Re: Ready made Spam filter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi Peter,
@05 April 2002, 10:15:34 +0200 (09:15 UK time) Peter Palmreuther wrote
in [EMAIL PROTECTED]">mid:[EMAIL PROTECTED]
MDP Turn on Regular expressions and use /s/s/s/s/s (five
MDP contiguous spaces).
Or use it's shorter and more readable format:
\s{5}
Yes.
with the additional correction of using '\' instead of '/' :-)))
D'oh! Too early for me!
- --
Cheers -- .\\arck D. Pearlstone -- List moderator
TB! v1.60c-14F4B4B2 on Windows 2000 5.0.2195 Service Pack 2
·
-BEGIN PGP SIGNATURE-
iD8DBQE8rV6bOeQkq5KdzaARAjQDAJ9mFamE+g4NP9v4k5zE0MbNHHwGkACgkEa+
6run8YKb3XbkzuRyJG6Z94c=
=f3y7
-END PGP SIGNATURE-
Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]
Re: Ready made Spam filter
Hello Roman Katzer, On Thu, 4 Apr 2002 18:47:06 +0200 GMT your local time, which was Thursday, April 4, 2002, 11:47:06 PM (GMT+0700) my local time, Roman Katzer wrote: On Thursday, April 4, 2002, 15:31:32, Jon Lawrance wrote: What about all the foreign character rubbish I get? Anyone else get this type of spam and what method do you use to get rid of it? I use the charset information to filter that stuff out. If there's something like charset=big5 or charset=ks_c_5601-1987 in the headers, it gets kicked. Use charset=.*ks_c_5601-1987 and check Regular expressions to also filter out mails that say charset=ks_c_5601-1987 or the like. Ok, which expressions do you have which work... Allas my days of active math are over, I can read the damned things but producing them To me its a bit like if I show some of the formala's I used in the past, probably nobody here would even see what it was about I would know but wouldnt be able to reproduce them anymore after all these years...(g) Roman -- Best regards, tracer Using theBAT 1.60c mail to : [EMAIL PROTECTED] C.C.S. Associates FAX (USA): (208) 460-3753 pgp 6.5.3 : 0x909D9B10 Current Ver: 1.60c FAQ: http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED]
Re: Ready made Spam filter
Hello Allie C Martin, On Thu, 4 Apr 2002 16:00:32 -0500 GMT your local time, which was Friday, April 5, 2002, 4:00:32 AM (GMT+0700) my local time, Allie C Martin wrote: Sure. I'm saying that it's more difficult to keep your Inbox free of spam by filtering the spam itself. I'm not saying that you cannot filter spam. You can. If you do, you'll spend too much time on it. I agree, thats what I do but 1. grab the known mail 2. grab the known mail lists and then send the rest to a spam folder for a few days or as I did copy the spam to it and check whats common. NOT subjects, it doesnt work. Its to, from and other stuff you may never see in the headers. I had a few mailing lists change their system as it looked like spam... It was quite effective but was catching too much of my good mail Because your good mail shouldnt be there to be grabbed... if you first send anything you DO want to its folders there isnt that much left and as far as I ca see my current filters still zap about 95% of all spam... T First grab the ones you are sure are yours and then tackle the T spam. You will not need to tackle the spam once you grab what's yours. If you effectively grab what's not yours, which you easily can, the rest is spam. Nope, there are those sending an email a month, I donot give them a folder. Silly enquiries are in the same category, they send mail one time/ 2 times and when its finished I dump them. T Not to you is one way but others are the undisclosed recipients and T similar rubbish and anyway, you inspect by hand whats left, its T really not that difficult with 500 emails coming in per day to have T maybe one spamletter... Not at all. ?? you agree or disagree ?? -- Best regards, tracer Using theBAT 1.60c mail to : [EMAIL PROTECTED] C.C.S. Associates FAX (USA): (208) 460-3753 pgp 6.5.3 : 0x909D9B10 Current Ver: 1.60c FAQ: http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED]
Re: Ready made Spam filter
On Friday, April 5, 2002, 16:39:27, tracer wrote: Ok, which expressions do you have which work... So far: (irrelevant lines deleted) BeginFilter Name: Spam Active: 1 Source: \\RoKa\Inbox Target: \\RoKa\spam CopyFolder: none MainSet: 40charset=.*ks_c_5601-1987 AltSet:1: 40charset=.*euc-kr AltSet:2: 40charset=.*big5 Actions: faMarkRead,faDelServer,faoRegExp,faSetColor ColourGroup: mbspam EndFilter Allas my days of active math are over, I can read the damned things but producing them Just look into the headers. Mine will probably say us-ascii or iso-8859-1. Some spam mail programs won't write a charset into the headers, though. Roman -- Roman Katzer, Aachen, Germany He who joyfully marches to music in rank and file has already earned my contempt. He has been given a large brain by mistake, since for him the spinal cord would fully suffice. -- Albert Einstein Current Ver: 1.60c FAQ: http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED]
