-9][0-9]?[0-9]?|\
                   198\.92\.160\.6[4-9]|\
                   198\.92\.160\.7[0-1]|\
                   204\.76\.3[2-9]\.[0-9][0-9]?[0-9]?|\
                   204\.76\.[4-5][0-9]\.[0-9][0-9]?[0-9]?|\
                   204\.76\.6[0-3]\.[0-9][0-9]?[0-9]?|\
                   204\.128\.255\.[0-9][0-9]?[0-9]?|\
                   208\.192\.171\.[0-9][0-9]?[0-9]?|\
                   209\.167\.202\.20[8-9]|\
                   209\.167\.202\.21[0-5]|\
                   209\.176\.24\.20[8-9]|\
                   209\.176\.24\.21[0-9]|\
                   209\.176\.24\.22[0-3]|\
                   209\.198\.19\.[0-9][0-9]?[0-9]?)$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Barclay's Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Canadian Imperial Bank of Commerce (CIBC)
#
:0
* FROMDOMAIN ?? ^cibc\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   159\.231\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   192\.42\.54\.[0-9][0-9]?[0-9]?|\
                   216\.94\.156\.6[4-9]|\
                   216\.94\.156\.[7-9][0-9]|\
                   216\.94\.156\.1[0-1][0-9]|\
                   216\.94\.156\.12[0-7]|\
                   216\.254\.181\.19[2-9]|\
                   216\.254\.181\.20[0-7])$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (CIBC)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Capital One
#
:0
* FROMDOMAIN ?? ^capitalone\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   4\.21\.96\.2[4-9]|\
                   4\.21\.96\.3[0-1]|\
                   4\.22\.150\.20[8-9]|\
                   4\.22\.150\.21[0-5]|\
                   12\.41\.121\.12[8-9]|\
                   12\.41\.121\.1[3-9][0-9]|\
                   12\.41\.121\.2[0-4][0-9]|\
                   12\.41\.121\.25[0-5]|\
                   65\.68\.167\.14[4-9]|\
                   65\.68\.167\.15[0-1]|\
                   65\.70\.234\.16[8-9]|\
                   65\.70\.234\.17[0-5]|\
                   65\.222\.175\.[0-9]|\
                   65\.222\.175\.1[0-5]|\
                   66\.73\.94\.1[6-8][0-9]|\
                   66\.73\.94\.19[0-1]|\
                   141\.156\.28\.23[2-9]|\
                   141\.156\.153\.8[0-7]|\
                   199\.244\.21[4-9]\.[0-9][0-9]?[0-9]?|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?|\
                   216\.204\.209\.3[2-9]|\
                   216\.204\.209\.[4-5][0-9]|\
                   216\.204\.209\.6[0-3])$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Capital One Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Certegy
#
:0
* FROMDOMAIN ?? ^(certegy\.com|\
                  cey-ebanking\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   65\.222\.91\.[0-9][0-9]?[0-9]?|\
                   65\.112\.141\.12[8-9]|\
                   65\.112\.141\.1[3-5][0-9]|\
                   65\.112\.153\.[0-9]|\
                   65\.112\.153\.[1-2][0-9]|\
                   65\.112\.153\.3[0-1]|\
                   66\.184\.129\.20[8-9]|\
                   66\.184\.129\.21[0-5]|\
                   67\.67\.119\.4[8-9]|\
                   67\.67\.119\.5[0-5]|\
                   68\.123\.16\.4[8-9]|\
                   68\.123\.16\.5[0-5]|\
                   68\.124\.76\.24[0-7]|\
                   69\.128\.27\.[0-9][0-9]?[0-9]?|\
                   162\.39\.233\.21[6-9]|\
                   162\.39\.233\.22[0-3]|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?|\
                   216\.64\.177\.[0-9][0-9]?[0-9]?|\
                   216\.248\.188\.6[4-9]|\
                   216\.248\.188\.[7-8][0-9]|\
                   216\.248\.188\.9[0-5])$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Certegy)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Chevy Chase Bank
#
LT4=no

:0
* LT4 ?? no
* ^From:.*[^0-9a-z](Chevy( )*Chase( )*Bank)([^a-z0-9.]|$)
* ! FROMDOMAIN ?? ^chevychasebank\.com$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^chevychasebank\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   151\.200\.214\.12[8-9]|\
                   151\.200\.214\.1[3-5][0-9]|\
                   198\.190\.220\.[0-9][0-9]?[0-9]?|\
                   206\.112\.91\.22[4-9]|\
                   206\.112\.91\.2[3-4][0-9]|\
                   206\.112\.91\.25[0-5]|\
                   206\.112\.93\.8[0-9]|\
                   206\.112\.93\.9[0-5]|\
                   206\.112\.93\.12[8-9]|\
                   206\.112\.93\.13[0-9]|\
                   206\.112\.93\.14[0-3]|\
                   206\.112\.93\.1[6-8][0-9]|\
                   206\.112\.93\.19[0-1]|\
                   206\.189\.239\.14[4-9]|\
                   206\.189\.239\.15[0-1]|\
                   207\.213\.100\.24[0-7])$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Chevy Chase Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Citibank
#
LT4=no

:0
* ^From:.*[^0-9a-z](Cit[iy]( )*bank|Cit[iy]( )*cards|Cit[iy]( )*corp|Cit[iy]( )*Financial|Universal( )*Card)([^a-z0-9.]|$)
* ! FROMDOMAIN ?? ^(accountonline\.com|\
                    citi\.com|\
                    citibank\.com|\
                    citibankcards\.com|\
                    citicards\.com|\
                    citicorp\.com|\
                    citifinancial\.com|\
                    citigroup\.com|\
                    universalcard\.com)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(accountonline\.com|\
                  citi\.com|\
                  citibank\.com|\
                  citibankcards\.com|\
                  citicards\.com|\
                  citicorp\.com|\
                  citifinancial\.com|\
                  citigroup\.com|\
                  universalcard\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.158\.117\.3[2-9]|\
                   12\.158\.117\.[4-5][0-9]|\
                   12\.158\.117\.6[0-3]|\
                   63\.67\.86\.[0-9][0-9]?[0-9]?|\
                   63\.71\.124\.19[2-9]|\
                   63\.71\.124\.2[0-4][0-9]|\
                   63\.71\.124\.25[0-5]|\
                   63\.72\.243\.[0-9][0-9]?[0-9]?|\
                   63\.74\.88\.6[4-9]|\
                   63\.74\.88\.7[0-9]|\
                   63\.86\.191\.9[6-9]|\
                   63\.86\.191\.1[0-1][0-9]|\
                   63\.86\.191\.12[0-7]|\
                   65\.202\.41\.19[2-9]|\
                   65\.202\.41\.2[0-1][0-9]|\
                   65\.202\.41\.22[0-3]|\
                   66\.60\.177\.22[4-9]|\
                   66\.60\.177\.23[0-1]|\
                   153\.40\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   159\.17\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   163\.3[5-9]\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   169\.1[6-7][0-9]\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   169\.18[0-3]\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   192\.48\.247\.[0-9][0-9]?[0-9]?|\
                   192\.132\.9\.[0-9][0-9]?[0-9]?|\
                   192\.148\.191\.[0-9][0-9]?[0-9]?|\
                   192\.193\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   192\.246\.55\.[0-9][0-9]?[0-9]?|\
                   196\.28\.49\.[0-9]|\
                   196\.28\.49\.[1-2][0-9]|\
                   196\.28\.49\.3[0-1]|\
                   198\.73\.22[8-9]\.[0-9][0-9]?[0-9]?|\
                   198\.73\.23[0-9]\.[0-9][0-9]?[0-9]?|\
                   198\.160\.96\.23[1-3]|\
                   204\.176\.33\.22[4-9]|\
                   204\.176\.33\.23[0-1]|\
                   204\.176\.186\.12[8-9]|\
                   204\.176\.186\.1[3-9][0-9]|\
                   204\.176\.186\.19[0-1]|\
                   207\.35\.237\.24[0-7]|\
                   207\.236\.69\.20[8-9]|\
                   207\.236\.69\.21[0-5]|\
                   208\.44\.107\.3[2-9]|\
                   208\.44\.107\.[4-5][0-9]|\
                   208\.44\.107\.6[0-3]|\
                   208\.58\.129\.22[4-9]|\
                   208\.58\.129\.23[0-9]|\
                   208\.132\.249\.[0-9]|\
                   208\.132\.249\.[1-2][0-9]|\
                   208\.132\.249\.3[0-1]|\
                   208\.166\.35\.12[8-9]|\
                   208\.166\.35\.13[0-9]|\
                   208\.166\.35\.14[0-3]|\
                   208\.231\.68\.[0-9][0-9]?[0-9]?|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?|\
                   209\.154\.118\.[0-9][0-9]?[0-9]?|\
                   216\.83\.190\.6[4-9]|\
                   216\.83\.190\.7[0-9]|\
                   216\.233\.22\.12[8-9]|\
                   216\.233\.22\.13[0-5])$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (CitiBank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Citizens Bank
#
:0
* FROMDOMAIN ?? ^citizensbank\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?|\
                   209\.180\.181\.20[8-9]|\
                   209\.180\.181\.21[0-9]|\
                   209\.180\.181\.22[0-3])$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (CitizensBank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Charter One Bank
#
LT4=no

:0
* LT4 ?? no
* ^From:.*[^0-9a-z](Charter( )*One)([^a-z0-9.]|$)
* ! FROMDOMAIN ?? ^(charterone\.com|\
                    charteronebank\.com|\
                    charteronecredit\.com|\
                    charteronemortgage\.com|\
                    totallyfreebanking\.com|\
                    totallyfreebusiness\.com)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(charterone\.com|\
                  charteronebank\.com|\
                  charteronecredit\.com|\
                  charteronemortgage\.com|\
                  totallyfreebanking\.com|\
                  totallyfreebusiness\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.111\.190\.[0-9][0-9]?[0-9]?|\
                   63\.109\.235\.[0-9][0-9]?[0-9]?|\
                   65\.209\.97\.[0-9][0-9]?[0-9]?|\
                   68\.22\.63\.2[4-9]|\
                   68\.22\.63\.3[0-1]|\
                   68\.79\.172\.24[8-9]|\
                   68\.79\.172\.25[0-5]|\
                   68\.249\.146\.1[6-8][0-9]|\
                   68\.249\.146\.19[0-1]|\
                   68\.254\.0\.7[2-9]|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?)$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Charter One Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Colonial Bank
#
:0
* FROMDOMAIN ?? ^colonialbank\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   63\.98\.62\.3[2-9]|\
                   63\.98\.62\.[4-5][0-9]|\
                   63\.98\.62\.6[0-3]|\
                   63\.231\.70\.18[4-9]|\
                   63\.231\.70\.19[0-1]|\
                   130\.94\.79\.32|\
                   216\.84\.195\.6[4-9]|\
                   216\.84\.195\.7[0-1])$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Colonial Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Comerica Bank
#
:0
* FROMDOMAIN ?? ^(comerica\.com|\
                  comericabank\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   63\.240\.54\.4[8-9]|\
                   63\.240\.54\.5[0-9]|\
                   63\.240\.54\.6[0-3]|\
                   65\.248\.47\.[0-9][0-9]?[0-9]?|\
                   67\.37\.208\.14[4-9]|\
                   67\.37\.208\.15[0-1]|\
                   67\.37\.222\.24[8-9]|\
                   67\.37\.222\.25[0-5]|\
                   67\.37\.223\.[0-7]|\
                   67\.114\.117\.3[2-9]|\
                   68\.248\.22\.10[4-9]|\
                   68\.248\.22\.11[0-1]|\
                   69\.151\.23\.18[4-9]|\
                   69\.151\.23\.19[0-1]|\
                   69\.208\.239\.[8-9]|\
                   69\.208\.239\.1[0-5]|\
                   69\.213\.194\.9[6-9]|\
                   69\.213\.194\.10[0-3]|\
                   170\.228\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   204\.146\.121\.[0-9][0-9]?[0-9]?|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?|\
                   209\.186\.9[0-1]\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Comerica)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Commerce Bancshares
#
:0
* FROMDOMAIN ?? ^commercebank\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.167\.75\.[0-9][0-9]?[0-9]?|\
                   12\.167\.89\.[0-9][0-9]?[0-9]?|\
                   208\.190\.195\.12[8-9]|\
                   208\.190\.195\.1[3-5][0-9]|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?|\
                   209\.184\.158\.1[6-9]|\
                   209\.184\.158\.2[0-9]|\
                   209\.184\.158\.3[0-1])$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Commerce Bancshares)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Commercial Federal Bank
#
LT4=no

