MD

"Mike Dembroge"

15/05/2006 10:20 PM

Semi OT: NFilter question

In an attempt to filter out the latest batch of spams, I am trying to
configure nFilter to drop everything from telecom.net.ar. I've added the
following line to the nfilter.dat file and restarted several times:
rec.woodworking drop NNTP-Posting-Host:*telecom.net.ar*

It's not working. Anyone see why not?

TIA,

Mike Dembroge


This topic has 13 replies

Ss

Steve

in reply to "Mike Dembroge" on 15/05/2006 10:20 PM

15/05/2006 4:28 PM

Mike Dembroge wrote:
> In an attempt to filter out the latest batch of spams, I am trying to
> configure nFilter to drop everything from telecom.net.ar. I've added the
> following line to the nfilter.dat file and restarted several times:
> rec.woodworking drop NNTP-Posting-Host:*telecom.net.ar*
>
> It's not working. Anyone see why not?
>
> TIA,
>
> Mike Dembroge
>
>
How do I filter this crap with Mozilla Thunderbird?

--Steve

CF

Chris Friesen

in reply to "Mike Dembroge" on 15/05/2006 10:20 PM

15/05/2006 6:37 PM

Chris Friesen wrote:

> Should be able to do tools/"message filters"/new, then add a filter for
> a custom field called "NNTP-Posting-Host".

Crap. It appears that thunderbird can't do custom fields for newsgroups.

Chris

CF

Chris Friesen

in reply to "Mike Dembroge" on 15/05/2006 10:20 PM

15/05/2006 6:27 PM

Steve wrote:
> Mike Dembroge wrote:


>> NNTP-Posting-Host:*telecom.net.ar*

> How do I filter this crap with Mozilla Thunderbird?

Should be able to do tools/"message filters"/new, then add a filter for
a custom field called "NNTP-Posting-Host".

Chris

Ww

WD

in reply to "Mike Dembroge" on 15/05/2006 10:20 PM

16/05/2006 12:18 AM

On Mon, 15 May 2006 22:20:24 GMT, "Mike Dembroge"
<[email protected]> wrote:

>In an attempt to filter out the latest batch of spams, I am trying to
>configure nFilter to drop everything from telecom.net.ar. I've added the
>following line to the nfilter.dat file and restarted several times:
> rec.woodworking drop NNTP-Posting-Host:*telecom.net.ar*
>
>It's not working. Anyone see why not?
>
>TIA,
>
>Mike Dembroge

Your bet is to FORCE his ISP to take legal action!
>

Ww

WD

in reply to "Mike Dembroge" on 15/05/2006 10:20 PM

16/05/2006 12:22 AM

On Mon, 15 May 2006 22:27:05 GMT, "Mortimer Schnerd, RN"
<[email protected]> wrote:

>Mike Dembroge wrote:
>> In an attempt to filter out the latest batch of spams, I am trying to
>> configure nFilter to drop everything from telecom.net.ar. I've added the
>> following line to the nfilter.dat file and restarted several times:
>> rec.woodworking drop NNTP-Posting-Host:*telecom.net.ar*
>>
>> It's not working. Anyone see why not?
>
>Here's what I tried just now:
>
>* drop NNTP-Posting-Host: host111.201-252-10.telecom.net.ar
>
>I figure I never want to hear from Argentina anyway... So far, so good but it's
>still early.

He's also posting from:

Organization: Posted via Supernews, http://www.supernews.com
User-Agent: Thoth/1.7.2 (Carbon/OS X)
NNTP-Posting-Host: 85.185.225.70
X-Original-NNTP-Posting-Host: 85.185.225.70

OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam

IL

"I Love Lucy"

in reply to "Mike Dembroge" on 15/05/2006 10:20 PM

16/05/2006 12:33 PM


"Mike Dembroge" <[email protected]> wrote in message
news:[email protected]...
> In an attempt to filter out the latest batch of spams, I am trying to
> configure nFilter to drop everything from telecom.net.ar. I've added
> the following line to the nfilter.dat file and restarted several
> times:
> rec.woodworking drop
> NNTP-Posting-Host:*telecom.net.ar*
>
> It's not working. Anyone see why not?

to get rid of most of the crap. Just highlight the first insane thread,
hold down the shift key, highlight the last thread, do an edit>delete
(or ctrl d - but wasn't sure that was working).

