Ready made Spam filter

[Jon Lawrance]

Does anyone have a ready made spam filter they could share? Are they
importable?

For a start, I would like to filter out all that foreign character
rubbish that I cannot read...and there are a million other messages I
want to avoid.

I have already set up an address book called Spam and then a filter to
avoid those addresses in future. But I think I need another to get rid
of the obvious junk.

Can anyone help?

-- 
Best regards,
 Jon  mailto:[EMAIL PROTECTED]



Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]

Re: Ready made Spam filter

[Marcus Ohlström]

On Thursday, April 4, 2002, 09:43, Jon Lawrance wrote:

> Does anyone have a ready made spam filter they could share? Are they
> importable?

All filter are easily importable and exportable through the sorting
office copy/paste capabilities. To export a filter, mark it and hit
ctrl-c then paste it in a text editor. To import another filter, for
example my spam filters submitted below, copy all text and paste them
into the sorting office.

> I have already set up an address book called Spam and then a filter
> to avoid those addresses in future. But I think I need another to
> get rid of the obvious junk.

I use three filters, one that filter on certain words like teen, porn
and so forth, another to filter on certain patterns (4 spaces in a row
in the subject line or 4 digits in a row in either the subject och the
senders address) and a third, placed above the two others, to stop TB
from filtering messages with certain words. The first two filters does
not filter messages from addresses in my address book.

I do not argue that these filters are perfect, but they does suite my
needs, they pick about 95% of all the spam I get. Unfortunately, they
do filter about one message a month which should not get filtered. I
suppose that's hard to avoid :-(

This filter will however not work if you keep your address book with
addresses to avoid, since they never take actions on mails from known
senders.

Before you copy/paste the filters below, make sure to edit the folders
to suite your setup. Place them in the same order that I have done in
this mail.


BeginFilter
Name: Spam stopper
Active: 1
Source: \\marcus\Inbox
Target: \\marcus\Inbox
CopyFolder: none
MainSet: 50bluewastebin|srn|technew|dell
Actions: 
AddGroups: 
DelGroups: 
ForwardTemplate: 
ConfirmTemplate: 
ReplyTemplate: 
FwdAddr: 
RedirectAddr: 
NewAddr: 
NewTemplate: 
ExtCmd: 
ExtFile: 
ExtractDir: 
ColourGroup: 
AddAddrItems: afiFrom,
DelAddrItems: afiFrom,
HotKey: 0
IsOfColour: 
SizeBigger: 0
SizeSmaller: 0
AgeOlder: 0
AgeNewer: 0
InAddrPos: 0
OutAddrPos: 0
InAddrGroups: 
NoAddrGroups: 
KillFile: 
KillMethod: 0
SaveTemplate: 
SndFile: 
SysSound: 0
SoundTime: 0:00-0:00
AllowTime: 0:00-0:00
EndFilter


BeginFilter
Name: Spam
Active: 1
Source: \\marcus\Inbox
Target: \\marcus\Inbox\Spam
CopyFolder: none
MainSet: 
50teen|girls|celebrity|nude|naked|adult|porn|xxx|gangbang|cum|hardcore|fuck|[over 
18]|[at least 
18]|horny|sluts|britney|spears|viagra|pharmac|medication|xenical|pills|prescription|snoring|money|$$|credit|mortage|mortgage|debt|investment|business|marketing|[special
 offer]|discount|insurance|lottery|[unsolicited 
email]|spam|congratulations|adventure|hollywood|cannes|[green card]
Actions: faMarkRead,faoAdvAddressOut
AddGroups: 
DelGroups: 
ForwardTemplate: 
ConfirmTemplate: 
ReplyTemplate: 
FwdAddr: 
RedirectAddr: 
NewAddr: 
NewTemplate: 
ExtCmd: 
ExtFile: 
ExtractDir: 
ColourGroup: 
AddAddrItems: afiFrom,
DelAddrItems: afiFrom,
HotKey: 0
IsOfColour: 
SizeBigger: 0
SizeSmaller: 0
AgeOlder: 0
AgeNewer: 0
InAddrPos: 0
OutAddrPos: 0
InAddrGroups: 
NoAddrGroups: 
KillFile: 
KillMethod: 0
SaveTemplate: 
SndFile: 
SysSound: 0
SoundTime: 0:00-0:00
AllowTime: 0:00-0:00
EndFilter


