David E. Ross wrote:
On 1/12/11 5:36 PM, John wrote:
[...]
One question though, the example below is someone I would like to block
in a different newsgroup but the address looks odd:
NNTP-Posting-Host: 9TEqRaUN62VUuRWTWfCotg.user.speranza.aioe.org
The "9TEqRaUN62VUuRWTWfCotg" part may be an encrypted account
number and/or IP address. This is often done for poster privacy
while allowing the service (aioe.org) to identify the poster. If
this part is the same for each of the troll's posts, it is good to
filter on.
Is this some sort of work around to what you suggested or just typical
of aioe?
Thanks,
John
They're using a domain rather than an IP address. It's not a registered
domain, so it must be internal to aioe.org. A domain like that is often
used for a broadband connection. Since aioe.org is not an ISP, however,
the domain is not for a broadband connection. It thus is likely a
temporary domain, possibly for a single use. I would filter on
"contains" (second term in the filter) and "aioe.org" (third term).
See http://aioe.org - it's a free news service. (Perfect for trolls.)
I'm guessing that the leftmost part is an encrypted IP address.
Filtering on aioe.org will take out all posts from that service -
which might not be a bad thing. If you are interested in filtering
out an entire service ** cough ** google groups ** cough **, a better
header field (IIRC) is Xref:, because it is always provided in the
header summaries a newsreader gets. Filtering on other fields, such
as variations of posting host will usually require additional header
info or sometimes the entire header to be fetched, depending on the
setup of the news service and/or newsreader. This can make the
header retrieval process go a lot slower.
--
Rich (Pull thorn from address to e-mail me.)
SeaMonkey - Surfing the net has never been so suite!
_______________________________________________
support-seamonkey mailing list
[email protected]
https://lists.mozilla.org/listinfo/support-seamonkey
