|
Home > Archive > Linux Debian support > January 2008 > What is the best score rule to killfile the moronic MI5 postings?
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
What is the best score rule to killfile the moronic MI5 postings?
|
|
| NoBody 2007-12-31, 1:12 pm |
| I had the bozo blocked, but the mangled subject lines are slipping past
the filters. Anyone have a good score rule for pan or knode that will
catch these new postings?
Thanks
| |
| NoBody 2007-12-31, 7:12 pm |
| On Mon, 31 Dec 2007 20:17:17 +0000, Dave Uhring wrote:
> On Mon, 31 Dec 2007 13:15:52 -0500, NoBody wrote:
>
>
> Difficult to say without knowing which bozo.
I can't filter by his name or ISP anymore. The name and ISP change with
each posting.He is posting some drivel about MI5 persecutions in all the
groups. I don't know what his problem is nor do I care. I just don't want
to see his dozen or so postings in every group on usenet daily.
The name and ISP change with each posting. All of his
previous posts contained "MI5 persecution" in the subject, making it easy
to filter on that. But he has changed that by adding random spacing and
punctuation, ie "M`I' 5" and "M1-5" to get past the simple filters.
I know that there is a way to filter on his new tactics, I just don't know
how to write that rule. Any ideas?
Thanks
| |
| Harold Stevens 2007-12-31, 7:12 pm |
| In <13nir27dmq4ec7@news.supernews.com> Dave Uhring:
[Snip...]
> I block a few posting servers by Message-ID:, notably google
I've had good luck blocking by NNTP-Posting-Host. The cretin discovers a
few new proxies every day or so, and I note them in my Score file. Done.
And I also improved my Usenet reading experience immensely months ago by
completely ignoring anything even remotely related to Google forums.
JMO; YMMV...
--
Regards, Weird (Harold Stevens) * IMPORTANT EMAIL INFO FOLLOWS *
Pardon any bogus email addresses (wookie) in place for spambots.
Really, it's (wyrd) at airmail, dotted with net. DO NOT SPAM IT.
Kids jumping ship? Looking to hire an old-school type? Email me.
| |
| NoBody 2008-01-01, 1:14 am |
| On Mon, 31 Dec 2007 22:25:11 +0000, Dave Uhring wrote:
> On Mon, 31 Dec 2007 15:59:59 -0500, NoBody wrote:
>snipped<
>
> Not sure. I block a few posting servers by Message-ID:, notably google,
> and I have seen only 3 or 4 of his crap headers show up. Maybe
> supernews is doing the filtering.
Yeah, I have google and webtv filtered for that reason. I tried filtering
him by Message-ID. Maybe I messed that rule up somehow, because it didn't
work with pan. I'll have to look at it again later and see if I made a
typo or something.
> I would suggest having a word with your NNTP server admins, but I doubt
> that those retards at rr.com would even understand the problem.
Most likely a waste of time there... I have dealt with them in the past. I
think the guys at Best Buy probably have a better understanding than the
admin staff at rr.com does.
| |
| Tony van der Hoff 2008-01-01, 1:14 pm |
| On 1 Jan at 3:13 NoBody <nobody@localhost.localdomain> wrote in message
<pan.2008.01.01.03.13.31.592011@localhost.localdomain>
> On Mon, 31 Dec 2007 22:25:11 +0000, Dave Uhring wrote:
>
>
> Yeah, I have google and webtv filtered for that reason. I tried filtering
> him by Message-ID. Maybe I messed that rule up somehow, because it didn't
> work with pan. I'll have to look at it again later and see if I made a
> typo or something.
>
>
>
> Most likely a waste of time there... I have dealt with them in the past. I
> think the guys at Best Buy probably have a better understanding than the
> admin staff at rr.com does.
>
I've been successfully blocking him for a while on his excessive
cross-posting:
(.*,){2,}
Looking for more than 2 commas (3 groups).
--
Tony van der Hoff | mailto:news_0711@vanderhoff.org
Buckinghamshire, England
| |
| Harold Stevens 2008-01-01, 1:14 pm |
| In <pan.2008.01.01.03.13.31.592011@localhost.localdomain> NoBody:
[Snip...]
> think the guys at Best Buy probably have a better understanding than the
> admin staff at rr.com does
I have no personal experience with RR myself, but my impression is similar
based on past complaints I saw about RR in various forums.