BeginFilter
Name: Spam 2
Active: 1
Source: \\marcus\Inbox
Target: \\marcus\Inbox\Spam
CopyFolder: none
MainSet: 20\s\s\s\s
AltSet:1: 20\d\d\d\d
AltSet:2: 00\d\d\d\d
Actions: faMarkRead,faoRegExp,faoAdvAddressOut
AddGroups: 
DelGroups: 
ForwardTemplate: 
ConfirmTemplate: 
ReplyTemplate: 
FwdAddr: 
RedirectAddr: 
NewAddr: 
NewTemplate: 
ExtCmd: 
ExtFile: 
ExtractDir: 
ColourGroup: 
AddAddrItems: afiFrom,
DelAddrItems: afiFrom,
HotKey: 0
IsOfColour: 
SizeBigger: 0
SizeSmaller: 0
AgeOlder: 0
AgeNewer: 0
InAddrPos: 0
OutAddrPos: 0
InAddrGroups: 
NoAddrGroups: 
KillFile: 
KillMethod: 0
SaveTemplate: 
SndFile: 
SysSound: 0
SoundTime: 0:00-0:00
AllowTime: 0:00-0:00
EndFilter


-- 
Regards,
Marcus Ohlström

Using The Bat! v1.60c on Windows 2000 5.0 Build 2195 Service Pack 2
PGP Public Key at http://www.canit.se/~marcus/pgp.txt



Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]

Re: Ready made Spam filter

[Allie C Martin]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

@ 10:53:14 +0200 [ Thu, 4 Apr 2002], Marcus Ohlström [MO] wrote these
words of wisdom:
...
MO> I use three filters, one that filter on certain words like teen,
MO> porn and so forth, another to filter on certain patterns (4 spaces
MO> in a row in the subject line or 4 digits in a row in either the
MO> subject och the senders address) and a third, placed above the two
MO> others, to stop TB from filtering messages with certain words. The
MO> first two filters does not filter messages from addresses in my
MO> address book.

It's *much* easier to filter mail that you expect, rather than to
filter mail that you don't expect. If you are going to do things your
way, then it's best to just purchase an application like Spamkiller
, where the developer makes a living
creating these sorts of filters to catch spam mail, and even then, it
tends to catch a lot of my good mail. I stopped using it, refined my
exclusion approach to spam filtering (if it's not a message directly
for me, then it's spam) and it now works better than 'spamkiller'.
Note that Spamkiller uses about 1500 filter rules and you have to
update it periodically.

Create filters for all mail that you expect, i.e., discussion list
mail, newsletter mails and announcements, mail from your friends and
family and finally mail from your address book addresses.

You can also create an address book group and a filter to place in
your address book, addresses for mail in your Inbox, that you replied
to.

The final filter in the list will be a filter that places all messages
not caught by the previous filter into your spam folder. With time,
the few messages from legitimate sources that reach your spam folder
will diminish as you create filters for them either directly, or when
you reply to them and their addresses are added to your special
address book group.

This is much easier than going through spam each day and trying to
figure out how to filter the new ones that found their way in your
Inbox. I haven't seen a spam in my Inbox for three weeks, since I
stopped using SpamKiller and refined my filtering.

- --
Allie C Martin  (List Moderator and fellow end user)
PGP Public Key - mailto:[EMAIL PROTECTED]

®TB! v1.60c on Windows XP 5.1.2600
_
-BEGIN PGP SIGNATURE-

iEYEARECAAYFAjysO5wACgkQV8nrYCsHF+LUpQCg31jCmOla5Q0zp1MlMnrobUkz
zkEAoNLjvHXLlA/4WxDjUeemmU0lzYj6
=XnQd
-END PGP SIGNATURE-




Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]

Re: Ready made Spam filter

[tracer]

Hello Allie C Martin,
On Thu, 4 Apr 2002 06:40:11 -0500 GMT your local time,
which was Thursday, April 4, 2002, 6:40:11 PM (GMT+0700) my local time,




Allie C Martin wrote:


> @ 10:53:14 +0200 [ Thu, 4 Apr 2002], Marcus Ohlström [MO] wrote these
> words of wisdom:
> ...
MO>> I use three filters, one that filter on certain words like teen,
MO>> porn and so forth, another to filter on certain patterns (4 spaces
MO>> in a row in the subject line or 4 digits in a row in either the
MO>> subject och the senders address) and a third, placed above the two
MO>> others, to stop TB from filtering messages with certain words. The
MO>> first two filters does not filter messages from addresses in my
MO>> address book.