:0
* LT4 ?? no
* ^From:.*[^0-9a-z](Commercial( )*Federal( )*Bank)([^a-z0-9.]|$)
* ! FROMDOMAIN ?? ^(comfedbank\.com|\
                    commercialfed\.com)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(comfedbank\.com|\
                  commercialfed\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   204\.44\.[0-9]\.[0-9][0-9]?[0-9]?|\
                   204\.44\.1[0-4]\.[0-9][0-9]?[0-9]?|\
                   216\.58\.227\.[0-7]|\
                   216\.58\.227\.8[0-9]|\
                   216\.58\.227\.9[0-5])$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Commercial Federal Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Commerzbank AG
#
LT4=no

:0
* LT4 ?? no
* ^From:.*[^0-9a-z](COMMERZBANK)([^a-z0-9.]|$)
* ! FROMDOMAIN ?? ^(commerzbanking\.de|\
                    commerzbanking\.net)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(commerzbanking\.de|\
                  commerzbanking\.net)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   68\.160\.75\.[0-9][0-9]?[0-9]?|\
                   69\.74\.48\.[0-9][0-9]?[0-9]?|\
                   141\.155\.81\.[0-9][0-9]?[0-9]?|\
                   141\.155\.195\.[0-9][0-9]?[0-9]?|\
                   167\.206\.18\.9[6-9]|\
                   167\.206\.18\.1[0-1][0-9]|\
                   167\.206\.18\.12[0-7]|\
                   208\.141\.100\.1[6-8][0-9]|\
                   208\.141\.100\.19[0-1]|\
                   208\.163\.167\.3[2-9]|\
                   208\.163\.167\.[4-5][0-9]|\
                   208\.163\.167\.6[0-3])$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Commerzbank AG)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Commonwealth Bank of Australia
#
LT4=no

:0
* LT4 ?? no
* ^From:.*[^0-9a-z](Commonwealth( )*Bank)([^a-z0-9.]|$)
* ! FROMDOMAIN ?? ^(cba\.com\.au|\
                    commbank\.com\.au)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(cba\.com\.au|\
                  commbank\.com\.au)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   199\.42\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   203\.17\.185\.[0-9][0-9]?[0-9]?)$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (CommonWealth Bank of Australia)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Community Credit Union
#
:0
* FROMDOMAIN ?? ^communitycu\.org$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   64\.124\.97\.21[6-9]|\
                   64\.124\.97\.22[0-3]|\
                   66\.84\.199\.21[6-9]|\
                   66\.84\.199\.22[0-3]|\
                   69\.0\.28\.12[8-9]|\
                   69\.0\.28\.13[0-5]|\
                   209\.184\.79\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Community Credit Union)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# CreditUnion.com
#
:0
* FROMDOMAIN ?? ^creditunion\.com$
* ! FIRSTEXIP ?? ^(66\.240\.173\.8)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (CreditUnion.com)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Credit Union 1
#
:0
* FROMDOMAIN ?? ^(creditunion1\.org|\
                  cu1\.org)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.1\.222\.20[8-9]|\
                   12\.1\.222\.21[0-9]|\
                   12\.1\.222\.22[0-3]|\
                   12\.1\.223\.3[2-9]|\
                   12\.1\.223\.4[0-7]|\
                   12\.24\.192\.19[2-9]|\
                   12\.30\.72\.[0-7]|\
                   12\.31\.248\.21[6-9]|\
                   12\.31\.248\.22[0-3]|\
                   12\.43\.95\.8[0-7]|\
                   12\.109\.76\.5[6-9]|\
                   12\.109\.76\.6[0-3]|\
                   12\.160\.14\.13[6-9]|\
                   12\.160\.14\.14[0-3]|\
                   12\.170\.214\.[8-9]|\
                   12\.170\.214\.1[0-5]|\
                   12\.175\.0\.23[2-9]|\
                   68\.20\.201\.3[2-9]|\
                   68\.72\.55\.11[2-9]|\
                   68\.78\.166\.1[6-9]|\
                   68\.78\.166\.2[0-3]|\
                   68\.79\.157\.5[6-9]|\
                   68\.79\.157\.6[0-3]|\
                   68\.79\.244\.7[2-9]|\
                   68\.248\.245\.23[2-9]|\
                   165\.252\.40\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Credit Union 1)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Desjardins
#
LT4=no

:0
* ^From:.*[^0-9a-z]Desjardins([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^(accesd\.com|\
                    desjardins\.com)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(accesd\.com|\
                  desjardins\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   67\.69\.110\.10[4-9]|\
                   67\.69\.110\.11[0-1]|\
                   69\.70\.4\.1[6-9]|\
                   69\.70\.4\.2[0-3]|\
                   67\.70\.251\.[8-9]|\
                   67\.70\.251\.1[0-5]|\
                   67\.70\.254\.3[2-9]|\
                   67\.71\.213\.24[8-9]|\
                   67\.71\.213\.25[0-5]|\
                   69\.70\.10\.22[4-9]|\
                   69\.70\.10\.23[0-1]|\
                   69\.157\.209\.7[2-9]|\
                   198\.73\.251\.[0-9][0-9]?[0-9]?|\
                   199\.243\.87\.9[6-9]|\
                   199\.243\.87\.10[0-3]|\
                   207\.61\.255\.12[8-9]|\
                   207\.61\.255\.1[3-8][0-9]|\
                   207\.61\.255\.19[0-1])$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Desjardins)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Deutsche Bank
#
LT4=no

:0
* LT4 ?? no
* ^From:.*[^0-9a-z](Deutsche( )*Bank)([^a-z0-9.]|$)
* ! FROMDOMAIN ?? ^(deutsche-bank\.de|\
                    deutschebank\.de)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(deutsche-bank\.de|\
                  deutschebank\.de)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.30\.108\.7[2-9]|\
                   66\.100\.126\.11[2-9]|\
                   66\.100\.126\.12[0-7]|\
                   138\.93\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   160\.8[2-3]\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   198\.183\.6[4-9]\.[0-9][0-9]?[0-9]?|\
                   198\.183\.[7-9][0-9]\.[0-9][0-9]?[0-9]?|\
                   198\.183\.1[0-1][0-9]\.[0-9][0-9]?[0-9]?|\
                   198\.183\.12[0-7]\.[0-9][0-9]?[0-9]?|\
                   216\.208\.156\.16[0-7])$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Deutsche Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# eBay/Half.com/PayPal Fraud
#
LT4=no

:0
* ^(From|Reply-To):.*[^0-9a-z](eBay|PayPa[il1])[^@]
* ! FROMDOMAIN ?? ^(ebay\.com|\
                    half\.com|\
                    paypal\.com)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(ebay\.com|\
                  half\.com|\
                  paypal\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.155\.144\.6[4-9]|\
                   12\.155\.144\.[7-8][0-9]|\
                   12\.155\.144\.9[0-5]|\
                   63\.146\.113\.[0-9]|\
                   63\.146\.113\.[1-2][0-9]|\
                   63\.146\.113\.3[0-1]|\
                   63\.197\.85\.1[6-8][0-9]|\
                   63\.197\.85\.19[0-1]|\
                   64\.4\.24[0-9]\.[0-9][0-9]?[0-9]?|\
                   64\.4\.25[0-5]\.[0-9][0-9]?[0-9]?|\
                   64\.94\.204\.19[2-9]|\
                   64\.94\.204\.2[0-1][0-9]|\
                   64\.94\.204\.22[0-3]|\
                   64\.95\.13[8-9]\.[0-9][0-9]?[0-9]?|\
                   64\.138\.91\.9[6-9]|\
                   64\.138\.91\.10[0-9]|\
                   64\.138\.91\.11[0-1]|\
                   65\.199\.27\.[0-9][0-9]?[0-9]?|\
                   65\.206\.22[8-9]\.[0-9][0-9]?[0-9]?|\
                   65\.206\.23[0-1]\.[0-9][0-9]?[0-9]?|\
                   66\.77\.136\.[0-9][0-9]?[0-9]?|\
                   66\.124\.78\.10[4-9]|\
                   66\.124\.78\.11[0-1]|\
                   66\.125\.76\.7[2-9]|\
                   66\.135\.19[2-9]\.[0-9][0-9]?[0-9]?|\
                   66\.135\.2[0-1][0-9]\.[0-9][0-9]?[0-9]?|\
                   66\.135\.22[0-3]\.[0-9][0-9]?[0-9]?|\
                   67\.72\.1[2-5]\.[0-9][0-9]?[0-9]?|\
                   206\.165\.246\.[0-9][0-9]?[0-9]?|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?|\
                   209\.10\.62\.24[0-9]|\
                   209\.10\.62\.25[0-5]|\
                   209\.10\.222\.19[2-9]|\
                   209\.10\.222\.20[0-7]|\
                   216\.32\.120\.[0-9][0-9]?[0-9]?|\
                   216\.95\.225\.19[2-9]|\
                   216\.95\.225\.2[0-4][0-9]|\
                   216\.95\.225\.25[0-5]|\
                   216\.113\.1[6-8][0-9]\.[0-9][0-9]?[0-9]?|\
                   216\.113\.19[0-1]\.[0-9][0-9]?[0-9]?)$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (eBay/Half.com/PayPal)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# EDS Federal Credit Union
#
:0
* FROMDOMAIN ?? ^edsefcu\.org$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   192\.85\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   199\.228\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   216\.165\.168\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (EDS Federal Credit Union)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# E-Gold
#
:0
* FROMDOMAIN ?? ^e-gold\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   63\.240\.230\.[0-9]|\
                   63\.240\.230\.[1-2][0-9]|\
                   63\.240\.230\.3[0-1]|\
                   216\.53\.150\.250)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (E-Gold)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# J.P Morgan Chase
#
LT4=no

