|
|
Posted by Colin Wilson on 11/14/06 19:36
> Has anoyone else noticed a huge increase in spam in the last 6 months?.
> I'm having to delete tons of stuff with mailwasher compared to 6 months ago.
> Why doesn't someone do something about these bloody idiots. Its the same
> people/emails over and over again. It's getting bloody ridiculous
Want to try some of my filters ? - use a half decent text editor like
Editpad Lite to reform the following to a single line in your
filters.txt - the first few are probably the most effective overall, and
the order as they appear here seems to work well for me.
Note: you will probably have to edit the "bank phish" to suit - I can
provide more if you like, aimed towards specific spam friendly ISPs.
Note 2: if you want my blacklist, its on my site at
http://www.coreutilities.co.uk
- its basically a list of country domains - anything I want from .dk for
example is already in my friends list, so any others that land from
there are automatically shite.
-------
[enabled],"multiple to/cc","multiple
to/cc",33023,OR,Delete,To,containsRE,"(?is)([@].*)
{6,}",CC,containsRE,"(?is)([@].*){6,}"
[enabled],AfriNIC,AfriNIC,16711808,OR,Delete,EntireHeader,containsRE,
(\(|\[)41.,EntireHeader,containsRE,(\(|\[)196.
[enabled],"APNIC 1","APNIC 1",8388863,OR,Delete,EntireHeader,containsRE,
(\(|\[)58.,EntireHeader,containsRE,(\(|\[)59.,EntireHeader,containsRE,
(\(|\[)60.,EntireHeader,containsRE,(\(|\[)61.,EntireHeader,containsRE,
(\(|\[)121.,EntireHeader,containsRE,(\(|\[)122.,EntireHeader,containsRE,
(\(|\[)123.,EntireHeader,containsRE,(\(|\[)124.,EntireHeader,containsRE,
(\(|\[)125.,EntireHeader,containsRE,(\(|\[)126.
[enabled],"APNIC 2","APNIC 2",8388863,OR,Delete,EntireHeader,containsRE,
(\(|\[)202.,EntireHeader,containsRE,(\(|\[)203.,EntireHeader,containsRE,
(\(|\[)210.,EntireHeader,containsRE,(\(|\[)211.,EntireHeader,containsRE,
(\(|\[)218.,EntireHeader,containsRE,(\(|\[)219.,EntireHeader,containsRE,
(\(|\[)220.,EntireHeader,containsRE,(\(|\[)221.,EntireHeader,containsRE,
(\(|\[)222.
[enabled],"APNIC regexpr 1","APNIC regexpr
1",8388863,OR,Delete,EntireHeader,containsRE,(\(|\[)169\.((20[8-9])|(21
[0-9])|(2[1-2][0-3]))\.,Subject,contains,"### (169.208. -> (169.223.
###",EntireHeader,containsRE,(\(|\[)196\.(19[2-9])
\.,Subject,contains,"### (196.192. -> (196.199. ###"
[enabled],LACNIC,LACNIC,128,OR,Delete,EntireHeader,containsRE,(\(|\[)
189.,EntireHeader,containsRE,(\(|\[)190.,EntireHeader,containsRE,(\(|\[)
200.,EntireHeader,containsRE,(\(|\[)201.,EntireHeader,containsRE,(\(|\[)
148.((20[8-9])|(21[0-9])|(22[0-3]))\.,EntireHeader,contains,"###
(148.208. -> (148.223. ###"
[enabled],"AT&T regexpr","AT&T
regexpr",16711680,OR,Delete,EntireHeader,containsRE,(\(|\[)12
\.,EntireHeader,contains,"### (12.xxx ###",EntireHeader,containsRE,(\(|
\[)32\.,EntireHeader,contains,"### (32.xxx ###"
[enabled],"BT Broadband regexpr","BT Broadband
regexpr",16711680,OR,Delete,EntireHeader,containsRE,(\(|\[)86\.((12[8-
9])|(1[3-8][0-9])|(19[0-1]))\.,EntireHeader,contains,"### (86.128. ->
(86.191. ###"
[enabled],"BELLSOUTH regexpr","BELLSOUTH
regexpr",16711680,OR,Delete,EntireHeader,containsRE,(\(|\[)68\.((20[8-
9])|(21[0-9])|(22[0-3]))\.,EntireHeader,contains,"### (68.208. ->
(68.223. ###",EntireHeader,containsRE,(\(|\[)68\.(15[2-9])
\.,EntireHeader,contains,"### (68.152. -> (68.159.