> It's *much* easier to filter mail that you expect, rather than to
> filter mail that you don't expect.

Not quite true as most spammers use certain things in their headers
which betray its spam.
Filtering on subject is useless, check 'send to', send from and
similar things and you will see lots of ways to get rid of 95% of all
spam.
Obviously one should first remove any mailing lists and other stuff
one knows but hitting spam is easy.

> If you are going to do things your
> way, then it's best to just purchase an application like Spamkiller
> , where the developer makes a living
> creating these sorts of filters to catch spam mail, and even then, it
> tends to catch a lot of my good mail. I stopped using it, refined my
> exclusion approach to spam filtering (if it's not a message directly
> for me, then it's spam) and it now works better than 'spamkiller'.
> Note that Spamkiller uses about 1500 filter rules and you have to
> update it periodically.

You donot need that many.
First grab the ones you are sure are yours and then tackle the spam.
Not to you is one way but others are the undisclosed recipients and
similar rubbish and anyway, you inspect by hand whats left, its really
not that difficult with 500 emails coming in per day to have maybe one
spamletter...



-- 

Best regards,
 
tracer

Using theBAT 1.60c 

mail to : [EMAIL PROTECTED]
C.C.S. Associates
FAX (USA): (208) 460-3753
pgp 6.5.3 : 0x909D9B10



Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]

Re: Ready made Spam filter

[Roman Katzer]

On Thursday, April 4, 2002, 15:31:32, Jon Lawrance wrote:
> What about all the foreign character rubbish I get?
> Anyone else get this type of spam and what method do you use to get rid of it?

I use the charset information to filter that stuff out. If there's something
like charset=big5 or charset=ks_c_5601-1987 in the headers, it gets kicked.
Use charset=.*ks_c_5601-1987 and check Regular expressions to also filter
out mails that say charset="ks_c_5601-1987" or the like.

Roman


-- 
Roman Katzer, Aachen, Germany

I want nothing to do with natural foods. At my age, I need all the
preservatives I can get!  -- George Burns



Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]

Re: Ready made Spam filter

[Daniel Grunberg]

on Thursday, April 4, 2002, 8:31:32 AM, you wrote:

> What about all the foreign character rubbish I get?

> For example, I have several with subject lines as follows:

> [±¤°í]ÁÖ½ÄÅõÀÚÀÚ ½Ç½Ã°£ ÁÖ°¡¿¹ÃøÇÁ·Î±×·¥ ź»ý !!

> Each is slightly different but they are all unreadable.

> Anyone else get this type of spam and what method do you use to get rid of it?

I found this method on TBUDL.  Unfortunately I don't know who posted
it, so I can't give proper credit for it.

1.  Copy the subject line of one of the foreign character emails.

2. For convenience, open a new message and paste the subject of step 1
into the text of the new message.  All operations performed below will
be performed in the message's text field.

3. Delete any characters in the subject that might conceivably be part
of the subject of a message you might want to read.  (Perhaps,
particularly if you're British, you might not want to filter out
messages with £ in the subject, perhaps you would.)

4. Delete all but one occurrence of each character that is duplicated.
(There are two À , delete one of them.)

5. Separate the adjacent remaining characters with pipe signs ( | ).
No pipe sign at the start or end of the string, however.  (Thus
operating on all of the remaining characters, with an inclusive OR.)

6. Copy the pipe-sign separated string into your "foreign character
rubbish" filter, with Llocation: Subject, Presence: Yes.

If any message should get through the filter, work on that message's
subject string in the same way.  If you're particularly fussy, as I
am, perhaps you'd like to eliminate any characters already present in
your filter. Add the new pipe-sign-separated string to your "foreign
character rubbish" filter, with location: Subject, Presence: yes.  (I
now have three such strings in my filter.)



Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]

Re: Ready made Spam filter

[Allie C Martin]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

@ 21:23:28 +0700 [ Thu, 4 Apr 2002], Tracer [T] thoughtfully wrote the
following:
...
T> Not quite true as most spammers use certain things in their headers
T> which betray its spam.

Sure. I'm saying that it's more difficult to keep your Inbox free of
spam by filtering the spam itself. I'm not saying that you cannot
filter spam. You can. If you do, you'll spend too much time on it.