Re: Ready made Spam filter
On Thursday, April 4, 2002, 09:43, Jon Lawrance wrote: Does anyone have a ready made spam filter they could share? Are they importable? All filter are easily importable and exportable through the sorting office copy/paste capabilities. To export a filter, mark it and hit ctrl-c then paste it in a text editor. To import another filter, for example my spam filters submitted below, copy all text and paste them into the sorting office. I have already set up an address book called Spam and then a filter to avoid those addresses in future. But I think I need another to get rid of the obvious junk. I use three filters, one that filter on certain words like teen, porn and so forth, another to filter on certain patterns (4 spaces in a row in the subject line or 4 digits in a row in either the subject och the senders address) and a third, placed above the two others, to stop TB from filtering messages with certain words. The first two filters does not filter messages from addresses in my address book. I do not argue that these filters are perfect, but they does suite my needs, they pick about 95% of all the spam I get. Unfortunately, they do filter about one message a month which should not get filtered. I suppose that's hard to avoid :-( This filter will however not work if you keep your address book with addresses to avoid, since they never take actions on mails from known senders. Before you copy/paste the filters below, make sure to edit the folders to suite your setup. Place them in the same order that I have done in this mail. BeginFilter Name: Spam stopper Active: 1 Source: \\marcus\Inbox Target: \\marcus\Inbox CopyFolder: none MainSet: 50bluewastebin|srn|technew|dell Actions: AddGroups: DelGroups: ForwardTemplate: ConfirmTemplate: ReplyTemplate: FwdAddr: RedirectAddr: NewAddr: NewTemplate: ExtCmd: ExtFile: ExtractDir: ColourGroup: default AddAddrItems: afiFrom, DelAddrItems: afiFrom, HotKey: 0 IsOfColour: default SizeBigger: 0 SizeSmaller: 0 AgeOlder: 0 AgeNewer: 0 InAddrPos: 0 OutAddrPos: 0 InAddrGroups: NoAddrGroups: KillFile: KillMethod: 0 SaveTemplate: SndFile: SysSound: 0 SoundTime: 0:00-0:00 AllowTime: 0:00-0:00 EndFilter BeginFilter Name: Spam Active: 1 Source: \\marcus\Inbox Target: \\marcus\Inbox\Spam CopyFolder: none MainSet: 50teen|girls|celebrity|nude|naked|adult|porn|xxx|gangbang|cum|hardcore|fuck|[over 18]|[at least 18]|horny|sluts|britney|spears|viagra|pharmac|medication|xenical|pills|prescription|snoring|money|$$|credit|mortage|mortgage|debt|investment|business|marketing|[special offer]|discount|insurance|lottery|[unsolicited email]|spam|congratulations|adventure|hollywood|cannes|[green card] Actions: faMarkRead,faoAdvAddressOut AddGroups: DelGroups: ForwardTemplate: ConfirmTemplate: ReplyTemplate: FwdAddr: RedirectAddr: NewAddr: NewTemplate: ExtCmd: ExtFile: ExtractDir: ColourGroup: default AddAddrItems: afiFrom, DelAddrItems: afiFrom, HotKey: 0 IsOfColour: default SizeBigger: 0 SizeSmaller: 0 AgeOlder: 0 AgeNewer: 0 InAddrPos: 0 OutAddrPos: 0 InAddrGroups: NoAddrGroups: KillFile: KillMethod: 0 SaveTemplate: SndFile: SysSound: 0 SoundTime: 0:00-0:00 AllowTime: 0:00-0:00 EndFilter BeginFilter Name: Spam 2 Active: 1 Source: \\marcus\Inbox Target: \\marcus\Inbox\Spam CopyFolder: none MainSet: 20\s\s\s\s AltSet:1: 20\d\d\d\d AltSet:2: 00\d\d\d\d Actions: faMarkRead,faoRegExp,faoAdvAddressOut AddGroups: DelGroups: ForwardTemplate: ConfirmTemplate: ReplyTemplate: FwdAddr: RedirectAddr: NewAddr: NewTemplate: ExtCmd: ExtFile: ExtractDir: ColourGroup: default AddAddrItems: afiFrom, DelAddrItems: afiFrom, HotKey: 0 IsOfColour: default SizeBigger: 0 SizeSmaller: 0 AgeOlder: 0 AgeNewer: 0 InAddrPos: 0 OutAddrPos: 0 InAddrGroups: NoAddrGroups: KillFile: KillMethod: 0 SaveTemplate: SndFile: SysSound: 0 SoundTime: 0:00-0:00 AllowTime: 0:00-0:00 EndFilter -- Regards, Marcus Ohlström Using The Bat! v1.60c on Windows 2000 5.0 Build 2195 Service Pack 2 PGP Public Key at http://www.canit.se/~marcus/pgp.txt Current Ver: 1.60c FAQ: http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED]