:0
* ^From:.*[^0-9a-z]Emporiki([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^emporiki\.gr$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^emporiki\.gr$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   213\.249\.60\.[0-9]|\
                   213\.249\.60\.[1-5][0-9]|\
                   213\.249\.60\.6[0-3])$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Emporiki Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Farmers & Merchants Bank
#
:0
* FROMDOMAIN ?? ^fmbnk\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   63\.196\.184\.20[0-7]|\
                   63\.196\.186\.19[2-9]|\
                   63\.196\.186\.2[0-1][0-9]|\
                   63\.196\.186\.22[0-3]|\
                   63\.230\.125\.18[4-9]|\
                   63\.230\.125\.19[0-1]|\
                   65\.170\.29\.6[4-9]|\
                   65\.170\.29\.7[0-9]|\
                   204\.251\.77\.12[8-9]|\
                   204\.251\.77\.1[3-9][0-9]|\
                   204\.251\.77\.2[0-4][0-9]|\
                   204\.251\.77\.25[0-5]|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?|\
                   216\.178\.6\.[8-9]|\
                   216\.178\.6\.1[0-5]|\
                   216\.229\.69\.24[0-7]|\
                   216\.229\.176\.16[0-9]|\
                   216\.229\.176\.17[0-5])$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Farmers & Merchants Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Federal Credit Union
#

:0
* FROMDOMAIN ?? ^fcu\.gov$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Federal Credit Union)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# First Credit Union
#
LT4=no

:0
* ^From:.*[^0-9a-z]First( )*Credit( )*Union([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^firstcu\.coop$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^firstcu\.coop$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   63\.224\.144\.[0-9]|\
                   63\.224\.144\.[1-2][0-9]|\
                   63\.224\.144\.3[0-1]|\
                   65\.116\.182\.19[2-9]|\
                   65\.116\.182\.2[0-1][0-9]|\
                   65\.116\.182\.22[0-3]|\
                   66\.33\.242\.15[2-9]|\
                   68\.78\.53\.8[8-9]|\
                   68\.78\.53\.9[0-5])$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (First Credit Union)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# First Merit Bank
#
:0
* FROMDOMAIN ?? ^(firstmerit\.com|\
                  firstmeritbank\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   63\.239\.155\.22[4-9]|\
                   63\.239\.155\.2[3-4][0-9]|\
                   63\.239\.155\.25[0-5]|\
                   63\.254\.220\.22[4-9]|\
                   63\.254\.220\.23[0-1]|\
                   69\.212\.4\.2[4-9]|\
                   69\.212\.4\.3[0-1]|\
                   149\.99\.243\.24[8-9]|\
                   149\.99\.243\.25[0-5]|\
                   199\.72\.115\.14[4-9]|\
                   199\.72\.115\.15[0-9]|\
                   205\.167\.9[4-5]\.[0-9][0-9]?[0-9]?|\
                   208\.45\.205\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (First Merit Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Fleet Bank
#
:0
* FROMDOMAIN ?? ^fleet\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   68\.72\.144\.24[0-7]|\
                   170\.128\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Fleet Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}

# Guaranty Bank
#
:0
* FROMDOMAIN ?? ^(guarantybank\.com|\
                  guarantygroup\.com|\
                  guaranty-bnk\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.37\.2\.12[8-9]|\
                   12\.37\.2\.1[3-9][0-9]|\
                   12\.37\.2\.2[0-4][0-9]|\
                   12\.37\.2\.25[0-5]|\
                   12\.41\.173\.3[2-9]|\
                   64\.80\.125\.13[6-9]|\
                   64\.80\.125\.14[0-3]|\
                   64\.172\.83\.12[0-7]|\
                   65\.43\.83\.18[4-9]|\
                   65\.43\.83\.19[0-1]|\
                   66\.136\.75\.19[2-9]|\
                   66\.136\.75\.20[0-7]|\
                   68\.21\.49\.7[2-9]|\
                   68\.78\.183\.8[8-9]|\
                   68\.78\.183\.9[0-5]|\
                   209\.181\.208\.8[8-9]|\
                   209\.181\.208\.9[0-5]|\
                   216\.61\.162\.12[8-9]|\
                   216\.61\.162\.1[3-9][0-9]|\
                   216\.61\.162\.2[0-4][0-9]|\
                   216\.61\.162\.25[0-5]|\
                   216\.136\.115\.12[8-9]|\
                   216\.136\.115\.1[3-8][0-9]|\
                   216\.136\.115\.19[0-1]|\
                   216\.136\.115\.22[4-9]|\
                   216\.136\.115\.23[0-9])$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Guaranty Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}

# Halifax, PLC
#
:0
* FROMDOMAIN ?? ^(halifax\.co\.uk|\
                  halifax-online\.co\.uk)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   62\.172\.43\.12[8-9]|\
                   62\.172\.43\.1[3-9][0-9]|\
                   62\.172\.43\.2[0-4][0-9]|\
                   62\.172\.43\.25[0-5]|\
                   194\.75\.12[8-9]\.[0-9][0-9]?[0-9]?|\
                   212\.140\.245\.[0-9]|\
                   212\.140\.245\.[1-9][0-9]|\
                   212\.140\.245\.1[0-1][0-9]|\
                   212\.140\.245\.12[0-7])$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Halifax, PLC)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# HSBC
#
:0
* FROMDOMAIN ?? ^(hsbc\.co\.uk|\
                  hsbc\.com|\
                  hsbc\.com\.au|\
                  hsbc-online\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.42\.56\.152|\
                   63\.64\.211\.[0-9]|\
                   63\.64\.211\.[1-9][0-9]|\
                   63\.64\.211\.1[0-1][0-9]|\
                   63\.64\.211\.12[0-7]|\
                   63\.65\.113\.19[2-9]|\
                   63\.65\.169\.[0-9][0-9]?[0-9]?|\
                   63\.69\.131\.[0-9][0-9]?[0-9]?|\
                   63\.78\.164\.[0-9][0-9]?[0-9]?|\
                   63\.91\.14\.18[4-9]|\
                   63\.91\.14\.19[0-1]|\
                   63\.104\.32\.12[8-9]|\
                   63\.104\.32\.1[3-9][0-9]|\
                   63\.104\.32\.2[0-4][0-9]|\
                   63\.104\.32\.25[0-5]|\
                   63\.105\.4\.[0-9][0-9]?[0-9]?|\
                   65\.42\.143\.8[8-9]|\
                   65\.42\.143\.9[0-5]|\
                   65\.168\.2[2-3]\.[0-9][0-9]?[0-9]?|\
                   65\.202\.26\.[0-9][0-9]?[0-9]?|\
                   65\.210\.44\.[0-9]|\
                   65\.210\.44\.[1-5][0-9]|\
                   65\.210\.44\.6[0-3]|\
                   65\.215\.103\.[0-9][0-9]?[0-9]?|\
                   65\.244\.6[8-9]\.[0-9][0-9]?[0-9]?|\
                   199\.243\.161\.8[0-7]|\
                   204\.94\.255\.[0-9][0-9]?[0-9]?|\
                   204\.252\.75\.4[8-9]|\
                   204\.252\.75\.5[0-9]|\
                   204\.252\.75\.6[0-3]|\
                   205\.214\.17[6-9]\.[0-9][0-9]?[0-9]?|\
                   205\.214\.18[0-9]\.[0-9][0-9]?[0-9]?|\
                   205\.214\.19[0-1]\.[0-9][0-9]?[0-9]?|\
                   205\.241\.15\.[0-9][0-9]?[0-9]?|\
                   207\.219\.232\.[0-9]|\
                   207\.219\.232\.[1-2][0-9]|\
                   207\.219\.232\.3[0-1]|\
                   207\.219\.248\.[0-9]|\
                   207\.219\.248\.[1-2][0-9]|\
                   207\.219\.248\.3[0-1]|\
                   208\.131\.51\.[0-9][0-9]?[0-9]?|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?|\
                   208\.253\.58\.16[0-9]|\
                   208\.253\.58\.17[0-5]|\
                   209\.52\.240\.9[6-9]|\
                   209\.52\.240\.1[0-1][0-9]|\
                   209\.52\.240\.12[0-7]|\
                   216\.94\.155\.19[2-9]|\
                   216\.94\.155\.2[0-1][0-9]|\
                   216\.94\.155\.22[0-3])$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (HSBC)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Huntington Bancshares
#
:0
* FROMDOMAIN ?? ^(huntington\.com|\
                  huntingtonbank\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   170\.128\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Huntington Bancshares)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Intrust Bank
#
:0
* FROMDOMAIN ?? ^intrust\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   65\.215\.131\.[0-9][0-9]?[0-9]?|\
                   70\.244\.97\.5[6-9]|\
                   70\.244\.97\.6[0-3]|\
                   70\.248\.19\.15[2-9])$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Intrust Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# U.S. Internal Revenue Service
#
LT4=no

:0
* ^From:.*[^0-9a-z](Internal( )*Revenue( )*Service|\
                    I(\.)?R(\.)?S(\.)?)([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^irs\.gov$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^irs\.gov$
{
 LT2=no
 LOCALIP=${FIRSTEXIP}
 LOCALIPREGEXP=${FIRSTEXIPREGEXP}
 TESTCIDR=${SBDIR}/info/irs-ips.cidr
 INCLUDERC=${SBDIR}/functions/check-cidr.rc

 :0
 * LT2 ?? no
 { LT4=yes }
}

:0
* LT4 ?? yes
{
 LT3=yes
 SBLOG="C3R-${TESTNAME} (U.S. Internal Revenue Service)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# J.P Morgan Chase
#
LT4=no

:0
* ^From:.*[^0-9a-z](Chase( )*(Bank|Billing|Manhattan|Security)|\
                    J(\.)?P(\.)?( )*Morgan)([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^(chase\.com|\
                    jpmorgan\.com|\
                    jpmorganchase\.com)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(chase\.com|\
                  jpmorgan\.com|\
                  jpmorganchase\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.40\.226\.17[6-9]|\
                   12\.40\.226\.18[0-9]|\
                   12\.40\.226\.19[0-1]|\
                   63\.207\.11\.[0-7]|\
                   65\.112\.146\.9[6-9]|\
                   65\.112\.146\.10[0-9]|\
                   65\.112\.146\.11[0-1]|\
                   65\.112\.146\.8[0-9]|\
                   65\.112\.146\.9[0-5]|\
                   169\.64\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   198\.75\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   204\.149\.85\.[0-9][0-9]?[0-9]?|\
                   204\.151\.61\.[0-9][0-9]?[0-9]?|\
                   206\.154\.48\.17[6-9]|\
                   206\.154\.48\.18[0-3]|\
                   207\.25\.17\.[0-9][0-9]?[0-9]?|\
                   207\.25\.170\.[0-9][0-9]?[0-9]?|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?|\
                   208\.244\.76\.24[0-9]|\
                   208\.244\.76\.25[0-5]|\
                   208\.244\.80\.6[4-9]|\
                   208\.244\.80\.7[0-9]|\
                   208\.244\.80\.11[2-9]|\
                   208\.244\.80\.12[0-7])$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (J.P. Morgan Chase)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# KeyBank
#
#
#
:0
* FROMDOMAIN ?? ^(key\.com|\
                  keybank\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                  156\.77\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                  208\.235\.248\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (KeyBank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# LaSalle Bank
#
LT4=no