>> If you are going to do things your way, then it's best to just
>> purchase an application like Spamkiller
>> , where the developer makes a living
>> creating these sorts of filters to catch spam mail, and even then,
>> it tends to catch a lot of my good mail. I stopped using it,
>> refined my exclusion approach to spam filtering (if it's not a
>> message directly for me, then it's spam) and it now works better
>> than 'spamkiller'. Note that Spamkiller uses about 1500 filter
>> rules and you have to update it periodically.

T> You donot need that many.

It was quite effective but was catching too much of my good mail

T> First grab the ones you are sure are yours and then tackle the
T> spam.

You will not need to tackle the spam once you grab what's yours.
If you effectively grab what's not yours, which you easily can, the
rest is spam.

T> Not to you is one way but others are the undisclosed recipients and
T> similar rubbish and anyway, you inspect by hand whats left, its
T> really not that difficult with 500 emails coming in per day to have
T> maybe one spamletter...

Not at all.

- --
Allie C Martin - (List Moderator)
PGP Public Key - mailto:[EMAIL PROTECTED]

®TB! v1.60c on Windows XP 5.1.2600]
_
-BEGIN PGP SIGNATURE-

iEYEARECAAYFAjysvvIACgkQV8nrYCsHF+IghgCfW2QF+VRKc6yJhfOq/x8iF6Lk
fRQAnAo035URqbzDP/kf2p1nMTGvmF7Z
=mzQ1
-END PGP SIGNATURE-




Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]

Re: Ready made Spam filter

[Marck D Pearlstone]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi Jody,

@05 April 2002, 19:50:05 -0600 (02:50 UK time) Jody Watts wrote in
[EMAIL PROTECTED]">mid:[EMAIL PROTECTED]

MO>> Before you copy/paste the filters below, make sure to edit the
MO>> folders to suite your setup. Place them in the same order that I
MO>> have done in this mail.

> Where (what file) do I paste the attached filters into?

You don't. You paste them into the sorting office UI.

> Also ... how do you add spaces to the set in a filter list. If i use
> the space bar (or the ALT number), the filter won't save it. If I
> could filter say 5 contiguous spaces in the subject, I would get rif
> of 90% or more of the spam that DOES make it through.

Turn on "Regular expressions" and use /s/s/s/s/s (five contiguous
spaces).

- --
Cheers -- .\\arck D. Pearlstone -- List moderator
TB! v1.60c-14F4B4B2 on Windows 2000 5.0.2195 Service Pack 2
·
-BEGIN PGP SIGNATURE-

iD8DBQE8rVsfOeQkq5KdzaARAkuxAKCGcuYJkU08iYPE0ic7RiJ5CicV3wCdHfx+
IW1r3EMlIgWMg+K32UjRQ/U=
=BeIu
-END PGP SIGNATURE-




Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]

Re: Ready made Spam filter

[Peter Palmreuther]

Hello Marck,

On Friday, April 5, 2002 at 10:06:54 AM you wrote in
[EMAIL PROTECTED]">mid:[EMAIL PROTECTED] (at least in part):

MDP> Turn on "Regular expressions" and use /s/s/s/s/s (five contiguous
MDP> spaces).

Or use it's shorter and more readable format:

\s{5}

with the additional correction of using '\' instead of '/' :-)))
-- 
Regards
Peter Palmreuthermailto:[EMAIL PROTECTED]
(The Bat! v1.60c on Windows 2000 5.0 Build 2195 Service Pack 2)

Will I be saved/Will I be saved/Dream on he says/Dream on he says



Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]

Re: Ready made Spam filter

[Marck D Pearlstone]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi Peter,

@05 April 2002, 10:15:34 +0200 (09:15 UK time) Peter Palmreuther wrote
in [EMAIL PROTECTED]">mid:[EMAIL PROTECTED]

MDP>> Turn on "Regular expressions" and use /s/s/s/s/s (five
MDP>> contiguous spaces).

> Or use it's shorter and more readable format:

> \s{5}

Yes.

> with the additional correction of using '\' instead of '/' :-)))

D'oh! Too early for me!