Re: Ready made Spam filter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 @ 10:53:14 +0200 [ Thu, 4 Apr 2002], Marcus Ohlström [MO] wrote these words of wisdom: ... MO I use three filters, one that filter on certain words like teen, MO porn and so forth, another to filter on certain patterns (4 spaces MO in a row in the subject line or 4 digits in a row in either the MO subject och the senders address) and a third, placed above the two MO others, to stop TB from filtering messages with certain words. The MO first two filters does not filter messages from addresses in my MO address book. It's *much* easier to filter mail that you expect, rather than to filter mail that you don't expect. If you are going to do things your way, then it's best to just purchase an application like Spamkiller http://www.spamkiller.com/, where the developer makes a living creating these sorts of filters to catch spam mail, and even then, it tends to catch a lot of my good mail. I stopped using it, refined my exclusion approach to spam filtering (if it's not a message directly for me, then it's spam) and it now works better than 'spamkiller'. Note that Spamkiller uses about 1500 filter rules and you have to update it periodically. Create filters for all mail that you expect, i.e., discussion list mail, newsletter mails and announcements, mail from your friends and family and finally mail from your address book addresses. You can also create an address book group and a filter to place in your address book, addresses for mail in your Inbox, that you replied to. The final filter in the list will be a filter that places all messages not caught by the previous filter into your spam folder. With time, the few messages from legitimate sources that reach your spam folder will diminish as you create filters for them either directly, or when you reply to them and their addresses are added to your special address book group. This is much easier than going through spam each day and trying to figure out how to filter the new ones that found their way in your Inbox. I haven't seen a spam in my Inbox for three weeks, since I stopped using SpamKiller and refined my filtering. - -- Allie C Martin (List Moderator and fellow end user) PGP Public Key - mailto:[EMAIL PROTECTED] ®TB! v1.60c on Windows XP 5.1.2600 _ -BEGIN PGP SIGNATURE- iEYEARECAAYFAjysO5wACgkQV8nrYCsHF+LUpQCg31jCmOla5Q0zp1MlMnrobUkz zkEAoNLjvHXLlA/4WxDjUeemmU0lzYj6 =XnQd -END PGP SIGNATURE- Current Ver: 1.60c FAQ: http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED]
Re: Ready made Spam filter
Hello Allie C Martin, On Thu, 4 Apr 2002 06:40:11 -0500 GMT your local time, which was Thursday, April 4, 2002, 6:40:11 PM (GMT+0700) my local time, Allie C Martin wrote: @ 10:53:14 +0200 [ Thu, 4 Apr 2002], Marcus Ohlström [MO] wrote these words of wisdom: ... MO I use three filters, one that filter on certain words like teen, MO porn and so forth, another to filter on certain patterns (4 spaces MO in a row in the subject line or 4 digits in a row in either the MO subject och the senders address) and a third, placed above the two MO others, to stop TB from filtering messages with certain words. The MO first two filters does not filter messages from addresses in my MO address book. It's *much* easier to filter mail that you expect, rather than to filter mail that you don't expect. Not quite true as most spammers use certain things in their headers which betray its spam. Filtering on subject is useless, check 'send to', send from and similar things and you will see lots of ways to get rid of 95% of all spam. Obviously one should first remove any mailing lists and other stuff one knows but hitting spam is easy. If you are going to do things your way, then it's best to just purchase an application like Spamkiller http://www.spamkiller.com/, where the developer makes a living creating these sorts of filters to catch spam mail, and even then, it tends to catch a lot of my good mail. I stopped using it, refined my exclusion approach to spam filtering (if it's not a message directly for me, then it's spam) and it now works better than 'spamkiller'. Note that Spamkiller uses about 1500 filter rules and you have to update it periodically. You donot need that many. First grab the ones you are sure are yours and then tackle the spam. Not to you is one way but others are the undisclosed recipients and similar rubbish and anyway, you inspect by hand whats left, its really not that difficult with 500 emails coming in per day to have maybe one spamletter... -- Best regards, tracer Using theBAT 1.60c mail to : [EMAIL PROTECTED] C.C.S. Associates FAX (USA): (208) 460-3753 pgp 6.5.3 : 0x909D9B10 Current Ver: 1.60c FAQ: http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED]