:0
* ^(From|Received|Reply-To):.*[^0-9a-z](LaSalle Bank(ing)?)([^0-9a-z]|$)
* ! FROMDOMAIN ?? ^(lasalle\.com|\
                    lasallebank\.com|\
                    lasallena\.com)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(lasalle\.com|\
                  lasallebank\.com|\
                  lasallena\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                  155\.81\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                  208\.235\.248\.[0-9][0-9]?[0-9]?)$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (LaSalle Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Lloyds of London
#
:0
* FROMDOMAIN ?? ^(lloyds\.com|\
                  lloydstsb\.com|\
                  lloydstsb\.co\.uk)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.154\.227\.19[2-9]|\
                   12\.154\.227\.2[0-1][0-9]|\
                   12\.154\.227\.22[0-3]|\
                   204\.68\.249\.[0-9][0-9]?[0-9]?|\
                   205\.132\.8[8-9]\.[0-9][0-9]?[0-9]?|\
                   205\.132\.9[0-3]\.[0-9][0-9]?[0-9]?|\
                   205\.140\.176\.8[0-9]|\
                   205\.140\.176\.9[0-5]|\
                   205\.247\.212\.19[2-9]|\
                   205\.247\.212\.2[0-4][0-9]|\
                   205\.247\.212\.25[0-5]|\
                   206\.29\.147\.16[0-9]|\
                   206\.29\.147\.17[0-5]|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Lloyds of London)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# MasterCard
#
LT4=no

:0
* ^From:.*[^0-9a-z]MasterCard([^a-z0-9.]|$)
* ! FROMDOMAIN ?? ^mastercard\.com$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^mastercard\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.10\.3[2-3]\.[0-9][0-9]?[0-9]?|\
                   12\.14\.11[4-5]\.[0-9][0-9]?[0-9]?|\
                   12\.22\.15[2-9]\.[0-9][0-9]?[0-9]?|\
                   12\.30\.128\.1[6-8][0-9]|\
                   12\.30\.128\.19[0-1]|\
                   12\.144\.15[6-9]\.[0-9][0-9]?[0-9]?|\
                   64\.76\.29\.12[8-9]|\
                   64\.76\.29\.13[0-5]|\
                   64\.76\.142\.5[6-9]|\
                   64\.76\.142\.6[0-3]|\
                   64\.165\.207\.23[2-9]|\
                   64\.219\.52\.8[8-9]|\
                   64\.219\.52\.9[0-5]|\
                   65\.42\.180\.[0-7]|\
                   65\.64\.144\.[0-7]|\
                   65\.69\.40\.6[4-9]|\
                   65\.69\.40\.7[0-1]|\
                   66\.73\.34\.20[8-9]|\
                   66\.73\.34\.2[1-2][0-9]|\
                   66\.73\.34\.23[0-1]|\
                   66\.136\.166\.6[4-9]|\
                   66\.136\.166\.7[0-1]|\
                   66\.136\.166\.13[6-9]|\
                   66\.136\.166\.14[0-3]|\
                   66\.137\.137\.22[4-9]|\
                   66\.137\.137\.23[0-1]|\
                   66\.138\.149\.2[4-9]|\
                   66\.138\.149\.3[0-1]|\
                   66\.142\.77\.14[4-9]|\
                   66\.142\.77\.15[0-1]|\
                   68\.23\.248\.4[8-9]|\
                   68\.23\.248\.5[0-5]|\
                   68\.72\.233\.16[0-7]|\
                   216\.119\.20[8-9]\.[0-9][0-9]?[0-9]?|\
                   216\.119\.21[0-9]\.[0-9][0-9]?[0-9]?|\
                   216\.119\.22[0-3]\.[0-9][0-9]?[0-9]?|\
                   209\.64\.11[6-7]\.[0-9][0-9]?[0-9]?|\
                   209\.64\.21[0-1]\.[0-9][0-9]?[0-9]?)$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (MasterCard)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# MBNA Bank
#
LT4=no

:0 D
* ^From:.*[^0-9a-z]M(\.)?B(\.)?N(\.)?A([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^(mbna\.com|\
                    mbnanetaccess\.com)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(mbna\.com|\
                  mbnanetaccess\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.18\.79\.11[2-9]|\
                   12\.18\.79\.12[0-7]|\
                   12\.40\.121\.[0-9][0-9]?[0-9]?|\
                   63\.99\.102\.[0-9][0-9]?[0-9]?|\
                   63\.236\.19\.[0-9][0-9]?[0-9]?|\
                   63\.236\.88\.9[6-9]|\
                   63\.236\.88\.10[0-9]|\
                   63\.236\.88\.11[0-1]|\
                   192\.189\.32\.[0-9][0-9]?[0-9]?|\
                   192\.195\.217\.[0-9][0-9]?[0-9]?|\
                   199\.72\.80\.16[0-9]|\
                   199\.72\.80\.17[0-5]|\
                   208\.47\.212\.22[4-9]|\
                   208\.47\.212\.23[0-9]|\
                   216\.98\.1[6-9]\.[0-9][0-9]?[0-9]?|\
                   216\.98\.2[0-9]\.[0-9][0-9]?[0-9]?|\
                   216\.98\.3[0-1]\.[0-9][0-9]?[0-9]?)$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (MBNA Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# M&I (Marshall & Ilsley) Bank
#
:0
* FROMDOMAIN ?? ^(ibanking-services\.com|\
                  mibank\.com|\
                  micorp\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.145\.168\.9[6-9]|\
                   12\.145\.168\.1[0-1][0-9]|\
                   12\.145\.168\.12[0-7]|\
                   66\.77\.113\.14[4-9]|\
                   66\.77\.113\.1[5-8][0-9]|\
                   66\.77\.113\.19[0-1]|\
                   67\.128\.122\.[0-9][0-9]?[0-9]?|\
                   207\.67\.39\.6|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?|\
                   216\.170\.132\.22[4-9]|\
                   216\.170\.132\.23[0-9])$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (M&I Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Minnesota Mutual Companies Credit Union
#
LT4=no

:0
* ^From:.*[^0-9a-z]Minnesota( )*Mutual([^a-z0-9.]|$)
* ! FROMDOMAIN ?? ^mmccu\.coop$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^mmccu\.coop$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   4\.79\.80\.[0-9][0-9]?[0-9]?|\
                   65\.57\.242\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Minnesota Mutual Companies Credit Union)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Moneyaccess (Alliance Capital)
#
:0
* FROMDOMAIN ?? ^moneyaccess\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   63\.114\.46\.[0-9][0-9]?[0-9]?|\
                   63\.192\.230\.[8-9]|\
                   63\.192\.230\.1[0-5]|\
                   63\.192\.230\.24[0-7]|\
                   63\.202\.163\.4[0-7]|\
                   64\.169\.207\.23[2-9]|\
                   64\.169\.207\.24[0-7]|\
                   65\.42\.74\.12[8-9]|\
                   65\.42\.74\.13[0-5]|\
                   204\.62\.17[1-5]\.[0-9][0-9]?[0-9]?|\
                   206\.218\.19[2-9]\.[0-9][0-9]?[0-9]?|\
                   206\.218\.2[0-4][0-9]\.[0-9][0-9]?[0-9]?|\
                   206\.218\.25[0-5]\.[0-9][0-9]?[0-9]?|\
                   207\.140\.173\.[0-9][0-9]?[0-9]?|\
                   209\.36\.11\.[0-9][0-9]?[0-9]?|\
                   209\.191\.16[8-9]\.[0-9][0-9]?[0-9]?|\
                   216\.80\.26\.19[2-9])$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Moneyaccess)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# MSN
#
:0
* FROMEMAIL ?? ^(abuse|\
                 admin|\
                 account([-0-9a-z]+)?|\
                 help|\
                 info|\
                 security|\
                 service|\
                 support([-0-9a-z]+)?|\
                 ([-0-9a-z]+)?updates?(-[0-9a-z]+)?)@msn\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   64\.4\.[0-9]\.[0-9][0-9]?[0-9]?|\
                   64\.4\.[1-5][0-9]\.[0-9][0-9]?[0-9]?|\
                   64\.4\.6[0-3]\.[0-9][0-9]?[0-9]?|\
                   207\.46\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   213\.199\.14[4-9]\.[0-9][0-9]?[0-9]?|\
                   213\.199\.15[0-9]\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (MSN)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# National Australia Bank
#
:0
* FROMDOMAIN ?? ^national\.com\.au$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   203\.57\.24[0-1]\.[0-9][0-9]?[0-9]?|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (National Australia Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# National Credit Union of America
#
LT4=no

:0
* LT4 ?? no
* ^From:.*[^0-9a-z](Credit( )*Union( )*National( )*Association|\
                    America.s( )*Credit( )*Unions)([^a-z0-9.]|$)
* ! FROMDOMAIN ?? ^(creditunion\.coop|\
                    cuna\.org)$
{ LT4=yes }

:0
* ^From:.*[^0-9a-z](America.s( )*Credit( )*Unions|\
                    Credit( )*Union( )*National( )*Association|\
                    National( )*Credit( )Union.*[^0-9a-z]America|\
                    Federal( )*Credit( )*Union)([^a-z0-9]|$)
* ! ^From:.*[^0-9a-z](Affinity|EDS|Navy).*[^0-9a-z]Federal( )*Credit( )*Union([^a-z0-9.]|$)
* ! FROMDOMAIN ?? ^(creditunion\.coop|\
                    cuna\.org|\
                    edsefcu\.org|\
                    ncua\.gov)$
{ LT4=yes }

:0
* ^From:.*[^0-9a-z]Federal( )*?Credit( )Union([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^(creditunion\.coop|\
                    cuna\.org|\
                    edsefcu\.org|\
                    ncua\.gov)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(cuna\.org|\
                  ncua\.gov)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   65\.170\.13\.19[2-9]|\
                   65\.170\.13\.20[0-7]|\
                   216\.69\.11[2-9]\.[0-9][0-9]?[0-9]?|\
                   216\.69\.12[0-7]\.[0-9][0-9]?[0-9]?|\
                   216\.165\.190\.[0-9][0-9]?[0-9]?)$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (National Credit Union of America)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Navy Federal Credit Union
#
LT4=no