- --
Cheers -- .\\arck D. Pearlstone -- List moderator
TB! v1.60c-14F4B4B2 on Windows 2000 5.0.2195 Service Pack 2
·
-BEGIN PGP SIGNATURE-

iD8DBQE8rV6bOeQkq5KdzaARAjQDAJ9mFamE+g4NP9v4k5zE0MbNHHwGkACgkEa+
6run8YKb3XbkzuRyJG6Z94c=
=f3y7
-END PGP SIGNATURE-




Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]

Re: Ready made Spam filter

[tracer]

Hello Roman Katzer,
On Thu, 4 Apr 2002 18:47:06 +0200 GMT your local time,
which was Thursday, April 4, 2002, 11:47:06 PM (GMT+0700) my local time,




Roman Katzer wrote:


> On Thursday, April 4, 2002, 15:31:32, Jon Lawrance wrote:
>> What about all the foreign character rubbish I get?
>> Anyone else get this type of spam and what method do you use to get rid of it?

> I use the charset information to filter that stuff out. If there's something
> like charset=big5 or charset=ks_c_5601-1987 in the headers, it gets kicked.
> Use charset=.*ks_c_5601-1987 and check Regular expressions to also filter
> out mails that say charset="ks_c_5601-1987" or the like.

Ok, which expressions do you have which work...
Allas my days of active math are over, I can read the damned things
but producing them
To me its a bit like if I show some of the formala's I used in the
past, probably nobody here would even see what it was about
I would know but wouldnt be able to reproduce them anymore after all
these years...(g)

> Roman




-- 

Best regards,
 
tracer

Using theBAT 1.60c 

mail to : [EMAIL PROTECTED]
C.C.S. Associates
FAX (USA): (208) 460-3753
pgp 6.5.3 : 0x909D9B10



Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]

Re: Ready made Spam filter

[tracer]

Hello Daniel Grunberg,
On Thu, 4 Apr 2002 15:45:35 -0500 GMT your local time,
which was Friday, April 5, 2002, 3:45:35 AM (GMT+0700) my local time,




Daniel Grunberg wrote:


> 1.  Copy the subject line of one of the foreign character emails.

filtering by subject in any language unless some idiot is insisting
will not be effective as general spam filter.


-- 

Best regards,
 
tracer

Using theBAT 1.60c 

mail to : [EMAIL PROTECTED]
C.C.S. Associates
FAX (USA): (208) 460-3753
pgp 6.5.3 : 0x909D9B10



Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]

Re: Ready made Spam filter

[tracer]

Hello Allie C Martin,
On Thu, 4 Apr 2002 16:00:32 -0500 GMT your local time,
which was Friday, April 5, 2002, 4:00:32 AM (GMT+0700) my local time,




Allie C Martin wrote:


> Sure. I'm saying that it's more difficult to keep your Inbox free of
> spam by filtering the spam itself. I'm not saying that you cannot
> filter spam. You can. If you do, you'll spend too much time on it.

I agree, thats what I do but
1. grab the known mail
2. grab the known mail lists
and then send the rest to a spam folder for a few days or as I did
copy the spam to it and check whats common.
NOT subjects, it doesnt work.
Its to, from and other stuff you may never see in the headers.
I had a few mailing lists change their system as it looked like
spam...


> It was quite effective but was catching too much of my good mail

Because your good mail shouldnt be there to be grabbed...
if you first send anything you DO want to its folders there isnt that
much left and as far as I ca see my current filters still zap about
95% of all spam...

T>> First grab the ones you are sure are yours and then tackle the
T>> spam.

> You will not need to tackle the spam once you grab what's yours.
> If you effectively grab what's not yours, which you easily can, the
> rest is spam.

Nope, there are those sending an email a month, I donot give them a
folder.
Silly enquiries are in the same category, they send mail one time/ 2
times and when its finished I dump them.

T>> Not to you is one way but others are the undisclosed recipients and
T>> similar rubbish and anyway, you inspect by hand whats left, its
T>> really not that difficult with 500 emails coming in per day to have
T>> maybe one spamletter...

> Not at all.

?? you agree or disagree ??




-- 

Best regards,
 
tracer

Using theBAT 1.60c 

mail to : [EMAIL PROTECTED]
C.C.S. Associates
FAX (USA): (208) 460-3753
pgp 6.5.3 : 0x909D9B10



Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]

Re: Ready made Spam filter

[Allie C Martin]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Fri, 5 Apr 2002 21:46:48 +0700, Tracer [T] graced us with these
comments:
...
>> It was quite effective but was catching too much of my good mail

T> Because your good mail shouldnt be there to be grabbed...