Re: Ready made Spam filter
On Thursday, April 4, 2002, 15:31:32, Jon Lawrance wrote: What about all the foreign character rubbish I get? Anyone else get this type of spam and what method do you use to get rid of it? I use the charset information to filter that stuff out. If there's something like charset=big5 or charset=ks_c_5601-1987 in the headers, it gets kicked. Use charset=.*ks_c_5601-1987 and check Regular expressions to also filter out mails that say charset=ks_c_5601-1987 or the like. Roman -- Roman Katzer, Aachen, Germany I want nothing to do with natural foods. At my age, I need all the preservatives I can get! -- George Burns Current Ver: 1.60c FAQ: http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED]
Re: Ready made Spam filter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 @ 21:23:28 +0700 [ Thu, 4 Apr 2002], Tracer [T] thoughtfully wrote the following: ... T Not quite true as most spammers use certain things in their headers T which betray its spam. Sure. I'm saying that it's more difficult to keep your Inbox free of spam by filtering the spam itself. I'm not saying that you cannot filter spam. You can. If you do, you'll spend too much time on it. If you are going to do things your way, then it's best to just purchase an application like Spamkiller http://www.spamkiller.com/, where the developer makes a living creating these sorts of filters to catch spam mail, and even then, it tends to catch a lot of my good mail. I stopped using it, refined my exclusion approach to spam filtering (if it's not a message directly for me, then it's spam) and it now works better than 'spamkiller'. Note that Spamkiller uses about 1500 filter rules and you have to update it periodically. T You donot need that many. It was quite effective but was catching too much of my good mail T First grab the ones you are sure are yours and then tackle the T spam. You will not need to tackle the spam once you grab what's yours. If you effectively grab what's not yours, which you easily can, the rest is spam. T Not to you is one way but others are the undisclosed recipients and T similar rubbish and anyway, you inspect by hand whats left, its T really not that difficult with 500 emails coming in per day to have T maybe one spamletter... Not at all. - -- Allie C Martin - (List Moderator) PGP Public Key - mailto:[EMAIL PROTECTED] ®TB! v1.60c on Windows XP 5.1.2600] _ -BEGIN PGP SIGNATURE- iEYEARECAAYFAjysvvIACgkQV8nrYCsHF+IghgCfW2QF+VRKc6yJhfOq/x8iF6Lk fRQAnAo035URqbzDP/kf2p1nMTGvmF7Z =mzQ1 -END PGP SIGNATURE- Current Ver: 1.60c FAQ: http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED]
Re: Ready made Spam filter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Jody, @05 April 2002, 19:50:05 -0600 (02:50 UK time) Jody Watts wrote in [EMAIL PROTECTED]">mid:[EMAIL PROTECTED] MO Before you copy/paste the filters below, make sure to edit the MO folders to suite your setup. Place them in the same order that I MO have done in this mail. Where (what file) do I paste the attached filters into? You don't. You paste them into the sorting office UI. Also ... how do you add spaces to the set in a filter list. If i use the space bar (or the ALT number), the filter won't save it. If I could filter say 5 contiguous spaces in the subject, I would get rif of 90% or more of the spam that DOES make it through. Turn on Regular expressions and use /s/s/s/s/s (five contiguous spaces). - -- Cheers -- .\\arck D. Pearlstone -- List moderator TB! v1.60c-14F4B4B2 on Windows 2000 5.0.2195 Service Pack 2 · -BEGIN PGP SIGNATURE- iD8DBQE8rVsfOeQkq5KdzaARAkuxAKCGcuYJkU08iYPE0ic7RiJ5CicV3wCdHfx+ IW1r3EMlIgWMg+K32UjRQ/U= =BeIu -END PGP SIGNATURE- Current Ver: 1.60c FAQ: http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED]
Re: Ready made Spam filter
Hello Marck,
On Friday, April 5, 2002 at 10:06:54 AM you wrote in
[EMAIL PROTECTED]">mid:[EMAIL PROTECTED] (at least in part):
MDP Turn on Regular expressions and use /s/s/s/s/s (five contiguous
MDP spaces).
Or use it's shorter and more readable format:
\s{5}
with the additional correction of using '\' instead of '/' :-)))
--
Regards
Peter Palmreuthermailto:[EMAIL PROTECTED]
(The Bat! v1.60c on Windows 2000 5.0 Build 2195 Service Pack 2)
Will I be saved/Will I be saved/Dream on he says/Dream on he says
Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]
