On Sun, 22 Feb 2015 15:12:14 -0600, BigC <BigC@rochester.rr.com>
wrote:
>On Sun, 22 Feb 2015 21:20:04 +0100, corky@gawab.com wrote:
>
>>On Sat, 21 Feb 2015 17:35:52 -0600, Old Geek
>><eldergeekenator@gmail.com> wrote:
>>
>>>On Fri, 20 Feb 2015 19:52:37 -0800, fakename@fakeURL.com wrote:
>>>
>>>>I have sucessfully filtered this spam, using Agent 7.
>>>>
>>>>There is a rash of JPG spam in multiple groups, using several
>>>>different subject lines, "pregnant wives" being one of many.
>>>>
>>>>These are tough to kill as they use several different subject lines,
>>>>each with a random name and email address. A filter that filters on
>>>>the subject, name or email address works for awhile, until they change
>>>>that info.
>>>>
>>>>I have discovered one commonality that allows you to filter everything
>>>>from this poster.
>>>>
>>>>The key is to look at the Message ID field. Here is the Message ID
>>>>field from one of the "Pregnant Wives" posts:
>>>>
>>>>Message-ID: <a446.a02.138@gfkwt.com>
>>>>
>>>>Here is one from the "Dripping teen asian sweetie" posts:
>>>>
>>>>Message-ID: <a448.9e9d.5d@hoacw.com>
>>>>
>>>>Here is one from the "day at the beach" posts:
>>>>
>>>>Message-ID: <a448.4c5e.3b9@zijwm.com>
>>>>
>>>>Note the one common feature of the Message IDs - they all start with
>>>>"a4". The two numbers following increment, and everything after that
>>>>is random characters. It'll be a446 for a while, then a447, then
>>>>a448, etc.
>>>>
>>>>Here is the filter I use:
>>>>
>>>>Message-ID: {^<a4}
>>>>
>>>>The "^" symbol means "starts with", so this filter will match any post
>>>>whose Message ID field starts with "<a4".
>>>>
>>>>This filter may also catch the occasional legitimate post whose
>>>>Message ID just happens to start with "a4", but that's a small price
>>>>to pay for zapping a ton of spam.
>>>>
>>>>When I try a new filter, I start out by selecting "mark read" instead
>>>>of "delete". I try it for a few days, to see if any legit posts are
>>>>getting marked. If so, I tweak the filter. If it's only catching
>>>>spam, they I switch the filter to "delete".
>>>>
>>>>Long time Usenetter,
>>>>No One You Know
>>>
>>>A good lesson in Agent's expressions and a great reminder to always
>>>test first.
>>>
>>>EG.
>>
>>How to copy this filter using Agent 7.
>>When i try to copy, it is fine, but I cannot paste it into the filter
>>window.
>>I did try typing it, but I cannot do the upside down v.
>>Can anyone help please?
>>Thansk.
>
>^ = shift+6
Thank you.
|
|