Right, though SpamKiller is designed to interact at the server level,
pretty much like the dispatcher in TB!, weed out what it believes to
be spam (deleting those messages from the server) and then polling
your e-mail client (if you configure it to do so) to download the rest
from the server.

T> if you first send anything you DO want to its folders there isnt that
T> much left and as far as I ca see my current filters still zap about
T> 95% of all spam...

Yes. Your method is the same as that which I currently use and
advocate (probably too much :-))) on the list.

>> You will not need to tackle the spam once you grab what's yours.
>> If you effectively grab what's not yours, which you easily can, the
>> rest is spam.

T> Nope, there are those sending an email a month, I donot give them a
T> folder. Silly enquiries are in the same category, they send mail
T> one time/ 2 times and when its finished I dump them.

You took me a little too literally there. I was making a statement in
principle, not on absolute terms. Anyway, it's OK. We agree with each
other. :-)

>> Not at all.

T> ?? you agree or disagree ??

I Agree.

- --
Allie C Martin - (List Moderator)
PGP Public Key - mailto:[EMAIL PROTECTED]

®TB! v1.60c on Windows XP 5.1.2600]
_
-BEGIN PGP SIGNATURE-

iEYEARECAAYFAjytyo8ACgkQV8nrYCsHF+IjNQCgzjGYbEsUQtva9FO5bFD8vge1
orMAoOOTCHb1vtv8FqxSvbmgavFKXNow
=MQRB
-END PGP SIGNATURE-




Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]

Re: Ready made Spam filter

[Roman Katzer]

On Friday, April 5, 2002, 16:39:27, tracer wrote:
> Ok, which expressions do you have which work...

So far: (irrelevant lines deleted)

BeginFilter
Name: Spam
Active: 1
Source: \\RoKa\Inbox
Target: \\RoKa\spam
CopyFolder: none
MainSet: 40charset=.*ks_c_5601-1987
AltSet:1: 40charset=.*euc-kr
AltSet:2: 40charset=.*big5
Actions: faMarkRead,faDelServer,faoRegExp,faSetColor
ColourGroup: mbspam
EndFilter

> Allas my days of active math are over, I can read the damned things
> but producing them

Just look into the headers. Mine will probably say us-ascii or iso-8859-1.
Some spam mail programs won't write a charset into the headers, though.

Roman


-- 
Roman Katzer, Aachen, Germany

He who joyfully marches to music in rank and file has already earned my
contempt.  He has been given a large brain by mistake, since for him the
spinal cord would fully suffice.  -- Albert Einstein



Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]

Re[2]: Ready made Spam filter

[Jon Lawrance]

Hello Marcus,

Thanks for those filters, I will almost certainly use them.

What about all the foreign character rubbish I get?

For example, I have several with subject lines as follows:

[±¤°í]ÁÖ½ÄÅõÀÚÀÚ ½Ç½Ã°£ ÁÖ°¡¿¹ÃøÇÁ·Î±×·¥ ź»ý !!

Each is slightly different but they are all unreadable.

Anyone else get this type of spam and what method do you use to get rid of it?

-- 
Best regards,
 Jon 

Thursday, April 4, 2002, 9:53:14 AM, you wrote:


MO> On Thursday, April 4, 2002, 09:43, Jon Lawrance wrote:

>> Does anyone have a ready made spam filter they could share? Are they
>> importable?

MO> All filter are easily importable and exportable through the sorting
MO> office copy/paste capabilities. To export a filter, mark it and hit
MO> ctrl-c then paste it in a text editor. To import another filter, for
MO> example my spam filters submitted below, copy all text and paste them
MO> into the sorting office.

>> I have already set up an address book called Spam and then a filter
>> to avoid those addresses in future. But I think I need another to
>> get rid of the obvious junk.

MO> I use three filters, one that filter on certain words like teen, porn
MO> and so forth, another to filter on certain patterns (4 spaces in a row
MO> in the subject line or 4 digits in a row in either the subject och the
MO> senders address) and a third, placed above the two others, to stop TB
MO> from filtering messages with certain words. The first two filters does
MO> not filter messages from addresses in my address book.