You can go down a couple screenfuls that way pretty fast. Just be
careful not to delete a good message sandwiched in between the garbage.

Now I see they have published what is purported to be Dave's personal
info. I don't think they have taken effect now, but there are internet
harassment laws. This would be considered harassment. Report it to
your local police. They prob won't do anything, especially if the
turdheads are in a foreign country, but sooner or later there will be
more protection for people against these morons.

It's a New Zealand website, but it talks about legislative trends:

http://72.14.203.104/search?q=cache:oms_62XfeAEJ:www.netsafe.org.nz/Doc_Library/netsafepapers_davidharvey_cyberstalking.pdf+internet+harassment&hl=en&gl=us&ct=clnk&cd=2

http://crime.about.com/od/online/a/web_harass.htm

There's another interesting one, can't remember the case, but don't want
to repeat the details of it here.

This also falls under the purview of the FBI if you live in the US.

Something to think about.
>
> TIA,
>
> Mike Dembroge
>

MS

"Mortimer Schnerd, RN"

in reply to "Mike Dembroge" on 15/05/2006 10:20 PM

16/05/2006 3:44 AM

George Max wrote:
> I've got NewsProxy running and it says it's listening on port 119.
> After starting that, I then started Agent and downloaded the new
> message headers. Yet the crap from the clueless moron with the vile
> headers (nigaboo and such) still came through.
>
> I have to assume something isn't working right. What do I have to do
> to fix this?

You've got NewsProxy running... but did you also download Doug's filter file and
overwrite the version that comes packed with NewsProxy? The file name is
nfilter.dat.

If you haven't already done this yet, open NewProxy and go to Edit >
Configuration > Network. Make sure your newserver is in there. In Agent,
wherever you put the news server name, replace it with "localhost".

Now that ought to clean up much of the crap. Starting today, some of it is
starting to filter through anyway as the spammer changes tactics. But that
works both ways. Give it a little time. He's going to get bored and go away.
They always do....



--
Mortimer Schnerd, RN

[email protected]


ER

Enoch Root

in reply to "Mike Dembroge" on 15/05/2006 10:20 PM

16/05/2006 2:45 AM

On 2006-05-15, Steve <[email protected]> ranted thusly:

> How do I filter this crap with Mozilla Thunderbird?

Near's I could tell, you can't. I switched to slrn. I live in console
heaven. Why I didn't do this before (bold characters, mucho syntax
colorization) I don't know.

er
--
email not valid

DM

Doug Miller

in reply to "Mike Dembroge" on 15/05/2006 10:20 PM

15/05/2006 11:17 PM

In article <[email protected]>,
[email protected] says...
> In an attempt to filter out the latest batch of spams, I am trying to
> configure nFilter to drop everything from telecom.net.ar. I've added the
> following line to the nfilter.dat file and restarted several times:
> rec.woodworking drop NNTP-Posting-Host:*telecom.net.ar*
>
> It's not working. Anyone see why not?

This is news server dependent. Nfilter filters only on the fields that
the news server provides in its "overview database". Some servers
provide NNTP-Posting-Host in their overview database, and some don't.
You apparently are unlucky enough to have a news server that doesn't.

To confirm, do this:

At a DOS prompt, type
TELNET name-or-IP-address-of-your-news-server 119

You should see a banner beginning with "200", and possibly a command
prompt.

