On Sun, 22 Feb 2015 21:20:04 +0100, corky@gawab.com wrote:
>On Sat, 21 Feb 2015 17:35:52 -0600, Old Geek
><eldergeekenator@gmail.com> wrote:
>
>>On Fri, 20 Feb 2015 19:52:37 -0800, fakename@fakeURL.com wrote:
>>
>>>I have sucessfully filtered this spam, using Agent 7.
>>>
>>>There is a rash of JPG spam in multiple groups, using several
>>>different subject lines, "pregnant wives" being one of many.
>>>
>>>These are tough to kill as they use several different subject lines,
>>>each with a random name and email address. A filter that filters on
>>>the subject, name or email address works for awhile, until they change
>>>that info.
>>>
>>>I have discovered one commonality that allows you to filter everything
>>>from this poster.
>>>
>>>The key is to look at the Message ID field. Here is the Message ID
>>>field from one of the "Pregnant Wives" posts:
>>>
>>>Message-ID: <a446.a02.138@gfkwt.com>
>>>
>>>Here is one from the "Dripping teen asian sweetie" posts:
>>>
>>>Message-ID: <a448.9e9d.5d@hoacw.com>
>>>
>>>Here is one from the "day at the beach" posts:
>>>
>>>Message-ID: <a448.4c5e.3b9@zijwm.com>
>>>
>>>Note the one common feature of the Message IDs - they all start with
>>>"a4". The two numbers following increment, and everything after that
>>>is random characters. It'll be a446 for a while, then a447, then
>>>a448, etc.
>>>
>>>Here is the filter I use:
>>>
>>>Message-ID: {^<a4}
>>>
>>>The "^" symbol means "starts with", so this filter will match any post
>>>whose Message ID field starts with "<a4".
>>>
>>>This filter may also catch the occasional legitimate post whose
>>>Message ID just happens to start with "a4", but that's a small price
>>>to pay for zapping a ton of spam.
>>>
>>>When I try a new filter, I start out by selecting "mark read" instead
>>>of "delete". I try it for a few days, to see if any legit posts are
>>>getting marked. If so, I tweak the filter. If it's only catching
>>>spam, they I switch the filter to "delete".
>>>
>>>Long time Usenetter,
>>>No One You Know
>>
>>A good lesson in Agent's expressions and a great reminder to always
>>test first.
>>
>>EG.
>
>How to copy this filter using Agent 7.
>When i try to copy, it is fine, but I cannot paste it into the filter
>window.
>I did try typing it, but I cannot do the upside down v.
>Can anyone help please?
>Thansk.
^ = shift+6
|
|