A Broadband and ADSL forum. BroadbanterBanter

Welcome to BroadbanterBanter.

You are currently viewing as a guest which gives you limited access to view most discussions and other FREE features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload your own photos and access many other special features. Registration is fast, simple and absolutely free so please, join our community today.

Go Back   Home » BroadbanterBanter forum » Newsgroup Discussions » uk.telecom.broadband (UK broadband)
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

uk.telecom.broadband (UK broadband) (uk.telecom.broadband) Discussion of broadband services, technology and equipment as provided in the UK. Discussions of specific services based on ADSL, cable modems or other broadband technology are also on-topic. Advertising is not allowed.

Doing My Own Spam Filtering



 
 
Thread Tools Display Modes
  #1  
Old March 7th 08, 12:28 AM posted to uk.telecom.broadband
[email protected]
external usenet poster
 
Posts: 529
Default Doing My Own Spam Filtering


On 6-Mar-2008, "A.N. Onymous Esq" [email protected] wrote:

I don't want to run my own email server but I would like to cut down on
the
amount of spam I get. I have a Windows XP machine that runs 24/7. is there
any free software that I could run on this machine that would periodically
log on to my ISPs mailboxes and remove spam - either by deleting it or
moving it to a "spam" folder


Have a look at MailWasher, www.mailwasher.net.
Some mail clients have spam filtering capability,
where you can set filters based on headers,
from/origin field, and possibly keyword in the body.
like you can bin all mail from countries that
you are never likely to receive legitimate mail from.
I don't know anybody in Venezuela, Zambia and so
on. Most junk comes from relatively few countries with
a limited permutation of headers and you can
filter on just the bit after the @ in the
from address. It just needs a bit of ingenuity
to get rid of most of the crap.
Orange webmail includes spam filtering, and
you can then get the filtered part from the
POP3 server.
Some ISP's use the database of firms like
http://www.junkemailfilter.com.
  #2  
Old March 7th 08, 05:51 PM posted to uk.telecom.broadband
Barb
external usenet poster
 
Posts: 25
Default Doing My Own Spam Filtering


Have a look at MailWasher, www.mailwasher.net.
Some mail clients have spam filtering capability,
where you can set filters based on headers,
from/origin field, and possibly keyword in the body.
like you can bin all mail from countries that
you are never likely to receive legitimate mail from.
I don't know anybody in Venezuela, Zambia and so
on. Most junk comes from relatively few countries with
a limited permutation of headers and you can
filter on just the bit after the @ in the
from address. It just needs a bit of ingenuity
to get rid of most of the crap.
Orange webmail includes spam filtering, and
you can then get the filtered part from the
POP3 server.
Some ISP's use the database of firms like
http://www.junkemailfilter.com.



I use Mailwasher, and recommend it.

Barb


  #3  
Old March 7th 08, 08:10 PM posted to uk.telecom.broadband
Colin Wilson
external usenet poster
 
Posts: 360
Default Doing My Own Spam Filtering

I use Mailwasher, and recommend it.

....and i've got a set of filters that seems to knock out over 80% of
spam without having to do a keyword search

(blocking LACNIC / APNIC, and most yankee ISPs works a treat - of
course any whitelisted / friendly emails are unaffected)
  #4  
Old March 8th 08, 08:45 AM posted to uk.telecom.broadband
David Quinton
external usenet poster
 
Posts: 57
Default Doing My Own Spam Filtering

On Fri, 7 Mar 2008 19:10:28 -0000, Colin Wilson
o.uk wrote:

I use Mailwasher, and recommend it.

(blocking LACNIC / APNIC, and most yankee ISPs works a treat - of
course any whitelisted / friendly emails are unaffected)


How do you filter against LACNIC/APNIC please?
--
Locate your Mobile phone: http://www.bizorg.co.uk/news.html
Great gifts: http://www.ThisBritain.com/ASOS_popup.html
  #5  
Old March 8th 08, 11:20 PM posted to uk.telecom.broadband
Colin Wilson
external usenet poster
 
Posts: 360
Default Doing My Own Spam Filtering

I use Mailwasher, and recommend it.
(blocking LACNIC / APNIC, and most yankee ISPs works a treat - of
course any whitelisted / friendly emails are unaffected)

How do you filter against LACNIC/APNIC please?