MO> I do not argue that these filters are perfect, but they does suite my
MO> needs, they pick about 95% of all the spam I get. Unfortunately, they
MO> do filter about one message a month which should not get filtered. I
MO> suppose that's hard to avoid :-(

MO> This filter will however not work if you keep your address book with
MO> addresses to avoid, since they never take actions on mails from known
MO> senders.

MO> Before you copy/paste the filters below, make sure to edit the folders
MO> to suite your setup. Place them in the same order that I have done in
MO> this mail.


MO> BeginFilter
MO> Name: Spam stopper
MO> Active: 1
MO> Source: \\marcus\Inbox
MO> Target: \\marcus\Inbox
MO> CopyFolder: none
MO> MainSet: 50bluewastebin|srn|technew|dell
MO> Actions: 
MO> AddGroups: 
MO> DelGroups: 
MO> ForwardTemplate: 
MO> ConfirmTemplate: 
MO> ReplyTemplate: 
MO> FwdAddr: 
MO> RedirectAddr: 
MO> NewAddr: 
MO> NewTemplate: 
MO> ExtCmd: 
MO> ExtFile: 
MO> ExtractDir: 
MO> ColourGroup: 
MO> AddAddrItems: afiFrom,
MO> DelAddrItems: afiFrom,
MO> HotKey: 0
MO> IsOfColour: 
MO> SizeBigger: 0
MO> SizeSmaller: 0
MO> AgeOlder: 0
MO> AgeNewer: 0
MO> InAddrPos: 0
MO> OutAddrPos: 0
MO> InAddrGroups: 
MO> NoAddrGroups: 
MO> KillFile: 
MO> KillMethod: 0
MO> SaveTemplate: 
MO> SndFile: 
MO> SysSound: 0
MO> SoundTime: 0:00-0:00
MO> AllowTime: 0:00-0:00
MO> EndFilter


MO> BeginFilter
MO> Name: Spam
MO> Active: 1
MO> Source: \\marcus\Inbox
MO> Target: \\marcus\Inbox\Spam
MO> CopyFolder: none
MO> MainSet: 
50teen|girls|celebrity|nude|naked|adult|porn|xxx|gangbang|cum|hardcore|fuck|[over 
18]|[at least
MO> 
18]|horny|sluts|britney|spears|viagra|pharmac|medication|xenical|pills|prescription|snoring|money|$$|credit|mortage|mortgage|debt|investment|business|marketing|[special
MO> offer]|discount|insurance|lottery|[unsolicited 
email]|spam|congratulations|adventure|hollywood|cannes|[green card]
MO> Actions: faMarkRead,faoAdvAddressOut
MO> AddGroups: 
MO> DelGroups: 
MO> ForwardTemplate: 
MO> ConfirmTemplate: 
MO> ReplyTemplate: 
MO> FwdAddr: 
MO> RedirectAddr: 
MO> NewAddr: 
MO> NewTemplate: 
MO> ExtCmd: 
MO> ExtFile: 
MO> ExtractDir: 
MO> ColourGroup: 
MO> AddAddrItems: afiFrom,
MO> DelAddrItems: afiFrom,
MO> HotKey: 0
MO> IsOfColour: 
MO> SizeBigger: 0
MO> SizeSmaller: 0
MO> AgeOlder: 0
MO> AgeNewer: 0
MO> InAddrPos: 0
MO> OutAddrPos: 0
MO> InAddrGroups: 
MO> NoAddrGroups: 
MO> KillFile: 
MO> KillMethod: 0
MO> SaveTemplate: 
MO> SndFile: 
MO> SysSound: 0
MO> SoundTime: 0:00-0:00
MO> AllowTime: 0:00-0:00
MO> EndFilter


MO> BeginFilter
MO> Name: Spam 2
MO> Active: 1
MO> Source: \\marcus\Inbox
MO> Target: \\marcus\Inbox\Spam
MO> CopyFolder: none
MO> MainSet: 20\s\s\s\s
MO> AltSet:1: 20\d\d\d\d
MO> AltSet:2: 00\d\d\d\d
MO> Actions: faMarkRead,faoRegExp,faoAdvAddressOut
MO> AddGroups: 
MO> DelGroups: 
MO> ForwardTemplate: 
MO> ConfirmTemplate: 
MO> ReplyTemplate: 
MO> FwdAddr: 
MO> RedirectAddr: 
MO> NewAddr: 
MO> NewTemplate: 
MO> ExtCmd: 
MO> ExtFile: 
MO> ExtractDir: 
MO> ColourGroup: 
MO> AddAddrItems: 

Re[2]: Ready made Spam filter

[Roberto Machorro]

The best results I've had with my spam filtering is to actually create
a folder per group or subject (clubs, relatives, work, e-news, etc.).
I have a folder for each mailing list, project, etc., if it doesn't
fall into any of those categories, filter it against your AddressBook,
then make sure you are the recipient.