:0
* ^From:.*[^0-9a-z]Navy( )*(Federal( )*Credit( )*Union|F(\.)?C(\.)?U(\.)?)([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^(navyfcu\.org|\
                    navyfedcu\.org|\
                    navyfederal\.org)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(navyfcu\.org|\
                  navyfedcu\.org|\
                  navyfederal\.org)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.47\.113\.12[8-9]|\
                   12\.47\.113\.1[3-5][0-9]|\
                   12\.47\.115\.9[6-9]|\
                   12\.47\.115\.1[0-1][0-9]|\
                   12\.47\.115\.12[0-7]|\
                   12\.154\.64\.12[8-9]|\
                   12\.154\.64\.1[3-8][0-9]|\
                   12\.154\.64\.19[0-1]|\
                   63\.240\.206\.[0-9]|\
                   63\.240\.206\.[1-9][0-9]|\
                   63\.240\.206\.1[0-2][0-9]|\
                   63\.240\.206\.13[0-5]|\
                   198\.179\.142\.[0-9][0-9]?[0-9]?|\
                   205\.162\.54\.22[4-9]|\
                   205\.162\.54\.2[3-4][0-9]|\
                   205\.162\.54\.25[0-5]|\
                   205\.240\.78\.1[6-9]|\
                   205\.240\.78\.2[0-9]|\
                   205\.240\.78\.3[0-1]|\
                   206\.61\.188\.9[6-9]|\
                   206\.61\.188\.10[0-9]|\
                   206\.61\.188\.11[0-1]|\
                   206\.61\.188\.12[8-9]|\
                   206\.61\.188\.1[3-8][0-9]|\
                   206\.61\.188\.19[0-1]|\
                   208\.35\.254\.19[2-9]|\
                   208\.35\.254\.2[0-4][0-9]|\
                   208\.35\.254\.25[0-5])$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Navy Federal Credit Union)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# North Fork Corporation/North Fork Bank
#
LT4=no

:0
* LT4 ?? no
* ^From:.*[^0-9a-z](North( )*Fork( )*(Bank|Corporation))([^a-z0-9.]|$)
* ! FROMDOMAIN ?? ^northforkbank\.com$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^northforkbank\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.42\.44\.19[2-9]|\
                   12\.42\.44\.2[0-4][0-9]|\
                   12\.42\.44\.25[0-5]|\
                   12\.111\.45\.14[4-9]|\
                   12\.111\.45\.15[0-9]|\
                   12\.111\.47\.19[2-9]|\
                   12\.111\.47\.2[0-4][0-9]|\
                   12\.111\.47\.25[0-5]|\
                   12\.144\.246\.21[6-9]|\
                   12\.144\.246\.22[0-3]|\
                   12\.154\.130\.[0-9][0-9]?[0-9]?|\
                   12\.154\.142\.19[2-9]|\
                   12\.154\.142\.2[0-4][0-9]|\
                   12\.154\.142\.25[0-5]|\
                   12\.182\.228\.12[8-9]|\
                   12\.182\.228\.1[3-9][0-9]|\
                   12\.182\.228\.2[0-4][0-9]|\
                   12\.182\.228\.25[0-5]|\
                   12\.184\.151\.12[8-9]|\
                   12\.184\.151\.1[3-8][0-9]|\
                   12\.184\.151\.19[0-1]|\
                   64\.175\.53\.13[6-9]|\
                   64\.175\.53\.14[0-3]|\
                   68\.120\.3\.16[8-9]|\
                   68\.120\.3\.17[0-5]|\
                   69\.21\.161\.6[4-9]|\
                   69\.21\.161\.7[0-1]|\
                   141\.155\.247\.[0-9]|\
                   141\.155\.247\.[1-9][0-9]|\
                   141\.155\.247\.1[0-8][0-9]|\
                   141\.155\.247\.19[0-1])$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (North Fork Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Ozaukee Bank
#
:0
* FROMDOMAIN ?? ^ozaukeebank\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   207\.67\.18\.[0-9][0-9]?[0-9]?|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Ozaukee Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# People's Bank
#
:0
* FROMDOMAIN ?? ^peoples\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   64\.160\.154\.22[4-9]|\
                   64\.160\.154\.2[3-4][0-9]|\
                   64\.160\.154\.25[0-5]|\
                   65\.65\.235\.[0-9]|\
                   65\.65\.235\.[1-9][0-9]|\
                   65\.65\.235\.1[0-1][0-9]|\
                   65\.65\.235\.12[0-7]|\
                   66\.165\.46\.19[2-9]|\
                   66\.165\.46\.20[0-7]|\
                   198\.160\.[8-9]\.[0-9][0-9]?[0-9]?|\
                   198\.160\.1[0-5]\.[0-9][0-9]?[0-9]?|\
                   204\.252\.27\.11[2-9]|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?|\
                   208\.249\.81\.22[4-9]|\
                   208\.249\.81\.2[3-4][0-9]|\
                   208\.249\.81\.25[0-5]|\
                   209\.168\.194\.8[8-9]|\
                   209\.168\.194\.9[0-5]|\
                   209\.168\.194\.18[4-9]|\
                   209\.168\.194\.19[0-1]|\
                   209\.168\.195\.2[4-9]|\
                   209\.168\.195\.3[0-1]|\
                   216\.19\.230\.20[0-7])$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Ozaukee Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Postbank Deutschland
#
LT4=no

:0
* ^From:.*[^0-9a-z]postbankde\.com([^a-z0-9.]|$)
{ LT4=yes }

:0
* LT4 ?? no
* ^Subject: (Online Kunden|\
             =\?iso-8859-1\?B\?R2VlaHJ0ZSBLdW5kZW4gdW5kIEt1bmRpbm5lbnUgUG9zdEJhbmsh\?=)$
{ LT4=yes }

:0
* LT4 ?? no
* ^From:.*[^0-9a-z](PostBank)([^a-z0-9.]|$)
* ! FROMDOMAIN ?? ^postbank\.de$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^postbank\.de$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   62\.180\.72\.6[4-9]|\
                   62\.180\.72\.[7-9][0-9]|\
                   62\.180\.72\.1[0-1][0-9]|\
                   62\.180\.72\.12[0-7]|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?|\
                   213\.61\.167\.19[2-9]|\
                   213\.61\.167\.2[0-4][0-9]|\
                   213\.61\.167\.25[0-5])$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Postbank Deutschland)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# PrivatBank Ukraine
#
:0
* FROMDOMAIN ?? ^(privatbank\.com\.ua|\
                  privatbank\.ua)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?|\
                   217\.117\.65\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (PrivatBank Ukraine)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Red Cross
#
#  9/08/2005:
#   Lots of Hurricane Katrina phishes/scams. <sigh>
#
LT4=no

:0
* ^(From|Received|Reply-to):.*[^0-9a-z](Red.*Cross)([^0-9a-z]|$)
* ! FROMDOMAIN ?? ^(cruzrojaamericana\.org|\
                    icrc\.org|\
                    redcross\.com|\
                    redcross\.org)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(cruzrojaamericana\.org|\
                  icrc\.org|\
                  redcross\.com|\
                  redcross\.org)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   63\.138\.54\.12[0-7]|\
                   64\.4\.107\.6[4-9]|\
                   64\.4\.107\.[7-8][0-9]|\
                   64\.4\.107\.9[0-5]|\
                   64\.9\.89\.19[2-9]|\
                   64\.9\.89\.2[0-1][0-9]|\
                   64\.9\.89\.22[0-3]|\
                   65\.204\.232\.2[4-9]|\
                   65\.204\.232\.3[0-1]|\
                   66\.70\.68\.211|\
                   68\.22\.151\.7[2-9]|\
                   72\.246\.130\.47|\
                   192\.91\.247\.98)$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Red Cross)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Regions Bank
#
LT4=no

:0
* ^(From|Received|Reply-to):.*[^0-9a-z](Regions.*Bank)([^0-9a-z]|$)
* ! FROMDOMAIN ?? ^(regions\.com|\
                    regions\.net|\
                    regionsbank\.com|\
                    regionsnet\.com|\
                    sharebuilder\.com)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(regions\.com|\
                  regions\.net|\
                  regionsbank\.com|\
                  regionsnet\.com|\
                  sharebuilder\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.110\.253\.[0-9][0-9]?[0-9]?|\
                   12\.168\.163\.4[8-9]|\
                   12\.168\.163\.5[0-5]|\
                   12\.151\.194\.1[6-9]|\
                   12\.151\.194\.2[0-3]|\
                   12\.153\.29\.20[8-9]|\
                   12\.153\.29\.21[0-9]|\
                   12\.153\.29\.22[0-3]|\
                   67\.64\.240\.9[6-9]|\
                   67\.64\.240\.10[0-3]|\
                   208\.62\.91\.19|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?)$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Regions Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Royal Bank of Canada
#
LT4=no

:0
* ^(From|Received|Reply-to):.*[^0-9a-z]Royal( )*Bank.*[^0-9a-z]Canada([^0-9a-z]|$)
* ! FROMDOMAIN ?? ^(rbc\.com|\
                    rbcbanqueroyale\.com|\
                    rbcroyalbank\.com|\
                    royalbank\.com)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(rbc\.com|\
                  rbcbanqueroyale\.com|\
                  rbcroyalbank\.com|\
                  royalbank\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.38\.130\.3[2-9]|\
                   12\.38\.130\.[4-5][0-9]|\
                   12\.38\.130\.6[0-3]|\
                   12\.111\.16\.9[6-9]|\
                   12\.111\.16\.1[0-1][0-9]|\
                   12\.111\.16\.12[0-7]|\
                   142\.245\.[0-9][0-9]?[0-9]?.[0-9][0-9]?[0-9]?|\
                   192\.64\.159\.[0-9][0-9]?[0-9]?|\
                   192\.64\.16[1-4]\.[0-9][0-9]?[0-9]?|\
                   192\.234\.9[8-9]\.[0-9][0-9]?[0-9]?|\
                   198\.96\.12[8-9]\.[0-9][0-9]?[0-9]?|\
                   198\.96\.13[0-9]\.[0-9][0-9]?[0-9]?|\
                   198\.203\.235\.[0-9][0-9]?[0-9]?|\
                   207\.61\.47\.22[4-9]|\
                   207\.61\.47\.2[3-4][0-9]|\
                   207\.61\.47\.25[0-5]|\
                   207\.61\.155\.19[2-9]|\
                   207\.61\.155\.2[0-1][0-9]|\
                   207\.61\.155\.22[0-3]|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?|\
                   209\.52\.68\.19[2-9]|\
                   209\.52\.68\.2[0-1][0-9]|\
                   209\.52\.68\.22[0-3]|\
                   216\.208\.35\.22[4-9]|\
                   216\.208\.35\.2[3-4][0-9]|\
                   216\.208\.35\.25[0-5])$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Royal Bank of Canada)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Royal Bank of Scotland (Natwest Bank)
#
LT4=no

:0
* ^From:.*[^0-9a-z](Natwest( )*(Bank|Credit|Financ(e|ial))|\
                    Royal( )*Bank( )*of( )*Scotland)([^a-z0-9.]|$)
* ! FROMDOMAIN ?? ^(natwest\.com|\
                    nwolb\.com|\
                    rbs\.co\.uk)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(natwest\.com|\
                  nwolb\.com|\
                  rbs\.co\.uk)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   155\.136\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Royal Bank of Scotland)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Charles Schwab/U.S. Trust
#
:0
* FROMDOMAIN ?? ^(schwab\.com|\
                  ustrust\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   4\.23\.167\.16[0-9]|\
                   4\.23\.167\.17[0-5]|\
                   4\.42\.235\.14[4-9]|\
                   4\.42\.235\.15[0-9]|\
                   12\.151\.123\.19[2-9]|\
                   12\.151\.123\.2[0-1][0-9]|\
                   12\.151\.123\.22[0-3]|\
                   162\.93\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   192\.136\.17\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Charles Schwab/U.S. Trust)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Shazam Bank
#
LT4=no

