sD

[email protected] (Doug Miller)

13/04/2008 8:13 PM

Troll & Spam Filtering

As many of the old hands here know, I've been maintaining a "TrollFilter" for
several years to deal with the troll attacks this group occasionally suffers.
The TrollFilter is a set of filter rules for Nfilter (NewsProxy) that remove
the vast majority of such posts. TrollFilter also includes a few rules
intended to drop spam posts -- chief among them a rule that drops *every* post
that originated at GoogleGroups (except those made by Charlie Self).

This is not intended to disparage any other regulars of this group who may
happen to also be posting through GoogleGroups; it's just that Charlie is the
only one I know about. If there are others, in addition to Charlie, whose
posts from GoogleGroups should be allowed to come through, please post a reply
in this thread and/or email me at /alphageek/at/milmac/dot/com and I'll make
the appropriate changes to the filters.

See my sig below for instructions on obtaining a copy of TrollFilter.

--
Regards,
Doug Miller (alphageek-at-milmac-dot-com)

Get a copy of my NEW AND IMPROVED TrollFilter for NewsProxy/Nfilter
by sending email to autoresponder at filterinfo-at-milmac-dot-com
You must use your REAL email address to get a response.

Download Nfilter at http://www.milmac.com/np-120.exe


This topic has 19 replies

DB

Dave Balderstone

in reply to [email protected] (Doug Miller) on 13/04/2008 8:13 PM

15/04/2008 5:27 PM

In article <[email protected]>, jd
<[email protected]> wrote:

> I'm just starting to build a set of rules to keep the spammers out. Does
> anyone ahve a list of subject or from terms that seems to be effective that
> they feel like sharing?

Kill anything from Google Groups, any poster with gmail.com in their
address, anything cross-posted to four or more newsgroups, and anything
cross-posted to a group with "advocacy" in its name and you'll
eliminate 98% of the spam, bullshit and garbage on usenet.

The only exception I'm making to the above is to exclude Charlie Self
from the Google Groups filter, but he's the only one.

--
Help improve usenet. Kill-file Google Groups.
http://improve-usenet.org/

Pp

Puckdropper

in reply to [email protected] (Doug Miller) on 13/04/2008 8:13 PM

14/04/2008 3:14 AM

dale martin <[email protected]> wrote in
news:[email protected]:

> I'm more of a lurker than a regular participant but occasionally I
> have something to say that might be of use to someone. I'm hoping we
> can withstand this latest attack of crap that's been flung our way.
> I've been reluctant to read through the posts lately as there is so
> little about woodworking among the FAKE ROLEX, GUCCI, etc. I'm not
> very tech-savvy so I use Google groups to read and post to this
> newsgroup. If there's an easy way to use another reader then please
> enlighten me. Thanks.
>
> Dale

It's called "Pay for NNTP access." If all you do is read text groups,
you can buy a block of data transfer from a service provider that'll last
you just about forever. My ISP dumped everyone off to Google Groups in
February, so I've had to go this route.

I have Astraweb's 90 GB service, it was a $25 one time fee. (Plus, you
have binary access if you want to see something in a.b.p.w.) They're not
super fast, but they're probably not set up for high-latency connections
either.

Puckdropper
--
You can only do so much with caulk, cardboard, and duct tape.

To email me directly, send a message to puckdropper (at) fastmail.fm

Pp

Puckdropper

in reply to [email protected] (Doug Miller) on 13/04/2008 8:13 PM

15/04/2008 7:24 PM

"jd" <[email protected]> wrote in
news:[email protected]:

> I'm just starting to build a set of rules to keep the spammers out.
> Does anyone ahve a list of subject or from terms that seems to be
> effective that they feel like sharing?
>
> thanks
> -James
>

Here's one person's list:
http://groups.google.com/group/rec.woodworking/msg/3fe6ef0d3f366d38


Here's mine, these are regular expressions.
Subject: YOU MUST KNOW THIS MAN
Subject: porn
Subject: wholesale and retail nike sports shoes\,nike shox\,air
maxss\,dunks
Subject: nude
Subject: nike
Subject: sex
Subject: lesbian
Subject: work from home
Subject: work home
From: .*@aaa\-replica\-watch\.com
From: .*@cnreplicas\.com
From: .*@21cn\.com
From: .*@126\.com
From: .*@sohu\.com
Subject: wholesale
Subject: jordan
Subject: adidas
Subject: mesos
From: .*@watches\-replicas\.com
Subject: Watch
From: .*@qq\.com
Subject: handbags

Puckdropper
--
You can only do so much with caulk, cardboard, and duct tape.

To email me directly, send a message to puckdropper (at) fastmail.fm

jl

"jd"

in reply to [email protected] (Doug Miller) on 13/04/2008 8:13 PM

16/04/2008 8:09 AM

Thanks everyone! This will give me a good seed set to start the filter....