Type
authinfo user your-user-name

Response should look like
381 More Authentication Required

Type
authinfo pass your-password

Response should look like
281 Authentication Accepted

Type
list overview.fmt

Response should look like
215 Order of fields in overview database.
Subject:
From:
Date:
etc.

If you see NNTP-Posting-Host: or Path: then you can filter this twit. If
you don't, you can't.

MS

"Mortimer Schnerd, RN"

in reply to "Mike Dembroge" on 15/05/2006 10:20 PM

15/05/2006 10:27 PM

Mike Dembroge wrote:
> In an attempt to filter out the latest batch of spams, I am trying to
> configure nFilter to drop everything from telecom.net.ar. I've added the
> following line to the nfilter.dat file and restarted several times:
> rec.woodworking drop NNTP-Posting-Host:*telecom.net.ar*
>
> It's not working. Anyone see why not?

Here's what I tried just now:

* drop NNTP-Posting-Host: host111.201-252-10.telecom.net.ar

I figure I never want to hear from Argentina anyway... So far, so good but it's
still early.



--
Mortimer Schnerd, RN

[email protected]

MD

"Mike Dembroge"

in reply to "Mike Dembroge" on 15/05/2006 10:20 PM

16/05/2006 4:58 AM

> This is news server dependent. Nfilter filters only on the fields that
> the news server provides in its "overview database". Some servers
> provide NNTP-Posting-Host in their overview database, and some don't.
> You apparently are unlucky enough to have a news server that doesn't.
Thanks Doug. I just tried it and my news server does not db this particular
field which explains why all these are getting through. I'll have to find
another approach.

Thanks again,

Mike

GM

George Max

in reply to "Mike Dembroge" on 15/05/2006 10:20 PM

16/05/2006 8:08 AM

On Tue, 16 May 2006 03:44:39 GMT, "Mortimer Schnerd, RN"
<[email protected]> wrote:

>George Max wrote:
>> I've got NewsProxy running and it says it's listening on port 119.
>> After starting that, I then started Agent and downloaded the new
>> message headers. Yet the crap from the clueless moron with the vile
>> headers (nigaboo and such) still came through.
>>
>> I have to assume something isn't working right. What do I have to do
>> to fix this?
>
>You've got NewsProxy running... but did you also download Doug's filter file and
>overwrite the version that comes packed with NewsProxy? The file name is
>nfilter.dat.
>
>If you haven't already done this yet, open NewProxy and go to Edit >
>Configuration > Network. Make sure your newserver is in there. In Agent,
>wherever you put the news server name, replace it with "localhost".
>

This is probably the problem. I found that about 2 minutes after
posting my question.

>Now that ought to clean up much of the crap. Starting today, some of it is
>starting to filter through anyway as the spammer changes tactics. But that
>works both ways. Give it a little time. He's going to get bored and go away.
>They always do....

GM

George Max

in reply to "Mike Dembroge" on 15/05/2006 10:20 PM

16/05/2006 2:25 AM

On Mon, 15 May 2006 22:20:24 GMT, "Mike Dembroge"
<[email protected]> wrote:

>In an attempt to filter out the latest batch of spams, I am trying to
>configure nFilter to drop everything from telecom.net.ar. I've added the
>following line to the nfilter.dat file and restarted several times:
> rec.woodworking drop NNTP-Posting-Host:*telecom.net.ar*
>
>It's not working. Anyone see why not?
>
>TIA,
>
>Mike Dembroge
>

Got a problem.

I know that this ain't a woodworking thread, and I'm sorry for that, I
need help making nFilter work with my copy of Agent.

I use Agent v1.93 and I connect to the Internet via a cable modem
(Time Warner) and Roadrunner.

I've got NewsProxy running and it says it's listening on port 119.
After starting that, I then started Agent and downloaded the new
message headers. Yet the crap from the clueless moron with the vile
headers (nigaboo and such) still came through.

I have to assume something isn't working right. What do I have to do
to fix this?


You’ve reached the end of replies