:0
* ^From:.*[^0-9a-z](Shazam( )*Bank)([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^shazam\.net$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^shazam\.net$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.152\.199\.19[2-9]|\
                   12\.152\.199\.2[0-1][0-9]|\
                   12\.152\.199\.22[0-3]|\
                   12\.169\.7\.12[8-9]|\
                   12\.169\.7\.1[3-8][0-9]|\
                   12\.169\.7\.19[0-1])$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Shazam Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Sky Bank
#
LT4=no

:0
* ^From:.*[^0-9a-z](Sky( )*Bank)([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^(skybank\.com|\
                    skyfi\.com)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(skybank\.com|\
                  skyfi\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   65\.116\.194\.[0-9][0-9]?[0-9]?|\
                   65\.117\.170\.[0-9][0-9]?[0-9]?|\
                   216\.111\.199\.[0-9][0-9]?[0-9]?)$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Sky Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Smith Barney
#
:0
* FROMDOMAIN ?? ^smithbarney\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                  63\.195\.37\.5[6-9]|\
                  63\.195\.37\.6[0-3]|\
                  63\.196\.148\.16[8-9]|\
                  63\.196\.148\.17[0-5]|\
                  64\.162\.114\.8[0-7]|\
                  65\.43\.254\.3[2-9]|\
                  66\.137\.22\.9[6-9]|\
                  66\.137\.22\.10[0-3]|\
                  69\.229\.34\.[8-9]|\
                  69\.229\.34\.1[0-5]|\
                  146\.128\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                  168\.109\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                  192\.129\.81\.[0-9][0-9]?[0-9]?|\
                  198\.83\.48\.[0-9][0-9]?[0-9]?|\
                  199\.222\.97\.[0-9][0-9]?[0-9]?|\
                  204\.148\.1[5-6]\.[0-9][0-9]?[0-9]?|\
                  204\.152\.[4-5]\.[0-9][0-9]?[0-9]?|\
                  207\.24\.8[2-4]\.[0-9][0-9]?[0-9]?|\
                  207\.25\.165\.[0-9][0-9]?[0-9]?|\
                  207\.27\.42\.[0-9][0-9]?[0-9]?|\
                  208\.235\.248\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Smith/Barney Stockbrokers)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Snohomish County Public Utility District Credit Union
#
LT4=no

:0
* ^From:.*[^0-9a-z]Snohomish( )*County( )*P(\.)?U(\.)?D(\.)?.*Credit( )*Union([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^pudcu\.com$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^pudcu\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   208\.198\.18[8-9]\.[0-9][0-9]?[0-9]?|\
                   208\.218\.136\.12[0-7])$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Snohomish County PUD Credit Union)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Solopay
#
:0
* FROMDOMAIN ?? ^solopay\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?|\
                   209\.15\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (SoloPay)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Southtrust Bank
#
:0
* FROMDOMAIN ?? ^(southtrust\.com|\
                  southtrustbank\.com|\
                  southtrustonlinebanking\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.35\.46\.[0-9][0-9]?[0-9]?|\
                   67\.65\.204\.5[6-9]|\
                   67\.65\.204\.6[0-3]|\
                   153\.69\.0\.28|\
                   164\.109\.35\.72|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Southtrust Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# State Capitol Credit Union
#
LT4=no

:0
* ^From:.*[^0-9a-z]State( )*Capitol.*(Bank|Credit Union)([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^sccu-mn\.org$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^sccu-mn\.org$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   207\.225\.135\.3[2-9]|\
                   207\.225\.135\.[4-5][0-9]|\
                   207\.225\.135\.6[0-3])$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (State Capitol Credit Union)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Sterling Savings Bank
#
:0
* FROMDOMAIN ?? ^(sterlingbank\.com|\
                  sterlingsavingsbank\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.19\.55\.[0-9][0-9]?[0-9]?|\
                   207\.170\.228\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Sterling Savings Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# SunTrust Bank
#
:0
* FROMDOMAIN ?? ^(internetbanking\.com|\
                  suntrust\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   68\.20\.135\.24[8-9]|\
                   68\.20\.135\.25[0-5]|\
                   69\.0\.3\.10[4-9]|\
                   69\.0\.3\.11[0-1]|\
                   167\.181\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (SunTrust Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Symantec
#
LT4=no

:0
* ^From:.*[^0-9a-z](Norton( )*Anti.?Virus|\
                    Symantec)([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^(norton\.com|\
                    symantec\.com)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(norton\.com|\
                  symantec\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   63\.145\.109\.9[6-9]|\
                   63\.145\.109\.1[0-1][0-9]|\
                   63\.145\.109\.12[0-7]|\
                   64\.171\.125\.12[8-9]|\
                   64\.171\.125\.13[0-5]|\
                   65\.67\.31\.17[6-9]|\
                   65\.67\.31\.18[0-3]|\
                   65\.88\.178\.[0-9][0-9]?[0-9]?|\
                   65\.121\.109\.[0-9][0-9]?[0-9]?|\
                   65\.125\.29\.[0-9]|\
                   65\.125\.29\.[1-9][0-9]|\
                   65\.125\.29\.1[0-1][0-9]|\
                   65\.125\.29\.12[0-7]|\
                   65\.197\.184\.1[6-8][0-9]|\
                   65\.197\.184\.19[0-1]|\
                   65\.211\.243\.[0-9]|\
                   65\.211\.243\.[1-9][0-9]|\
                   65\.211\.243\.1[0-1][0-9]|\
                   65\.211\.243\.12[0-7]|\
                   65\.214\.134\.[0-9][0-9]?[0-9]?|\
                   66\.77\.130\.[0-7]|\
                   66\.127\.65\.18[4-9]|\
                   66\.127\.65\.19[0-1]|\
                   67\.97\.167\.[0-9][0-9]?[0-9]?|\
                   67\.97\.84\.13[6-9]|\
                   67\.97\.84\.14[0-3]|\
                   67\.98\.2\.22[4-9]|\
                   67\.98\.2\.2[3-4][0-9]|\
                   67\.98\.2\.25[0-5]|\
                   67\.98\.92\.[0-9][0-9]?[0-9]?|\
                   67\.98\.223\.[0-9][0-9]?[0-9]?|\
                   67\.98\.226\.[0-9][0-9]?[0-9]?|\
                   67\.99\.75\.[0-9][0-9]?[0-9]?|\
                   67\.99\.105\.[0-9]|\
                   67\.99\.105\.[1-2][0-9]|\
                   67\.99\.105\.3[0-1]|\
                   155\.64\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   192\.92\.94\.[0-9][0-9]?[0-9]?|\
                   198\.6\.3[2-9]\.[0-9][0-9]?[0-9]?|\
                   198\.6\.[4-5][0-9]\.[0-9][0-9]?[0-9]?|\
                   198\.6\.6[0-3]\.[0-9][0-9]?[0-9]?|\
                   199\.43\.18[5-9]\.[0-9][0-9]?[0-9]?|\
                   199\.43\.19[0-4]\.[0-9][0-9]?[0-9]?|\
                   199\.85\.12[5-7]\.[0-9][0-9]?[0-9]?|\
                   204\.178\.110\.22[4-9]|\
                   204\.178\.110\.2[3-4][0-9]|\
                   204\.178\.110\.25[0-5]|\
                   206\.204\.10\.19[2-9]|\
                   206\.204\.10\.2[0-1][0-9]|\
                   206\.204\.10\.22[0-3]|\
                   208\.194\.116\.[0-9][0-9]?[0-9]?|\
                   208\.194\.152\.[0-9][0-9]?[0-9]?|\
                   208\.213\.242\.[0-9][0-9]?[0-9]?|\
                   216\.10\.19[2-9]\.[0-9][0-9]?[0-9]?|\
                   216\.10\.20[0-7]\.[0-9][0-9]?[0-9]?|\
                   216\.141\.93\.[0-9][0-9]?[0-9]?|\
                   216\.142\.12\.[0-9]|\
                   216\.142\.12\.[1-2][0-9]|\
                   216\.142\.12\.3[0-1]|\
                   216\.250\.1[6-9]\.[0-9][0-9]?[0-9]?|\
                   216\.250\.2[0-9]\.[0-9][0-9]?[0-9]?|\
                   216\.250\.3[0-1]\.[0-9][0-9]?[0-9]?)$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Symantec)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Teachers' Credit Union
#
LT4=no

:0
* ^From:.*[^0-9a-z](Teacher.?s.?( )*Credit( )*Union|\
                    T(\.)?C(\.)?U(\.)?( )*(Home( )*)?Banking)([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^(tcudirect\.com|\
                    tcunet\.com)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(tcudirect\.com|\
                  tcunet\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.40\.151\.[0-9][0-9]?[0-9]?|\
                   67\.69\.137\.16[8-9]|\
                   67\.69\.137\.17[0-5]|\
                   67\.69\.137\.19[2-9]|\
                   67\.69\.153\.12[8-9]|\
                   67\.69\.153\.13[0-5]|\
                   68\.20\.150\.[0-9][0-9]?[0-9]?|\
                   164\.58\.111\.[0-9][0-9]?[0-9]?|\
                   164\.58\.128\.[0-9][0-9]?[0-9]?|\
                   207\.195\.56\.[0-9][0-9]?[0-9]?|\
                   208\.2\.18[8-9]\.[0-9][0-9]?[0-9]?|\
                   216\.185\.69\.[0-7])$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Teachers' Credit Union)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Union Planters Bank
#
LT4=no

:0
* ^(From|Received|Reply-to):.*[^0-9a-z](unionplanters\.com|Union Planters|UPInternet Banking)([^0-9a-z]|$)
* ! FROMDOMAIN ?? ^unionplanters\.com$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^unionplanters\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.110\.253\.[0-9][0-9]?[0-9]?|\
                   12\.151\.194\.1[6-9]|\
                   12\.151\.194\.2[0-3]|\
                   12\.153\.29\.20[8-9]|\
                   12\.153\.29\.21[0-9]|\
                   12\.153\.29\.22[0-3]|\
                   12\.168\.163\.4[8-9]|\
                   12\.168\.163\.5[0-5]|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?)$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Union Planters Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# University Credit Union
#
LT4=no

:0
* ^From:.*[^0-9a-z]University( )*Credit( )*Union([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^ucu\.org$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^ucu\.org$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   63\.236\.7\.[0-9]|\
                   63\.236\.7\.1[0-5]|\
                   208\.44\.244\.22[4-9]|\
                   208\.44\.244\.2[3-4][0-9]|\
                   208\.44\.244\.25[0-5])$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (University Credit Union)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# University of Wisconsin Credit Union
#
LT4=no