IMO, it's a symptom of staff reductions generally at ISPs, was well as the
declining interest in Usenet with the vast AOL/WebTV clik'Ndrool crowd.
FWIW, my news provider (Supernews) has always seemed responsive/reliable.
JMO; YMMV...
--
Regards, Weird (Harold Stevens) * IMPORTANT EMAIL INFO FOLLOWS *
Pardon any bogus email addresses (wookie) in place for spambots.
Really, it's (wyrd) at airmail, dotted with net. DO NOT SPAM IT.
Kids jumping ship? Looking to hire an old-school type? Email me.
| |
| Hadron 2008-01-01, 1:14 pm |
| Dave Uhring <daveuhring@yahoo.com> writes:
> On Tue, 01 Jan 2008 00:36:23 +0000, Harold Stevens wrote:
>
>
> Pan's filtering ability is somewhat restricted but it does respect that
> filter.
>
>
> Unfortunately 99+44/100 % of the googlegroppers never know that their
> articles are being filtered. The 'tards never bother reading previous
> articles in the archives.
You're a nice couple. Usenet nazis.
| |
| Harold Stevens 2008-01-01, 1:14 pm |
| In <13nkigsecm9ldd9@news.supernews.com> Dave Uhring:
[Snip..]
> Except when asked to begin proceedings for UDP against goofle.
Very true and a very serious disappointment to me. I found no evidence that
bozobinning Google forum spews in Usenet would materially affect the bottom
line, reputation, or appeal of any major commercial provider.
FWIW, I see Google Grope as the Dark Side (like M$ "helping" OS/2).
JMO; YMMV...
--
Regards, Weird (Harold Stevens) * IMPORTANT EMAIL INFO FOLLOWS *
Pardon any bogus email addresses (wookie) in place for spambots.
Really, it's (wyrd) at airmail, dotted with net. DO NOT SPAM IT.
Kids jumping ship? Looking to hire an old-school type? Email me.
| |
| Moe Trin 2008-01-01, 7:13 pm |
| On Tue, 01 Jan 2008, in the Usenet newsgroup alt.os.linux.debian, in article
<slrnfnj2o8.8f1.wookie@aces.localdomain>, Harold Stevens wrote:
>Dave Uhring:
Perfect solution.
[vbcol=seagreen]
> I've had good luck blocking by NNTP-Posting-Host. The cretin
> discovers a few new proxies every day or so, and I note them in
> my Score file. Done.
There are eight headers that are the preferred targets (From:,
Subject:, References:, Date:, Bytes:, Lines:, Message-ID: and Xref
because these are available directly to your news reader. Other
headers such as NNTP-Posting-Host: are called "expensive" because
your news reader has to ask the news server for this header for
_every_ article - a severe speed penalty.
As far as the 'MI5 posts' - scream at your news provider, as other
providers don't seem to have a problem filtering this crap off.
>And I also improved my Usenet reading experience immensely months
>ago by completely ignoring anything even remotely related to Google
>forums.
>
>JMO; YMMV...
Just went through the newsreader logs, and dropped several newsgroups
with no valid traffic in the past year, so I'm down to 80 groups that
I try to scan every day. I'm only killing posts from googlegroups.com
in just six of those groups, but that makes it usable.
Old guy
| |
| Moe Trin 2008-01-01, 7:13 pm |
| On Tue, 01 Jan 2008, in the Usenet newsgroup alt.os.linux.debian, in article
<slrnfnkk1h.hcg.wookie@aces.localdomain>, Harold Stevens wrote:
>Dave Uhring:
news://news.admin.net-abuse.policy
[vbcol=seagreen]
>Very true and a very serious disappointment to me. I found no evidence
>that bozobinning Google forum spews in Usenet would materially affect
>the bottom line, reputation, or appeal of any major commercial
>provider.
Look back about a month ago in n.a.n-a.policy, and you'll find a few
people unhappy with supernews over 'highwinds-media' and the sporge
runs from various zombie boxes on cable ISPs (roadrunner has been
one of the problem children, but they are FAR from being alone).
>FWIW, I see Google Grope as the Dark Side (like M$ "helping" OS/2).
The problem with google is that they do everything in their power to
ignore ALL abuse. It means more visibility for their advertisements
which means more advertisements sold and that is all they care about.