Make it so directly targeted that all that's left is most probably
spam, as a side benefit you have a very organized e-mail repository.

Might be overkill for some, but at least I don't have to deal with
spam anymore, it's the best mail filter I've used.


Roberto



Thursday, April 4, 2002, 1:00:32 PM, you wrote:
ACM> -BEGIN PGP SIGNED MESSAGE-
ACM> Hash: SHA1

ACM> @ 21:23:28 +0700 [ Thu, 4 Apr 2002], Tracer [T] thoughtfully wrote the
ACM> following:
ACM> ...
T>> Not quite true as most spammers use certain things in their headers
T>> which betray its spam.

ACM> Sure. I'm saying that it's more difficult to keep your Inbox free of
ACM> spam by filtering the spam itself. I'm not saying that you cannot
ACM> filter spam. You can. If you do, you'll spend too much time on it.

-- 
Roberto Machorro
Email: [EMAIL PROTECTED]
Yahoo Messenger ID: roberto_machorro


_
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com



Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]

Re[2]: Ready made Spam filter

[Jody Watts]

E-Mail Message
~~
From: Marcus Ohlström
Date: Thursday, April 04, 2002 at 2:53 AM
Subject:  Ready made Spam filter
_

MO> Before you copy/paste the filters below, make sure to edit the folders
MO> to suite your setup. Place them in the same order that I have done in
MO> this mail.



_


I thought the filters weren't held in an editable file. Where (what
file) do I paste the attached filters into?

Also ... how do you add spaces to the set in a filter list. If i use
the space bar (or the ALT number), the filter won't save it. If I
could filter say 5 contiguous spaces in the subject, I would get rif of
90% or more of the spam that DOES make it through.

TIA




--  
Jody
The ULTIMATE security fix/patch for LookOut! and LookOut! Express ... 
The Bat! 1.60c ... Running on Windows XP 5.1 
--


Thought / Fact / Joke of the day 
The highest point in Pennsylvania is lower than the lowest point in Colorado.




Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]

Re[3]: Ready made Spam filter

[Marcus Ohlström]

On Friday, April 5, 2002, 03:50, Jody Watts wrote:

MO>> Before you copy/paste the filters below, make sure to edit the
MO>> folders to suite your setup. Place them in the same order that I
MO>> have done in this mail.

> I thought the filters weren't held in an editable file. Where (what
> file) do I paste the attached filters into?

As I wrote in the email you answered to, paste it into the sorting
office. Open the sorting office, expand Incoming mail and hit ctrl-v.

When viewing the filters I posted, I see that the line of words to
filter on in the filter called "Spam" has been divided over a number
of lines. Make sure to edit this to be just one line before you paste
it into the sorting office.

> Also ... how do you add spaces to the set in a filter list. If i use
> the space bar (or the ALT number), the filter won't save it. If I
> could filter say 5 contiguous spaces in the subject, I would get rif of
> 90% or more of the spam that DOES make it through.

Create a filter with regular expression activated and use '\s' in the
filtering string. That matches one white-space character. As you can
see in my "Spam 2"-filter I'm using '\s\s\s\s' which matches all mail
with four or more white-space characters in a row.

-- 
Regards,
Marcus Ohlström

Using The Bat! v1.60c on Windows 2000 5.0 Build 2195 Service Pack 2
PGP Public Key at http://www.canit.se/~marcus/pgp.txt



Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]

Re[2]: Ready made Spam filter

[Daniel Grunberg]

on Friday, April 5, 2002, 9:40:53 AM, tracer wrote:

> Hello Daniel Grunberg,

>> 1.  Copy the subject line of one of the foreign character emails.

> filtering by subject in any language unless some idiot is insisting
> will not be effective as general spam filter.


I am no idiot.

You quoted me out of context.  The question I quoted and then answered
specifically had to do with filtering foreign-fonted messages.



Current Ver: 1.60c
FAQ: http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]