###",EntireHeader,containsRE,(\(|\[)72\.((14[4-9])|(15[0-9]))
\.,EntireHeader,contains,"### (72.144. -> (72.159. ###"
[enabled],"BEYONDTHENETWORK regexpr","BEYONDTHENETWORK
regexpr",16711680,OR,Delete,EntireHeader,containsRE,(\(|\[)63\.((21[6-
9])|(22[0-3]))\.,EntireHeader,contains,"### (63.216 -> (63.223. ###"
[enabled],"CHARTER regexpr","CHARTER
regexpr",16711680,OR,Delete,EntireHeader,containsRE,(\(|\[)24\.((17[6-
9])|(18[0-3]))\.,EntireHeader,contains,"### (24.176. -> (24.183.
###",EntireHeader,containsRE,(\(|\[)68\.((18[4-9])|(19[0-1]))
\.,EntireHeader,contains,"### (68.184. -> (68.191.
###",EntireHeader,containsRE,(\(|\[)68\.(11[2-9])
\.,EntireHeader,contains,"### (68.112. -> (68.119. ###"
[enabled],"COMCAST regexpr","COMCAST
regexpr",16711680,OR,Delete,EntireHeader,containsRE,(\(|\[)71\.((22[4-
9])|(23[0-6]))\.,EntireHeader,contains,"### (71.224. -> (71.236.
###",EntireHeader,containsRE,(\(|\[)68\.((3[2-9])|([4-5][0-9])|(6[0-3]))
\.,EntireHeader,contains,"### (68.32. -> (68.63. ###"
[enabled],"QWEST regexpr","QWEST
regexpr",16711680,OR,Delete,EntireHeader,containsRE,(\(|\[)71\.((20[8-
9])|(21[0-9])|(22[0-3]))\.,EntireHeader,contains,"### (71.208 ->
(71.223. ###",EntireHeader,containsRE,(\(|\[)71\.(3[2-9])
\.,EntireHeader,contains,"### (71.32 -> (71.39. ###"
[enabled],"ROADRUNNER regexpr","ROADRUNNER
regexpr",16711680,OR,Delete,EntireHeader,containsRE,(\(|\[)66\.(6[5-9])
\.,EntireHeader,contains,"### (66.65 -> (66.69.
###",EntireHeader,containsRE,(\(|\[)72\.(22[4-9])|(23[0-1])
\.,EntireHeader,contains,"### (72.224. -> (72.231. ###"
[enabled],"SHAW CABLE regexpr","SHAW CABLE
regexpr",16711680,OR,Delete,EntireHeader,containsRE,(\(|\[)24\.((6[4-9])
|(7[0-1]))\.,EntireHeader,contains,"### (24.64. -> (24.71.
###",EntireHeader,containsRE,(\(|\[)68\.((14[4-9])|(15[0-1]))
\.,EntireHeader,contains,"### (68.144. -> (68.151. ###"
[enabled],"VERIZON regexpr","VERIZON
regexpr",16711680,OR,Delete,EntireHeader,containsRE,(\(|\[)71\.((9[6-9])
|(10[0-9])|(11[0-9])|(12[0-7]))\.,EntireHeader,contains,"### (71.96. ->
(71.127 ###",EntireHeader,containsRE,(\(|\[)71\.((1[6-7][0-9])|(18[0-
6]))\.,EntireHeader,contains,"### (71.160. -> (71.186.
###",EntireHeader,containsRE,(\(|\[)72\.((6[4-9])|([7-8][0-9])|(9[0-5]))
\.,EntireHeader,contains,"### (72.64. -> (72.95.