Old guy
| |
| elaich 2008-01-03, 1:16 am |
| NoBody <nobody@localhost.localdomain> wrote in
news:pan.2007.12.31.18.15.51.647246@localhost.localdomain:
> I had the bozo blocked, but the mangled subject lines are slipping past
> the filters. Anyone have a good score rule for pan or knode that will
> catch these new postings?
>
> Thanks
The answer is news.individual.net. Filters all the spam and sporge for 10
Euros a year.
Here's a look at the kook himself with a link to his website:
http://www.bbc.co.uk/dna/h2g2/alabaster/A164404
| |
| William Poaster 2008-01-03, 7:12 pm |
| Harold Stevens wrote:
> In <13nkigsecm9ldd9@news.supernews.com> Dave Uhring:
>
> [Snip..]
>
>
> Very true and a very serious disappointment to me. I found no evidence
> that bozobinning Google forum spews in Usenet would materially affect the
> bottom line, reputation, or appeal of any major commercial provider.
>
> FWIW, I see Google Grope as the Dark Side (like M$ "helping" OS/2).
>
> JMO; YMMV...
I, along with others I know, use Leafnode to block googlegroups. A growing
number of people are getting fed up with them, & IMO it's harder to get off
a private blacklist than any an ISP may instigate. Some filters in my
Leafnode file:
One for the MI5 cretin (mentioned earlier).......
^From:.*MI5Victim@mi5\.gov\.uk
Five for the religious nut that posts in various groups:-
^Subject:.*(?i)MOHAMMED
^Subject:.*(?i)MUHAMMAD
^Subject:.*(?i)Mohammed
^Subject:.*(?i)Islam
^Subject:.*(?i)Jesus
^Subject:.*(?i)Quran
........& one for gurgle-gropers.
^Organization:.*http://groups\.google\.com*
Which certainly cuts the sig-noise ratio down, & makes groups readable. :-)
--
It takes time, this. One slight error in any of my thirteen billion
calculations and we'll be blasted to smithereens.
Here we go, then: 10, 9, 8, 6, 5--
--Holly - Red Dwarf--
| |
| Moe Trin 2008-01-04, 7:11 pm |
| On Fri, 04 Jan 2008, in the Usenet newsgroup alt.os.linux.debian, in article
<3r9055-6h4.ln1@wp.archimedes.eu>, William Poaster wrote:
>Some filters in my Leafnode file:
>
>One for the MI5 cretin (mentioned earlier).......
>^From:.*MI5Victim@mi5\.gov\.uk
See my comment in the 'alt.os.linux.pclinuxos' posting you replied to
this morning. Briefly, the abuser is morphing, and you may want to
change the 'From:' rule (and 'Subject:' rule if you have one) to
catch the regular expression 'M.*I.*5" (which is to say, 'M' followed
by zero or more of any characters, followed by 'I', followed by zero
or more of any characters, followed by a '5'. Others have also
suggested killing on the number of groups an individual article is
cross posted to - the 'Xref:' header.
>Five for the religious nut that posts in various groups:-
and several other 'bad word' rules - yes. Because of the lack of
response (even an 'auto-reply' from an ignore-bot) at several
Saudi, Egyptian, Syrian, and Palestinian ISPs, I'm about --><-- this
far from adding newsreader rules to block all posts from those ISPs.
I've already done so for 10 of the 19 IP ranges used by the Emirates.
>.......& one for gurgle-gropers.
>^Organization:.*http://groups\.google\.com*
Wrong header - that's an expensive one. Kill on Message-ID which is
one of the eight headers you automatically get with the XOVER.
>Which certainly cuts the sig-noise ratio down, & makes groups readable. :-)
I think you mean it cuts the noise-signal ratio, but yes - you're quite
right about that. I've dropped a few news groups on the first, but I'm
still scanning 80 groups daily, and I don't have TIME to be pressing the
delete key - so I let the killfile handle it. 'comp.os.linux.misc' is
one example of an infested group, but notice how the filter improves
things:
[compton ~]$ grep os.linux.misc.*killed newslog | cut -d' ' -f1,3-6
01/01/2008 comp.os.linux.misc: 42/42 (38 killed),
01/02/2008 comp.os.linux.misc: 29/29 (17 killed),
01/03/2008 comp.os.linux.misc: 67/67 (41 killed),
01/04/2008 comp.os.linux.misc: 67/67 (44 killed),
[compton ~]$
Old guy
|
|
|
|
|