:0
* ^From:.*[^0-9a-z]University( )*of( )*Wisconsin( )*Credit( )*Union([^a-z0-9]|$)
* ! FROMDOMAIN ?? ^uwcu\.org$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^uwcu\.org$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   66\.222\.70\.12[8-9]|\
                   66\.222\.70\.1[3-5][0-9])$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (University of Wisconsin Credit Union)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# USAA (United Services Automobile Association)
#
#  Despite the name, this is a financial services organization
#  for people in the U.S. military and their families/dependants.
#
:0
* FROMDOMAIN ?? ^usaa\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.39\.147\.[0-9]|\
                   12\.39\.147\.[1-9][0-9]|\
                   12\.39\.147\.1[0-1][0-9]|\
                   12\.39\.147\.12[0-7]|\
                   12\.164\.200\.12[8-9]|\
                   12\.164\.200\.1[3-9][0-9]|\
                   12\.164\.200\.2[0-4][0-9]|\
                   12\.164\.200\.25[0-5]|\
                   63\.240\.196\.[0-9][0-9]?[0-9]?|\
                   68\.77\.64\.9[6-9]|\
                   68\.77\.64\.10[0-3]|\
                   70\.246\.191\.12[8-9]|\
                   70\.246\.191\.1[3-9][0-9]|\
                   70\.246\.191\.2[0-4][0-9]|\
                   70\.246\.191\.25[0-5]|\
                   167\.24\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   198\.148\.150\.[0-9][0-9]?[0-9]?|\
                   208\.190\.168\.6[4-9]|\
                   208\.190\.168\.7[0-1])$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (USAA)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# U.S. Bank
#
:0
* FROMDOMAIN ?? ^(usbank\.com|\
                  usbank-email\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   170\.135\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (U.S. Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Visa International
#
LT4=no

:0
* ^(From|Received|Reply-to):.*[^0-9a-z](Visa International|visa\.com|visa-security\.com)([^0-9a-z]|$)
* ! FROMDOMAIN ?? ^(verifiedbyvisa\.com|\
                    visa\.com|\
                    visa-security\.com)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(verifiedbyvisa\.com|\
                  visa\.(com|net)|\
                  visa-security\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.22\.59\.12[8-9|\
                   12\.22\.59\.1[3-5][0-9]|\
                   12\.22\.63\.3[2-9]|\
                   63\.73\.233\.[0-9]|\
                   63\.73\.233\.[1-5][0-9]|\
                   63\.73\.233\.6[0-3]|\
                   64\.78\.236\.1[6-9]|\
                   64\.78\.236\.2[0-3]|\
                   64\.78\.237\.19[2-9]|\
                   64\.78\.237\.2[0-4][0-9]|\
                   64\.78\.237\.25[0-5]|\
                   65\.205\.134\.6[4-9]|\
                   65\.205\.134\.[7-8][0-9]|\
                   65\.205\.134\.9[0-5]|\
                   65\.217\.70\.12[8-9]|\
                   65\.217\.70\.1[3-8][0-9]|\
                   65\.217\.70\.19[0-1]|\
                   67\.120\.121\.6[4-9]|\
                   67\.120\.121\.7[0-1]|\
                   161\.204\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   192\.77\.159\.[0-9][0-9]?[0-9]?|\
                   198\.217\.12[8-9]\.[0-9][0-9]?[0-9]?|\
                   198\.217\.1[3-9][0-9]\.[0-9][0-9]?[0-9]?|\
                   198\.217\.2[0-4][0-9]\.[0-9][0-9]?[0-9]?|\
                   198\.217\.25[0-5]\.[0-9][0-9]?[0-9]?|\
                   198.241.12[8-9]\.[0-9][0-9]?[0-9]?|\
                   198.241.1[3-9][0-9]\.[0-9][0-9]?[0-9]?|\
                   198.241.2[0-4][0-9]\.[0-9][0-9]?[0-9]?|\
                   198.241.25[0-5]\.[0-9][0-9]?[0-9]?|\
                   198\.80\.4[2-3]\.[0-9][0-9]?[0-9]?|\
                   199\.108\.77\.8[0-9]|\
                   199\.108\.77\.9[0-5]|\
                   205\.227\.65\.[0-9][0-9]?[0-9]?|\
                   206\.114\.201\.6[4-9]|\
                   206\.114\.201\.7[0-9]|\
                   207\.27\.127\.[0-9][0-9]?[0-9]?|\
                   207\.25\.86\.[0-9][0-9]?[0-9]?|\
                   207\.35\.68\.3[2-9]|\
                   207\.35\.68\.[4-5][0-9]|\
                   207\.35\.68\.6[0-3]|\
                   207\.134\.70\.[0-9][0-9]?[0-9]?|\
                   208\.5\.206\.[0-9]|\
                   208\.5\.206\.[1-9][0-9]|\
                   208\.5\.206\.1[0-1][0-9]|\
                   208\.5\.206\.12[0-7]|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?|\
                   209\.79\.153\.[0-9][0-9]?[0-9]?|\
                   209\.176\.128\.12[8-9]|\
                   209\.176\.128\.1[3-8][0-9]|\
                   209\.176\.128\.19[0-1]|\
                   209\.232\.3[2-3]\.[0-9][0-9]?[0-9]?|\
                   216\.233\.182\.4[0-7])$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Visa International)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# VR Bank
#
:0
* FROMDOMAIN ?? ^(vr-networld-ebanking\.de|\
                  vrbank\.de)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   195\.200\.3[4-5]\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (VR Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Washington Mutual
#
LT4=no

:0
* ^(From|Received|Reply-to):.*[^0-9a-z](WAMU|Washington Mutual)([^0-9a-z]|$)
* ! FROMDOMAIN ?? ^(wamu\.com|\
                    washingtonmutual\.com)$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^(wamu\.com|\
                  washingtonmutual\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   63\.87\.217\.[0-9][0-9]?[0-9]?|\
                   63\.196\.134\.12[8-9]|\
                   63\.196\.134\.1[3-5][0-9]|\
                   63\.198\.76\.22[4-9]|\
                   63\.198\.76\.23[0-1]|\
                   63\.200\.20\.12[8-9]|\
                   63\.200\.20\.1[3-5][0-9]|\
                   63\.203\.15\.19[2-9]|\
                   63\.203\.138\.[8-9]|\
                   63\.203\.138\.1[0-5]|\
                   63\.203\.142\.12[0-7]|\
                   63\.203\.154\.12[0-7]|\
                   63\.207\.188\.21[6-9]|\
                   63\.207\.188\.22[0-3]|\
                   63\.224\.59\.12[8-9]|\
                   63\.224\.59\.13[0-9]|\
                   63\.224\.59\.14[0-3]|\
                   63\.241\.73\.[8-9]|\
                   63\.241\.73\.1[0-5]|\
                   63\.241\.80\.4[8-9]|\
                   63\.241\.80\.5[0-9]|\
                   63\.241\.80\.6[0-3]|\
                   63\.241\.80\.14[4-9]|\
                   63\.241\.80\.15[0-9]|\
                   63\.241\.95\.12[8-9]|\
                   63\.241\.95\.13[0-5]|\
                   63\.241\.95\.21[6-9]|\
                   63\.241\.95\.22[0-3]|\
                   63\.241\.138\.17[6-9]|\
                   63\.241\.138\.18[0-3]|\
                   64\.160\.4\.1[6-9]|\
                   64\.160\.4\.2[0-3]|\
                   64\.160\.30\.22[4-9]|\
                   64\.160\.30\.23[0-9]|\
                   64\.162\.181\.12[8-9]|\
                   64\.162\.181\.13[0-9]|\
                   64\.162\.181\.14[0-3]|\
                   64\.163\.248\.12[0-7]|\
                   64\.165\.163\.17[6-9]|\
                   64\.165\.163\.18[0-3]|\
                   64\.167\.200\.4[8-9]|\
                   64\.167\.200\.5[0-5]|\
                   64\.167\.215\.5[6-9]|\
                   64\.167\.215\.6[0-3]|\
                   64\.168\.176\.[0-9]|\
                   64\.168\.176\.[1-2][0-9]|\
                   64\.168\.176\.3[0-1]|\
                   64\.170\.44\.[0-9]|\
                   64\.170\.44\.[1-5][0-9]|\
                   64\.170\.44\.6[0-3]|\
                   64\.170\.167\.14[4-9]|\
                   64\.170\.167\.15[0-1]|\
                   64\.170\.244\.2[4-9]|\
                   64\.170\.244\.3[0-1]|\
                   64\.172\.76\.24[8-9]|\
                   64\.172\.76\.25[0-5]|\
                   64\.172\.85\.9[6-9]|\
                   64\.172\.85\.10[0-3]|\
                   64\.172\.155\.10[4-9]|\
                   64\.172\.155\.11[0-1]|\
                   64\.216\.75\.[0-9][0-9]?[0-9]?|\
                   65\.65\.20\.[0-9][0-9]?[0-9]?|\
                   65\.65\.178\.[0-9][0-9]?[0-9]?|\
                   65\.67\.152\.22[4-9]|\
                   65\.67\.152\.23[0-1]|\
                   65\.68\.208\.24[8-9]|\
                   65\.68\.208\.25[0-5]|\
                   65\.69\.198\.13[6-9]|\
                   65\.69\.198\.14[0-3]|\
                   65\.126\.61\.9[6-9]|\
                   65\.126\.61\.10[0-9]|\
                   65\.126\.61\.11[0-1]|\
                   65\.126\.63\.24[8-9]|\
                   65\.126\.63\.25[0-5]|\
                   65\.197\.176\.3[2-9]|\
                   65\.197\.176\.[4-5][0-9]|\
                   65\.197\.176\.6[0-3]|\
                   65\.202\.80\.17[6-9]|\
                   65\.202\.80\.18[0-3]|\
                   65\.206\.7\.[0-9]|\
                   65\.206\.7\.1[0-5]|\
                   65\.211\.254\.7[2-9]|\
                   65\.212\.130\.20[8-9]|\
                   65\.212\.130\.21[0-9]|\
                   65\.212\.130\.22[0-3]|\
                   65\.212\.156\.[0-9]|\
                   65\.212\.156\.[1-5][0-9]|\
                   65\.212\.156\.6[0-3]|\
                   65\.213\.74\.12[8-9]|\
                   65\.213\.74\.13[0-5]|\
                   65\.219\.15\.2[4-9]|\
                   65\.219\.15\.3[0-1]|\
                   65\.219\.146\.1[6-8][0-9]|\
                   65\.219\.146\.19[0-1]|\
                   65\.219\.167\.12[8-9]|\
                   65\.219\.167\.13[0-9]|\
                   65\.219\.167\.14[0-3]|\
                   65\.241\.152\.13[6-9]|\
                   65\.241\.152\.14[0-3]|\
                   66\.121\.186\.[0-9]|\
                   66\.121\.186\.[1-2][0-9]|\
                   66\.121\.186\.3[0-1]|\
                   66\.123\.116\.16[8-9]|\
                   66\.123\.116\.17[0-5]|\
                   66\.123\.139\.1[6-9][0-9]|\
                   66\.123\.139\.2[0-1][0-9]|\
                   66\.123\.139\.22[0-3]|\
                   66\.124\.74\.22[4-9]|\
                   66\.124\.74\.2[3-4][0-9]|\
                   66\.124\.74\.25[0-5]|\
                   66\.125\.59\.16[0-7]|\
                   66\.126\.117\.24[0-7]|\
                   66\.126\.118\.[0-7]|\
                   66\.126\.118\.1[6-9]|\
                   66\.126\.118\.2[0-3]|\
                   66\.126\.126\.18[4-9]|\
                   66\.126\.126\.19[0-1]|\
                   66\.127\.14\.17[6-9]|\
                   66\.127\.14\.18[0-3]|\
                   66\.127\.20\.4[8-9]|\
                   66\.127\.20\.5[0-5]|\
                   66\.127\.25\.5[6-9]|\
                   66\.127\.25\.6[0-3]|\
                   66\.127\.174\.23[2-9]|\
                   66\.127\.182\.1[6-9]|\
                   66\.127\.182\.2[0-3]|\
                   66\.137\.230\.22[4-9]|\
                   66\.137\.230\.23[0-1]|\
                   66\.139\.14\.24[8-9]|\
                   66\.139\.14\.25[0-5]|\
                   66\.141\.150\.13[6-9]|\
                   66\.141\.150\.14[0-3]|\
                   67\.36\.205\.[0-9]|\
                   67\.36\.205\.[1-9][0-9]|\
                   67\.36\.205\.1[0-1][0-9]|\
                   67\.36\.205\.12[0-7]|\
                   67\.37\.241\.[0-9]|\
                   67\.37\.241\.[1-9][0-9]|\
                   67\.37\.241\.1[0-1][0-9]|\
                   67\.37\.241\.12[0-7]|\
                   67\.38\.102\.12[8-9]|\
                   67\.38\.102\.1[3-9][0-9]|\
                   67\.38\.102\.2[0-4][0-9]|\
                   67\.38\.102\.25[0-5]|\
                   67\.38\.217\.12[8-9]|\
                   67\.38\.217\.1[3-9][0-9]|\
                   67\.38\.217\.2[0-4][0-9]|\
                   67\.38\.217\.25[0-5]|\
                   67\.38\.218\.[0-9]|\
                   67\.38\.218\.[1-9][0-9]|\
                   67\.38\.218\.1[0-1][0-9]|\
                   67\.38\.218\.12[0-7]|\
                   67\.112\.249\.5[6-9]|\
                   67\.112\.249\.6[0-3]|\
                   67\.112\.250\.6[4-9]|\
                   67\.112\.250\.7[0-1]|\
                   67\.115\.254\.15[2-9]|\
                   67\.116\.97\.10[4-9]|\
                   67\.116\.97\.11[0-1]|\
                   67\.120\.126\.1[6-8][0-9]|\
                   67\.120\.126\.19[0-1]|\
                   67\.120\.204\.19[2-9]|\
                   67\.120\.204\.2[0-4][0-9]|\
                   67\.120\.204\.25[0-5]|\
                   67\.122\.154\.2[4-9]|\
                   67\.122\.154\.3[0-1]|\
                   68\.88\.217\.24[0-7]|\
                   68\.89\.213\.16[0-7]|\
                   69\.37\.15\.12[8-9]|\
                   69\.37\.15\.13[0-5]|\
                   69\.110\.218\.[8-9]|\
                   69\.110\.218\.1[0-5]|\
                   69\.110\.218\.7[2-9]|\
                   167\.88\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   167\.145\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   167\.160\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   206\.107\.66\.12[8-9]|\
                   206\.107\.66\.1[3-9][0-9]|\
                   206\.107\.66\.2[0-4][0-9]|\
                   206\.107\.66\.25[0-5]|\
                   207\.105\.159\.[8-9]|\
                   207\.105\.159\.1[0-5]|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?|\
                   208\.252\.69\.21[6-9]|\
                   208\.252\.69\.22[0-3]|\
                   208\.252\.126\.22[4-9]|\
                   208\.252\.126\.23[0-9]|\
                   208\.252\.223\.1[6-8][0-9]|\
                   208\.252\.223\.19[0-1]|\
                   209\.180\.214\.16[0-7]|\
                   216\.62\.129\.8[8-9]|\
                   216\.62\.129\.9[0-5])$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Washington Mutual Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Wachovia Corp
#
:0
* FROMDOMAIN ?? ^(wachovia\.com)$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   12\.145\.73\.6[4-9]|\
                   12\.145\.73\.7[0-1]|\
                   12\.145\.79\.4[0-7]|\
                   63\.96\.148\.16[0-9]|\
                   63\.96\.148\.17[0-5]|\
                   65\.60\.92\.4[0-7]|\
                   66\.255\.78\.12[0-7]|\
                   68\.89\.216\.21[6-9]|\
                   68\.89\.216\.22[0-3]|\
                   68\.121\.43\.5[6-9]|\
                   68\.121\.43\.6[0-3]|\
                   69\.15\.46\.16[0-9]|\
                   69\.15\.46\.17[0-5]|\
                   161\.231\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   162\.111\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   168\.175\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   169\.200\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   192\.31\.149\.[0-9][0-9]?[0-9]?|\
                   192\.189\.124\.[0-9][0-9]?[0-9]?|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Wachovia Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}