-JD

"jd" <[email protected]> wrote in message
news:[email protected]...
> I'm just starting to build a set of rules to keep the spammers out. Does
> anyone ahve a list of subject or from terms that seems to be effective
> that they feel like sharing?
>
> thanks
> -James
>

sD

[email protected] (Doug Miller)

in reply to [email protected] (Doug Miller) on 13/04/2008 8:13 PM

14/04/2008 12:26 AM

In article <[email protected]>, [email protected] wrote:
>On Sun, 13 Apr 2008 20:13:46 GMT, [email protected] (Doug Miller)
>wrote:
>
>
>Where ya' been?

Busy...
>
>It seems like you haven't been here much lately.

I've been mostly in lurk mode since the start of the year. I've been reading
the wreck nearly every single day, but haven't had much to say -- so I haven't
been saying it. :-)

--
Regards,
Doug Miller (alphageek at milmac dot com)

It's time to throw all their damned tea in the harbor again.

tl

"tom"

in reply to [email protected] (Doug Miller) on 13/04/2008 8:13 PM

15/04/2008 4:57 PM

> "jd" <[email protected]> wrote in
> news:[email protected]:
>
> > I'm just starting to build a set of rules to keep the spammers out.
> > Does anyone ahve a list of subject or from terms that seems to be
> > effective that they feel like sharing?
> >
> > thanks
> > -James
> >

contains 'nigger' or 'WTC Towers' or 'Ann Coulter' or 'fucking' or 'Islam'
or 'Sex' or 'Religion' or 'God' or 'Allah' or 'fuck' or 'penis' or 'QURAN'
or 'JESUS' or 'nike' or 'handbag' or 'Figure Income' or 'jordans' or
'jordan' or 'Gucci' or 'hand bag' or 'Christian Dior' or 'LouisVuitton' or
'MI5Victim' or 'Red Cloud' or 'MI5' or 'britney spears' or 'Money Making' or
'Secondhand Smoke' or 'SNEAKERS' or 'smug' or 'Sheldon' or 'asshole' or
'Zionist' or 'Mohammad' or 'nazis' or 'PayPal' or 'bin-laden is killed' or
'M'I.5' or 'M'I`5' or 'M I.5' or 'M.I,5' or 'M`I,5' or 'M,I.5' or 'M`I'5' or
'Clinton' or 'Obama' or 'Huckabee' or 'HILLARY' or 'test' or 'testing' or
'Jim Carr' or 'Mike Rieves' or 'shoe' or 'shoes' or 'handbag' or 'handbags'
or 'muslum' or 'muslims' or 'Jesus' or 'Christ' or 'Extra Income' or
'Sporge' or 'pedophilia' or 'phallic' or 'M,I`5'' or 'nazi' or '!' or 'shit'
or 'Douchebag' or '$' or 'Racism' or 'McCain' or 'Muhammad' or 'liberal
press' or 'Kadaitcha' or 'Replica' or 'Wholesale' or 'rolex' or 'Glossary'
or 'Bear Bottoms' or 'Bear Bottom(s)' or 'Linux' or 'BearsBottom' or
'Hummingbird' or 'slime' or 'racist' or 'Caucasians' or 'Caucasian' or 'DESK
RABBIT' or 'vibrators' or 'vibrator' or 'mistress' or 'Reebok' or 'HOME
BASED' or 'income' or 'Watch' or 'jeans' or 'handbags' or 'nude' or 'Bare
Bottoms'



dm

dale martin

in reply to [email protected] (Doug Miller) on 13/04/2008 8:13 PM

13/04/2008 7:59 PM

I'm more of a lurker than a regular participant but occasionally I
have something to say that might be of use to someone. I'm hoping we
can withstand this latest attack of crap that's been flung our way.
I've been reluctant to read through the posts lately as there is so
little about woodworking among the FAKE ROLEX, GUCCI, etc. I'm not
very tech-savvy so I use Google groups to read and post to this
newsgroup. If there's an easy way to use another reader then please
enlighten me. Thanks.