###",EntireHeader,containsRE,(\(|\[)151\.((19[6-9])|(20[0-5]))
\.,EntireHeader,contains,"### (151.196. -> 151.205. ###"
[disabled],"__Country regexpr__","__Country
regexpr__",16711680,AND,Subject,contains,dev>null
[enabled],"AFRICA regexpr","AFRICA
regexpr",16711680,OR,Delete,EntireHeader,containsRE,(\(|\[)196\.(2[3-6])
\.,EntireHeader,contains,"### (196.23. -> (196.26. ###"
[enabled],"EUROPE regexpr 1","EUROPE regexpr
1",16711680,OR,Delete,EntireHeader,containsRE,(\(|\[)82\.(7[2-9])
\.,EntireHeader,contains,"### (82.72. -> (82.79.
###",EntireHeader,containsRE,(\(|\[)84\.((2[4-9])|(3[0-1]1))
\.,EntireHeader,contains,"### (84.24. -> (84.31.
###",EntireHeader,containsRE,(\(|\[)84\.(8[0-7])
\.,EntireHeader,contains,"### (84.80. -> (84.87.
###",EntireHeader,containsRE,(\(|\[)84\.([0-4])
\.,EntireHeader,contains,"### (84.0. -> (84.4.
###",EntireHeader,containsRE,(\(|\[)88\.(13[6-9])
\.,EntireHeader,contains,"### (88.136. -> (88.39. ###"
[enabled],"EUROPE regexpr 2","EUROPE regexpr
2",16711680,OR,Delete,EntireHeader,containsRE,(\(|\[)84\.((9[6-9])|(10
[0-3]))\.,EntireHeader,contains,"### (84.96. -> (84.103.
###",EntireHeader,containsRE,(\(|\[)85\.(24[0-7])
\.,EntireHeader,contains,"### (85.240. -> (85.247
###",EntireHeader,containsRE,(\(|\[)84\.((2[4-9])|(3[0-1]))
\.,EntireHeader,contains,"### (84.24. -> (84.31.
###",EntireHeader,containsRE,(\(|\[)80\.(16[0-7])
\.,EntireHeader,contains,"### (80.160. -> 80.167. ###"
[enabled],"FRANCE regexpr","FRANCE
regexpr",16711680,OR,Delete,EntireHeader,containsRE,(\(|\[)82\.((22[4-
9])|(2[3-5][0-9]))\.,EntireHeader,contains,"### (82.224. -> (82.259.
###",EntireHeader,containsRE,(\(|\[)86\.((6[4-9])|(7[0-9]))
\.,EntireHeader,contains,"### (86.64. -> (86.79.
###",EntireHeader,containsRE,(\(|\[)86\.((19[2-9])|(2[0-6][0-9]))
\.,EntireHeader,contains,"### (86.192. -> (86.255.
###",EntireHeader,containsRE,(\(|\[)82\.(12[0-7])
\.,EntireHeader,contains,"### (82.120. -> (82.127.
###",EntireHeader,containsRE,(\(|\[)90\.((0)|([0-9][0-9])|(1[0-1][0-9])|
(12[0-7]))\.,EntireHeader,contains,"### (90.0. -> (90.127. ###"
[enabled],"GERMANY regexpr","GERMANY
regexpr",16711680,OR,Delete,EntireHeader,containsRE,(\(|\[)80\.((12[8-
9])|(1[3-5][0-9]))\.,EntireHeader,contains,"### (80.128. -> (80.159.
###",EntireHeader,containsRE,(\(|\[)84\.(7[2-5])
\.,EntireHeader,contains,"### (84.72. -> (84.75
###",EntireHeader,containsRE,(\(|\[)84\.((5[6-9])|(6[0-3]))
\.,EntireHeader,contains,"### (84.56. -> (84.63.
###",EntireHeader,containsRE,(\(|\[)84\.((13[6-9])|(1[4-8][0-9])|(19[0-
1]))\.,EntireHeader,contains,"### (84.136. - (84.191.
###",EntireHeader,containsRE,(\(|\[)217\.((8[0-9])|(9[0-5]))
\.,EntireHeader,contains,"### (217.80. - (217.95. ###"
[enabled],"GERMANY regexpr 2","GERMANY regexpr
2",16711680,OR,Delete,EntireHeader,containsRE,(\(|\[)217\.((18[4-9])|(19
[0-1]))\.,EntireHeader,contains,"### (217.184. -> (217.191.