# Wells Fargo Bank
#
LT4=no

:0
* ^(From|Received|Reply-to):.*[^0-9a-z]Wells( )*Fargo([^0-9a-z]|$)
* ! FROMDOMAIN ?? ^wellsfargo\.com$
{ LT4=yes }

:0
* LT4 ?? no
* FROMDOMAIN ?? ^wellsfargo\.com$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   4\.21\.32\.[0-9]|\
                   4\.21\.32\.[1-9][0-9]|\
                   4\.21\.32\.1[0-1][0-9]|\
                   4\.21\.32\.12[0-7]|\
                   12\.16\.24[0-1]\.[0-9][0-9]?[0-9]?|\
                   12\.34\.192\.22[4-9]|\
                   12\.34\.192\.23[0-1]|\
                   12\.37\.34\.9[6-9]|\
                   12\.37\.34\.10[0-3]|\
                   12\.47\.184\.12[8-9]|\
                   12\.47\.184\.1[3-9][0-9]|\
                   12\.47\.184\.2[0-4][0-9]|\
                   12\.47\.184\.25[0-5]|\
                   12\.96\.213\.4[0-7]|\
                   12\.106\.15\.8[0-9]|\
                   12\.106\.15\.9[0-5]|\
                   12\.106\.3[8-9]\.[0-9][0-9]?[0-9]?|\
                   12\.156\.234\.16[8-9]|\
                   12\.156\.234\.17[0-5]|\
                   12\.164\.13[4-5]\.[0-9][0-9]?[0-9]?|\
                   12\.177\.107\.11[2-9]|\
                   12\.183\.163\.11[2-9]|\
                   12\.183\.163\.12[0-7]|\
                   12\.184\.40\.4[8-9]|\
                   12\.184\.40\.5[0-5]|\
                   12\.184\.40\.8[0-9]|\
                   12\.184\.40\.9[0-5]|\
                   63\.86\.17[4-5]\.[0-9][0-9]?[0-9]?|\
                   63\.86\.184\.[0-9][0-9]?[0-9]?|\
                   63\.196\.79\.22[4-9]|\
                   63\.196\.79\.23[0-1]|\
                   63\.202\.168\.[0-9][0-9]?[0-9]?|\
                   63\.230\.144\.6[4-9]|\
                   63\.230\.144\.7[0-1]|\
                   63\.251\.246\.[0-9][0-9]?[0-9]?|\
                   64\.95\.12[4-5]\.[0-9][0-9]?[0-9]?|\
                   64\.95\.126\.[0-9]|\
                   64\.95\.126\.[1-9][0-9]|\
                   64\.95\.126\.1[0-1][0-9]|\
                   64\.95\.126\.12[0-7]|\
                   65\.125\.131\.22[4-9]|\
                   65\.125\.131\.2[3-4][0-9]|\
                   65\.125\.131\.25[0-5]|\
                   67\.121\.254\.7[2-9]|\
                   69\.11\.167\.9[6-9]|\
                   69\.11\.167\.10[0-3]|\
                   69\.11\.190\.16[0-7]|\
                   69\.21\.240\.[0-7]|\
                   69\.128\.142\.23[6-9]|\
                   69\.128\.142\.24[0-3]|\
                   71\.36\.250\.10[4-9]|\
                   71\.36\.250\.11[0-1]|\
                   151\.151\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   159\.37\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   171\.72\.[0-9][0-9]?[0-9]?\.[0-9][0-9]?[0-9]?|\
                   192\.31\.78\.[0-9][0-9]?[0-9]?|\
                   198\.74\.1[6-9]\.[0-9][0-9]?[0-9]?|\
                   198\.74\.2[0-7]\.[0-9][0-9]?[0-9]?|\
                   199\.108\.37\.9[6-9]|\
                   199\.108\.37\.10[0-9]|\
                   199\.108\.37\.11[0-5]|\
                   204\.151\.11[3-6]\.[0-9][0-9]?[0-9]?|\
                   205\.226\.4[8-9]\.[0-9][0-9]?[0-9]?|\
                   205\.226\.5[0-9]\.[0-9][0-9]?[0-9]?|\
                   205\.226\.6[0-3]\.[0-9][0-9]?[0-9]?|\
                   207\.141\.86\.[0-9][0-9]?[0-9]?|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?|\
                   209\.84\.206\.[0-9][0-9]?[0-9]?|\
                   209\.203\.246\.13[6-9]|\
                   209\.203\.246\.14[0-3]|\
                   216\.7\.140\.8[0-7]|\
                   216\.7\.140\.18[4-9]|\
                   216\.7\.140\.19[0-1]|\
                   216\.7\.140\.21[6-9]|\
                   216\.7\.140\.22[0-3]|\
                   216\.83\.190\.8[0-7]|\
                   216\.207\.127\.19[2-9]|\
                   216\.207\.127\.2[0-1][0-9]|\
                   216\.207\.127\.22[0-3])$
{ LT4=yes }

:0
* LT4 ?? yes
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Wells Fargo Bank)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}


# Wescom Credit Union
#
:0
* FROMDOMAIN ?? ^wescom\.org$
* ! FIRSTEXIP ?? ^(000\.000\.000\.000|\
                   65\.119\.0\.22[4-9]|\
                   65\.119\.0\.23[0-1]|\
                   65\.125\.164\.[0-9][0-9]?[0-9]?|\
                   68\.123\.245\.9[6-9]|\
                   68\.123\.245\.10[0-3]|\
                   69\.238\.2\.19[2-9]|\
                   208\.235\.248\.[0-9][0-9]?[0-9]?|\
                   209\.77\.178\.[0-9][0-9]?[0-9]?)$
{
 LT3=yes

 SBLOG="C3R-${TESTNAME} (Wescom Credit Union)"
 INCLUDERC=${SBDIR}/functions/loglevel.rc
}