OT: Filtering tip for current crop of spam hitting Usenet

WmB said the following on 21/05/2009 21:02:

They don't seem to be in the format From:"screen name " but From:"email address" but the Thunderbird message filter seems to mark all messages as read if you tell it to mark 'read' only those messages where the From: line is missing a chevron.

Reply to
Richard Brooks
Loading thread data ...

Just updated my message filters to spike ".com" listings.

Poof - gone. That might kill some legitimate posts down the road, but as the country gal singing (Sugarland?) on my radio this very moments says - "sh - it happens".

WM

Reply to
WmB

Richard Brooks wrote in news: snipped-for-privacy@brightview.co.uk:

I don't get the marketing strategy. Why post here if the number of us old geeks is so low? Why would they think we're remotely interested?

Bill Banaszak, MFE Sr.

Reply to
Mad-Modeller

Yep, on closer examination my fix didn't work. Had to manually block each message as the rule creation options are not robust enough to single out these particular msg parameters. Well, if history is any teacher this recent storm will blow over soon enough.

WmB

Reply to
WmB

It worked for me thanks using Outlook Express.

(kim)

Reply to
kim

on 5/21/2009 4:02 PM (ET) WmB wrote the following:

Jennifer Nettles? I haven't heard that one yet, unless it's in the lyrics. I'm a big fan of Sugarland. Well, Jennifer Nettles anyway. Great face, great hair, great body, great voice. Now I have to go to Youtube for a hormone jolt. :-)

Reply to
willshak

Did the .com filter kill Cookie Sewell's, and Peteski's posts as well?

Doug

Reply to
Doug Wagner

"kim" wrote in news:q- snipped-for-privacy@giganews.com:

You are at aol.com It will spike you as well.

cd

Reply to
Carl Dershem

It killed a bunch of people's posts. I forgot that listed under properties in the FROM parameter are the email addresses complete with all the .com's. net's etc. There's just not a lot of options in message rule filters. For instance if we could filter diplay names (and not just the FROM parameter), the .com filter would work.

My solution so far, where the spammer is using a unique addy each time with no common and unique keyword to lock on - is to read what I want to read, mark eveything else as read and close the reader. Reopen it and the spam posts are gone. Not pretty or clever, but good enough til some Usenet hero kills the spammer's connection.

WmB

Reply to
WmB

Nope, take another look - my suggestion kills good posts too. My bad. In OE, I would suggest setting the message rule to mark the targets with a different color rather than marking for deletion. If you do that you'll see some posts from some good eggs are getting painted along with the bad ones.

Sorry about that. I thought I had this spammer-creep neutered there for a second.

WmB

Reply to
WmB

Mad-Modeller wrote: : : I don't get the marketing strategy. Why post here if the number of us old : geeks is so low? Why would they think we're remotely interested? : What makes you think the aholes have any clue/concern about the content of the groups they spam?

Anyway, I find that filtering on any article that comes from a msg-id of "news.netmonster.com", "netmonster.com" or there was one other removed the spam quite nicely.

Don't bother with the "from" line, since that is clearly generated, and pointless.

And, unlike our very own group creepie, who I take great pleasure to report to his ISP, these aholes are doubtless posting from an ISP/news portal that could give a shit about "etiquette".

Bruce

Reply to
Bruce Burden

google up n filter, gents. take the 20 minutes to figure it out. ain't nobody here too dummm for it.

Reply to
someone

on 5/23/2009 7:13 AM (ET) WmB wrote the following:

Ah. I haven't been listening too much to the country music stations in the last few months. I put XM radio in my truck and have been mostly listening to Blue Collar Comedy and reminiscing on the 60s and 70s music channels. I found the video on You tube, tho.

formatting link

Reply to
willshak

It's off their last album that came out last year. Been all over the radio for the last couple of months. Officially it's called "It Happens" but she stutter steps the line with a little ssssh sound at the beginning.

WmB

Reply to
WmB

Can't be undone either :o(

I've deleted the Windows registry entry for message rules so future posts won't be affected but what's been deleted already will remain deleted.

(kim)

Reply to
kim

kim wrote: : : Can't be undone either :o( : Welcome to the wonderful world of windoze.

I just delete the newsgroup articles in my .newsrc file, and all the articles availabe at the server are once again mine for the asking.

Bruce

Reply to
Bruce Burden

Whoa. I use OE v6. and there are a couple of ways to reset newsgroups without fiddling with the registry - unless there's something about AOL that makes them unique or a PITA.

Method #1 (preferred)

1) Go into Message Rules and remove the filter.

2) Navigate to Tools>Options>Maintenance>Clean Up Now Browse to which accounts (or all of OE) that you want to recover messages from. Once the acct is shown in the text box, press the Reset button

3) Close up all the pop ups. Close OE if you like, but I don't think it's necessary. Navigate to any newsgroups marked for reset and the headers will automatically download when you click on one. If the message rule has been removed, you should get all of the messages retained on your ISP's news server.

4) Right click on newsgroups and make selections if you want to have message bodies synced/downloaded automatically. You might not have to fiddle with sync settings using this method.

Method #2 (for when OE is being particularly stubborn)

1) Go into Message Rules and remove the filter.

2) Right click on the newsgroup(s) affected by the filter and Unsubscribe any newsgroups you wish to reset.

3) Important step - CLOSE OE. If you do not close OE it will remember the message ids and message count and not do a full reset. You will still only see the filtered subset of messages.

4) Open up OE again. Navigate to the empty account (where the newsgroup(s) used to be. When you do OE will inform you that you are not currently subscribed to any newsgroups and query you as to what you want to do about it. Re-subscribe to the newgroups you deleted. When you click on a newly added newgroup it will begin downloading headers automatically. If you want message bodies too, right click on the newsgroup and make your sync selections.

The only way this might not work is if your ISP does not have good retention. My ISP has a pretty long retention period for messages going back well into 2008 - and I think I just realized what you're saying the problem with AOL might be. . I had to reset my newsgroups when I realized the filter I suggested killed non-spam too. All of the messages came back to life and it seems like that should work for you too. At least I hope so.

Sorry about that.

WmB

Reply to
WmB

No sweat, I can live with it. I've read every message I needed to read and at least the spam is now all gone. I did back up the Outlook Express folder about a week ago so if I was desperate I could always reinstate that :o)

(kim)

Reply to
kim

on 5/24/2009 12:38 AM (ET) WmB wrote the following:

For us WindowsXP Thunderbird users, the fix is a little different.

  1. Remove the offending filter rule.
  2. Close Thunderbird.
  3. Go to C:\Documents and Settings\Application data\Thunderbird\Profiles\News\
  4. In the list of files for the newsgroups, select the group that the filter was set on. For this group it would be 'rec.models.scale'.

There will be 4 files for the group. All can be opened in notepad or any text program, except for the .htm file, which will open in your browser. rec.models.scale This contains all your downloaded messages, including full headers and message content. rec.models.scale.dat This is the filter rules file. What rules you have set. rec.models.scale.htm This is the filter log file (what/when/why a message was deleted, and by what rule) It will be opened in a browser. rec.models.scale.msf This is the file that contains all your downloaded messages from the group. It won't be easy to read or understand if you are not a programmer.

  1. Delete the - rec.models.scale.msf - file and no others.
  2. Restart Thunderbird.
  3. Click on the rec.models.scale group. A popup window will tell you how many messages are on the server and how many of them you want to download. Set your limit number, or all messages. All the number of messages you selected will be downloaded, including the ones that were formally deleted by the filter rule.
Reply to
willshak

PolyTech Forum website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.