###",EntireHeader,containsRE,(\(|\[)85\.((17[6-9])|(18[0-3]))
\.,EntireHeader,contains,"### (85.176. -> (85.183.
###",EntireHeader,containsRE,(\(|\[)89\.((4[8-9])|(5[0-9])|(6[0-3]))
\.,EntireHeader,contains,"### (89.48. -> (89.63. ###"
[enabled],"GREECE regexpr","GREECE
regexpr",16711680,OR,Delete,EntireHeader,containsRE,(\(|\[)87\.(20[2-3])
\.,EntireHeader,contains,"### (87.202. - (87.203. ###"
[enabled],"ISRAEL regexpr","ISRAEL
regexpr",16711680,OR,Delete,EntireHeader,containsRE,(\(|\[)84\.(9[4-5])
\.,EntireHeader,contains,"### (84.94 -> (84.95.
###",EntireHeader,containsRE,(\(|\[)80\.230\.
[enabled],"ITALY regexpr","ITALY
regexpr",16711680,OR,Delete,EntireHeader,containsRE,(\(|\[)88\.((3[2-9])
|([4-5][[0-9])|(6[0-3]))\.,EntireHeader,contains,"### (88.32. -> (88.63.
###",EntireHeader,containsRE,(\(|\[)83\.(15[2-9])
\.,EntireHeader,contains,"### (83.152. -> (83.159.
###",EntireHeader,containsRE,(\(|\[)84\.(22[0-3])
\.,EntireHeader,contains,"### (84.220. -> (84.223.
###",EntireHeader,containsRE,(\(|\[)82\.((4[8-9])|(5[0-9])|(6[0-3]))
\.,EntireHeader,contains,"### (82.48 -> (82.63.
###",EntireHeader,containsRE,(\(|\[)87\.(([0-9])|(1[0-5]))
\.,EntireHeader,contains,"### (87.0 -> (87.15. ###"
[enabled],"POLAND regexpr","POLAND
regexpr",16711680,OR,Delete,EntireHeader,containsRE,(\(|\[)83\.(([0-9])|
(1[0-9])|(2[0-9])|(3[0-1]))\.,EntireHeader,contains,"### (83.0. >-
(83.31. ###",EntireHeader,containsRE,(\(|\[)80\.((4[8-9])|(5[0-5]))
\.,EntireHeader,contains,"### (80.48. >- (80.55. ###"
[enabled],"ROMANIA regexpr","ROMANIA
regexpr",16711680,OR,Delete,EntireHeader,containsRE,(\(|\[)86\.(12[0-7])
\.,EntireHeader,contains,"### (86.120. -> (86.127. ###"
[enabled],"SPAIN regexpr","SPAIN
regexpr",16711680,OR,Delete,EntireHeader,containsRE,(\(|\[)85\.((4[8-9])
|(5[0-9])|(6[0-3]))\.,EntireHeader,contains,"### (85.48. -> (85.63.
###",EntireHeader,containsRE,(\(|\[)88\.(([0-9])|(1[0-9])|(2[0-9])|(3[0-
1]))\.,EntireHeader,contains,"### (88.0. -> (88.31/
###",EntireHeader,containsRE,(\(|\[)83\.((3[2-9])|([4-5][[0-9])|(6[0-
3]))\.,EntireHeader,contains,"### (83.32. -> (83.63. ###"
[enabled],"TURKEY regexpr 1","TURKEY regexpr
1",16711680,OR,Delete,EntireHeader,containsRE,(\(|\[)85\.((9[6-9])|(10
[0-9])|(11[0-1]))\.,EntireHeader,contains,"### (85.100. ->
###",EntireHeader,containsRE,(\(|\[)88\.((22[2-9])|(2[3-5][0-9]))
\.,EntireHeader,contains,"### (88.224 -> (88.255. ###"
[enabled],nigeria,nigeria,16711680,OR,Delete,EntireHeader,contains,
(83.229.22.,EntireHeader,contains,(83.229.23.
[enabled],"portugal 1","portugal
1",16711680,OR,Delete,EntireHeader,contains,
(81.84,EntireHeader,contains,(213.22.