Dale




On Apr 13, 1:13=A0pm, [email protected] (Doug Miller) wrote:
> As many of the old hands here know, I've been maintaining a "TrollFilter" =
for
> several years to deal with the troll attacks this group occasionally suffe=
rs.
> The TrollFilter is a set of filter rules for Nfilter (NewsProxy) that remo=
ve
> the vast majority of such posts. TrollFilter also includes a few rules
> intended to drop spam posts -- chief among them a rule that drops *every* =
post
> that originated at GoogleGroups (except those made by Charlie Self).
>
> This is not intended to disparage any other regulars of this group who may=

> happen to also be posting through GoogleGroups; it's just that Charlie is =
the
> only one I know about. If there are others, in addition to Charlie, whose
> posts from GoogleGroups should be allowed to come through, please post a r=
eply
> in this thread and/or email me at /alphageek/at/milmac/dot/com and I'll ma=
ke
> the appropriate changes to the filters.
>
> See my sig below for instructions on obtaining a copy of TrollFilter.
>
> --
> Regards,
> =A0 =A0 =A0 =A0 Doug Miller (alphageek-at-milmac-dot-com)
>
> Get a copy of my NEW AND IMPROVED TrollFilter for NewsProxy/Nfilter
> by sending email to autoresponder at filterinfo-at-milmac-dot-com
> You must use your REAL email address to get a response.
>
> Download Nfilter athttp://www.milmac.com/np-120.exe

LM

"Lee Michaels"

in reply to [email protected] (Doug Miller) on 13/04/2008 8:13 PM

13/04/2008 11:41 PM


"Doug Miller" <[email protected]> wrote

> As many of the old hands here know, I've been maintaining a "TrollFilter"
> for
> several years to deal with the troll attacks this group occasionally
> suffers.
> The TrollFilter is a set of filter rules for Nfilter (NewsProxy) that
> remove
> the vast majority of such posts. TrollFilter also includes a few rules
> intended to drop spam posts -- chief among them a rule that drops *every*
> post
> that originated at GoogleGroups (except those made by Charlie Self).
>
Will your nfilter filters work with outlook express?


sD

[email protected] (Doug Miller)

in reply to [email protected] (Doug Miller) on 13/04/2008 8:13 PM

14/04/2008 11:28 PM

In article <[email protected]>, "Lee Michaels" <[email protected]> wrote:

>Will your nfilter filters work with outlook express?

No -- they work with nfilter. Nfilter will work with Outlook Express, though.

--
Regards,
Doug Miller (alphageek at milmac dot com)

It's time to throw all their damned tea in the harbor again.

Wc

Wes

in reply to [email protected] (Doug Miller) on 13/04/2008 8:13 PM

26/04/2008 7:14 PM

"jd" <[email protected]> wrote:

>I'm just starting to build a set of rules to keep the spammers out. Does
>anyone ahve a list of subject or from terms that seems to be effective that
>they feel like sharing?
>
>thanks
>-James
>

kill googlegroups.
If you have a decent newsreader you can follow the thread
Message-ID: <[email protected]>

Wes
--
"Additionally as a security officer, I carry a gun to protect
government officials but my life isn't worth protecting at home
in their eyes." Dick Anthony Heller

LH

"Lew Hodgett"

in reply to [email protected] (Doug Miller) on 13/04/2008 8:13 PM

14/04/2008 3:17 AM


"dale martin" wrote:
> I'm not
very tech-savvy so I use Google groups to read and post to this
newsgroup. If there's an easy way to use another reader then please
enlighten me.

If your ISP provides newsgroups, you can use either Outlook Express or
Thunderbird.

It will allow you to create filters.

Lew

sD

[email protected] (Doug Miller)

in reply to [email protected] (Doug Miller) on 13/04/2008 8:13 PM

14/04/2008 11:37 PM

In article <[email protected]>, Gerald Ross <[email protected]> wrote:
>Doug Miller wrote:

>> See my sig below for instructions on obtaining a copy of TrollFilter.
>
>I've tried twice and so far have not gotten any reply. Tried the last
>time you updated and no reply then either. This is not my real address
>on the newsgroup, BTW, but the email to the autoresponder was from my
>real address.

Your request did get through, and I assume the autoresponder replied (it
worked for me, when I tested a few minutes ago). Check your junk-mail filters;
they're probably deleting the response. It's titled "Automatic response to
your mail". I can't help that -- that's what my ISP puts on there, and I can't
change it.

--
Regards,
Doug Miller (alphageek at milmac dot com)

It's time to throw all their damned tea in the harbor again.

jl

"jd"

in reply to [email protected] (Doug Miller) on 13/04/2008 8:13 PM

15/04/2008 12:18 PM

I'm just starting to build a set of rules to keep the spammers out. Does
anyone ahve a list of subject or from terms that seems to be effective that
they feel like sharing?

thanks
-James

SI

Smaug Ichorfang

in reply to [email protected] (Doug Miller) on 13/04/2008 8:13 PM

27/04/2008 3:33 PM


> "jd" <[email protected]> wrote:
>
>>I'm just starting to build a set of rules to keep the spammers out.
>>Does anyone ahve a list of subject or from terms that seems to be
>>effective that they feel like sharing?
>>

I use Xnews. It has a configuration file called score.ini - a "plain
text" file that can be edited using a simple editor like notepad. Here
is the relevant portion of my score.ini file:

[rec.woodworking]
Score::-9999
From: sneakers
Subject: kike|nigger|spick|chink|faggots|cock|gook
Subject: penis|cum|fuck|wetback|jew
Subject: Global|Warming
Subject:global|warming
Subject:mesos| bollywood
Subject:ISLAM
Subject:Neocons
Subject: WTC
Subject:nike|jordan|sneakers
Subject: sneaker
Subject: paypal
Subject:cmsg
Subject: MI5
Subject: Dickheads
Subject: Huckabee
Subject: handbag
Subject: prada|adidas|dior
Subjext: fluege
Subject: flug
Subject: london
Subject: Muhammad
Subject: Muslims
Subject: wholesale
Subject: watch|watches
Subject: suisse
Subject: cialis
Subject: viagra
Subject: levitra
Subject: propecia
Subject: gucci
Subject: meridia|phentermine
Subject: boobs
Subject: thailand
Subject: meos
From: watchec.com

Since spammers have a wide variety of subjects and products they push,
this is a work in progress. The file is easy to update though.

BH

Brian Henderson

in reply to [email protected] (Doug Miller) on 13/04/2008 8:13 PM

16/04/2008 7:31 AM

Dave Balderstone wrote:
> Kill anything from Google Groups, any poster with gmail.com in their
> address, anything cross-posted to four or more newsgroups, and anything
> cross-posted to a group with "advocacy" in its name and you'll
> eliminate 98% of the spam, bullshit and garbage on usenet.

Not just that, but any of the Chinese yahoo addresses as well. There's
a ton that come from there as well.

> The only exception I'm making to the above is to exclude Charlie Self
> from the Google Groups filter, but he's the only one.

Same here. Otherwise, the entire Google/yahoo.cn is just gone.

--
Blog Me! http://BitchSpot.JadeDragonOnline.com

Di

"Dave in Houston"

in reply to [email protected] (Doug Miller) on 13/04/2008 8:13 PM

15/04/2008 11:39 PM


"tom" <[email protected]> wrote in message
news:[email protected]...
>> "jd" <[email protected]> wrote in
>> news:[email protected]:
>>
>> > I'm just starting to build a set of rules to keep the spammers out.
>> > Does anyone ahve a list of subject or from terms that seems to be
>> > effective that they feel like sharing?

The spammers will provide you the list. I modify my list everytime one
slips through. One got through today; it was foreign language.

Dave in Houston

GR

Gerald Ross

in reply to [email protected] (Doug Miller) on 13/04/2008 8:13 PM

14/04/2008 3:07 AM

Doug Miller wrote:
> As many of the old hands here know, I've been maintaining a "TrollFilter" for
> several years to deal with the troll attacks this group occasionally suffers.
> The TrollFilter is a set of filter rules for Nfilter (NewsProxy) that remove
> the vast majority of such posts. TrollFilter also includes a few rules
> intended to drop spam posts -- chief among them a rule that drops *every* post
> that originated at GoogleGroups (except those made by Charlie Self).
>
> This is not intended to disparage any other regulars of this group who may
> happen to also be posting through GoogleGroups; it's just that Charlie is the
> only one I know about. If there are others, in addition to Charlie, whose
> posts from GoogleGroups should be allowed to come through, please post a reply
> in this thread and/or email me at /alphageek/at/milmac/dot/com and I'll make
> the appropriate changes to the filters.
>
> See my sig below for instructions on obtaining a copy of TrollFilter.
>

I've tried twice and so far have not gotten any reply. Tried the last
time you updated and no reply then either. This is not my real address
on the newsgroup, BTW, but the email to the autoresponder was from my
real address.


--
Gerald Ross
Cochran, GA

Let a fool hold his tongue and he will
pass for a sage.



BA

B A R R Y

in reply to [email protected] (Doug Miller) on 13/04/2008 8:13 PM

13/04/2008 6:52 PM

On Sun, 13 Apr 2008 20:13:46 GMT, [email protected] (Doug Miller)
wrote:


Where ya' been?

It seems like you haven't been here much lately.

---------------------------------------------
** http://www.bburke.com/woodworking.html **
---------------------------------------------

PH

Phil H

in reply to [email protected] (Doug Miller) on 13/04/2008 8:13 PM

16/04/2008 1:37 PM


>In article <[email protected]>, Gerald Ross <[email protected]> wrote:
>>Doug Miller wrote:
>
>>> See my sig below for instructions on obtaining a copy of TrollFilter.

>Your request did get through, and I assume the autoresponder replied (it
>worked for me, when I tested a few minutes ago). Check your junk-mail filters;
>they're probably deleting the response. It's titled "Automatic response to
>your mail". I can't help that -- that's what my ISP puts on there, and I can't
>change it.

Thats what has happened to my request. Will try again and keep an eye
on the junk mail.

******

Phil

** Posted from http://www.teranews.com **


You’ve reached the end of replies