!!Vandals, this page is regularly backed up, so bother not.
!Leafnode (MK)
<filters> # more mail2news ^Path:.*[, ]mail2news ^Path:.*[, ]mail2news.* ^Path:.*nym.alias.net ^Path:.*nymshifter.com ^Mail-To-News-Contact: ^X-Mail2News-Contact:
#When K'man doesn't use mail2news gateway these often catch him: ^Path:.*kadaitcha.cx ^From:.*Kadaitcha Man ^Organization:.*news.atacama-andes.cl.*
#When Bailo used to nymshift one of these killed him: ^From: .*jabailo@earthlink\.net ^Path:.*262bffca ^Path:.*8cd8340b ^Path:.*67dffffd ^Path:.*28700a2d
… so any posts which match the above will be dropped. Additionally, it'll drop anything which matches this:
<config> ## To avoid spam, you can select the maximum number of crosspostings ## that are allowed in incoming postings. Setting this below 5 is ## probably a bad idea. The default is unlimited crossposting. maxcrosspost = 5
!Main:
*name=Tim Smith
*name=Erik Funkenbusch
*name=tab
*name=DFS
*name=flatfish
*name=flatfish+++
*email=linux-sux@lycos.com
*name=T.G.Reaper
*name=billwg
*name=Jeff…Relf
*name=Clogwog
*name=Larry Qualig
*name=NoNamer
*name=Grug
*name=Snit
*name=Hadron Quark
*name=Oxford
!Questionable (or Roy Culley's perspective):
*name=John Bailo
*name=Martha Adams
*name=John A. Bailo
*name=John A Bailo
*name=Black Dragon
!Suspected by Scott W (Sorry I don't have all the names)
*email=stomach.pump@yahoo.com
*email=AuntyDiluvian@gmail.com
*email=otto@keiser.de
*email=compton.plaines_kid@gmail.org
*email=aneelay12@hotmail.com
*email=reginialeisberg@orange.nl
*name=Robert M. Stockmann (as of August 2006)
!If anyone knows the names to go with these email addresses, feel free to change it.
!Additional 'suspects'/trolls (July 2006, Roy)
*name=Tom Shelton (seems like an MS apologist, uses Windows betas)
*name=yttrx (vulgar, suspected troll, troublemaker)
*name=Oliver Wong (Mark would argue he is an MS apologist)
*name=Aunty Diluvian
Maybe some scorefiles appended..??????? E.g. for KNode:
<?xml version = '1.0'?> <!DOCTYPE Scorefile> <Scorefile>
<Rule expires="never" linkmode="AND" name="Short" > <Group name=".*" /> <Expression expr="20" neg="0" type="SMALLER" header="Lines" /> <Action value="#ff0000" type="COLOR" /> </Rule> <Rule expires="never" linkmode="AND" name="Roy" > <Group name=".*" /> <Expression expr="schestowitz" neg="0" type="CONTAINS" header="From" /> <Action value="#ffff00" type="COLOR" /> </Rule> <Rule expires="never" linkmode="AND" name="GG" > <Group name=".*" /> <Expression expr="google" neg="0" type="CONTAINS" header="Message-ID" /> <Action value="#00ffff" type="COLOR" /> </Rule> <Rule expires="never" linkmode="AND" name="Followup" > <Group name=",*" /> <Expression expr="schestowitz\.com>$" neg="0" type="MATCH" header="References" /> <Action value="#00ff00" type="COLOR" /> </Rule> <Rule expires="never" linkmode="AND" name="Followup to Followup" > <Group name=".*" /> <Expression expr="schestowitz\.com>.*<" neg="0" type="MATCH" header="References" /> <Action value="#008000" type="COLOR" /> </Rule> <Rule expires="never" linkmode="AND" name="KNode" > <Group name=".*" /> <Expression expr="knode" neg="0" type="CONTAINS" header="Subject" /> <Action value="#00ff00" type="COLOR" /> </Rule>
</Scorefile>
!!William (leafnode):
Leafnode will work with any newsreader, slrn, knode, Pan etc. Just point them to 'localhost' or 127.0.0.1
Some of my filters are:-
Filter posts from anonymous remailers (Kadaitchaman etc): ^Organization:.*mail2news@dizum.com ^Organization:.*mail2news@nym.alias.net ^Organization:.*news-abuse@zig-zag.net ^Organization:.*Aioe.org NNTP Server
In case “Organization” header is removed by troll: ^Mail-To-News-Contact:.*abuse@dizum.com ^X-Complaints-To:.*news-abuse@zig-zag.net
Googlegroup posters filtered: ^Organization:.*http://groups.google.com
Crossposting to other newsgroups favoured by trolls filtered: ^Newsgroups:.*alt\.troll* ^Newsgroups:.*alt\.os\.windows-xp* ^Newsgroups:.*alt\.homosexual* ^Newsgroups:.*alt\.usenet\.kooks*
Crossposting into other groups, by Relf, Oxford & Bailo: ^Newsgroups:.*comp\.sys\.mac\.advocacy* ^Newsgroups:.*sci\.physics* ^Newsgroups:.*sci\.physics\.relativity*
Some trolls may nymshift, but forget to change one of their headers. They also like to use x-no-archive, so this killfiles them: ^X-No-Archive:.*yes
Can also filter on anything in the 'Path', for example: ^Path:.*newsfeed.x-privat.org* ^Path:.*xxx.xxx.xxx.xx.MISMATCH* ^Path:.*kadaitcha.cx*
Yahoo & hotmail posters can be filtered: ^From:.*([!-@])@yahoo.com ^From:.*([!-@])@hotmail.com
User-Agents can be filtered: ^User-Agent:.*Microsoft-Entourage ^User-Agent:.*MT-NewsWatcher*
From filters: ^From:.*DFS ^From:.*dfs ^From:.*Erik Funkenbusch ^From:.*([!-@])Jeff…Relf([!-@])Jeff_Relf@Yahoo.COM ^From:.*T.G.Reaper ^From:.*Ana Thema ^From:.*tab ^From:.*Larry Qualig ^From:.*
John Bailo tends to nymshift sometimes, though he keeps his email address. So instead of kf'ing his nyms, I use that. ^From:.*jabailo@texeme.com
NNTP posting hosts can be filtered, for e.g: ^NNTP-Posting-Host:.*66.117.136.130 ^NNTP-Posting-Host:.*128.220.107.61
References headers can be filtered, e.g: ^References:.*@\.googlegroups\.com* ^References:.*@bignews2\.bellsouth\.net* ^References:.*fsf@geemail\.com* ^References:.*news\.sunsite\.dk* ^References:.*@aioe\.server\.aioe\.org*
One thought, if people MUST reply to flatfish & his socks, how about a [k00k] label in the heading? For those not wishing to see any of flatfishes posts & replies, that could be easily filtered out.
!!Ghost (slrn):
—8< >8— %BOS
[comp.os.linux.advocacy]
Score: -500 From: AuntyDiluvian@gmail.com
Score: -500 From: flatfish@linuxmail.org
Score: -800 Xref: alt.os.windows-xp
Score: -800 Xref: comp.os.ms-windows.advocacy
Score: -3200 Xref: alt.locksmithing
Score: -3200 Xref: 24hoursupport.helpdesk
Score: -3200 Xref: alt.os.windows-xp
%EOS —8< >8—