[enabled],"general regexpr 1","general regexpr
1",16711680,OR,Delete,EntireHeader,containsRE,"(re\:\ [0-9][0-9][0-
9])",EntireHeader,contains,"### Re: xxx ###",Subject,contains,"Atta
chment Removed",Subject,containsRE,[0-9][0-9]\:[0-9][0-9]
[enabled],"bank phish regexpr","bank phish
regexpr",16711680,AND,Delete,EntireHeader,containsRE,nationwide|barclays
|bank|halifax|leicester,EntireHeader,containsRE,btinternet|btiruseless|v
irgin|lineone|pipex
[enabled],"ebay phish 1","ebay
phish",16711680,AND,Delete,Body,contains,"<map
name=""",Body,contains,ebay.com
[enabled],"weird fonts","weird
fonts",16711680,OR,Delete,EntireHeader,contains,windows-1251
[enabled],"body text & www block 1","body text & www block
1",16711680,OR,Delete,Body,contains,www.meeting--
ground.com,Body,contains,"Pheromone
Formula",Body,contains,www.netsavinz.biz,Body,contains,www.matter-
jump.com,Body,contains,www.ebookzsave.biz,Body,contains,S0FTABS,Body,con
tains,"Get a capable
html",Body,contains,bestpills.info,Body,contains,aboutweightloss.net,Bod
y,contains,loaddialect.com
[enabled],"body text & www block 2","body text & www block
2",16711680,OR,Delete,Body,contains,.neata.com,Body,contains,"Prescripti
on
medications",Body,contains,.info/?,Body,contains,hottylaugh.com,Body,con
tains,"money
judgments",Body,contains,.regcmp.com,Body,contains,"daughter in
pain",Body,contains,"son in pain",Body,contains,"wife in
pain",Body,contains,www.a1info.net
[enabled],"body text & www block 3","body text & www block
3",16711680,OR,Delete,Body,contains,"Wrist Watches",Body,contains,mort-
gages.com,Body,contains,Sma||,Body,contains,st0ck,Body,contains,pre-
approved,Body,contains,H0USEWlFE,Body,contains,rxwholesale.info,Body,con
tains,W1ND0WS,Body,contains,G|obal,Body,contains,0rgasm
[enabled],"body text & www block 4","body text & www block
4",16711680,OR,Delete,Body,contains,dat1ng,Body,contains,erectile,Body,c
ontains,"Be your own
boss",Body,contains,.fightpyco.net,Body,contains,f|oat,Body,contains,Sym
bo|,Body,contains,otcbb,Body,contains,(OTC,Body,contains,"Watch This
Stock",Body,contains,www.znetmail.biz
[enabled],"body text & www block 5","body text & www block
5",16711680,OR,Delete,Body,contains,"zeta
trade",Body,contains,RusDeluxe,Body,contains,"trusted Online
Pharmacy",Body,contains,phramacy,Body,contains,Oi|,Body,contains,www.bro
adcastadvertise.net,Body,contains,www.broadcastadvertising.org,Body,cont
ains,Internationa|,Body,contains,cialis,Body,contains,viagara
[enabled],"body text & www block 6","body text & www block
6",16711680,OR,Delete,Body,contains,"email your web site
to",Body,contains,"+ opt-in email",Body,contains,"CHARITY
CONTACT:",Body,contains,optinemail,Body,contains,broadcastemailservices,
Body,contains,nonprofit/charity,Body,contains,"nonprofit
Contact",Body,contains,"$B",Body,contains,PhÁrm,Body,contains,"male
enhancement"
[enabled],"body text & www block 7","body text & www block
7",16711680,OR,Delete,Body,contains,"gold and
mineral",Body,contains,rolex,Body,contains,anatrim
[enabled],"Mail sent to ""Undisclosed recipients"" (ie not specifically
me)",undisclosed,16711680,OR,Delete,EntireHeader,contains,"undisclosed
recipients",EntireHeader,contains,undisclosed-
recipients,EntireHeader,contains,Undisclosed@address.invalid,EntireHeade
r,contains,Recipients@address.invalid
Navigation:
[Reply to this message]
|