Try adding these lines to your filters.txt (rearrange them as single
lines, i.e. remove the wrap) - i'll add a space between each filter to
try to clarify things...

Many of them are RegExpr (regular expressions) but where it won't be
really obvious which IP ranges are blocked, i've added an explanatory
line in the format "### (148.208. - (148.223. ###" which indicates it
blocks the IP range from 148.208.x.x to 148.223.x.x (and includes the
IP in square "[" brackets and "(" normal brackets)

The first one is simply an additional one that blocks emails to
multiple recipients (someone else wrote that one for me, can't
remember whether it starts to mark for deletion at 6 or 7 recipients
:-}

After the ----- spacer i'll add a few more "generic" filters I use,
not sure if they might be a little too inclusive though :-}

"spamming isp block 5" seems to catch the majority of those missed by
APNIC / LACNIC etc. for me, but it was set up on a btinternet account
originally (which still gets checked)

Last but not least, the last two i've thrown in now that i've glanced
at my stats - over 6% of my spam is now caught by them (i'm not sure
it'll paste properly though, given that they're looking for non-
english characters with accents etc.


[enabled],"multiple to/cc","multiple
to/cc",33023,OR,Delete,To,containsRE,"(?is)([@].*)
{6,}",CC,containsRE,"(?is)([@].*){6,}"

[enabled],AfriNIC,AfriNIC,16711808,OR,Delete,EntireHeader,c ontainsRE,
(\(|\[)41.,EntireHeader,containsRE,(\(|\[)196.

[enabled],"APNIC 1","APNIC
1",8388863,OR,Delete,EntireHeader,containsRE,(\ (|\[)
58.,EntireHeader,containsRE,(\(|\[)59.,EntireHeader,containsRE,(\(|\[)
60.,EntireHeader,containsRE,(\(|\[)61.,EntireHeader,containsRE,(\(|\[)
121.,EntireHeader,containsRE,(\(|\[)122.,EntireHeader,containsRE,(\(|
\[)123.,EntireHeader,containsRE,(\(|\[)124.,EntireHeader,containsRE,
(\(|\[)125.,EntireHeader,containsRE,(\(|\[)126.

[enabled],"APNIC 2","APNIC
2",8388863,OR,Delete,EntireHeader,containsRE,(\ (|\[)
202.,EntireHeader,containsRE,(\(|\[)203.,EntireHeader,containsRE,(\(|
\[)210.,EntireHeader,containsRE,(\(|\[)211.,EntireHeader,containsRE,
(\(|\[)218.,EntireHeader,containsRE,(\(|\[)
219.,EntireHeader,containsRE,(\(|\[)220.,EntireHeader,containsRE,(\(|
\[)221.,EntireHeader,containsRE,(\(|\[)222.

[enabled],"APNIC regexpr 1","APNIC regexpr
1",8388863,OR,Delete,EntireHeader,containsRE,(\ (|\[)169\.((20[8-9])|
(21[0-9])|(2[1-2][0-3]))\.,Subject,contains,"### (169.208. -
(169.223. ###",EntireHeader,containsRE,(\(|\[)196\.(19[2-9])
\.,Subject,contains,"### (196.192. - (196.199. ###"

[enabled],LACNIC,LACNIC,128,OR,Delete,EntireHeader,contains RE,(\(|\[)
189.,EntireHeader,containsRE,(\(|\[)190.,EntireHeader,containsRE,(\(|
\[)200.,EntireHeader,containsRE,(\(|\[)201.,EntireHeader,containsRE,
(\(|\[)148.((20[8-9])|(21[0-9])|(22[0-3]))
\.,EntireHeader,contains,"### (148.208. - (148.223. ###"

-----

[enabled],"spamming isp block 1","isp block
1",16711680,OR,Delete,EntireHeader,contains,offerc atch.com,EntireHeade
r,contains,surfsideoffers.com,EntireHeader,contain s,.ameritech.net,Ent
ireHeader,contains,special1buys.net,EntireHeader,c ontains,dime41.dizin
c.com,EntireHeader,contains,brasiltelecom.net.br,E ntireHeader,contains
,.pacbell.net,EntireHeader,contains,.al.comcast.ne t,EntireHeader,conta
ins,.prodigy.net.mx,EntireHeader,contains,.speeduo l.com.br

[enabled],"spamming isp block 2","isp block
2",16711680,OR,Delete,EntireHeader,contains,".prod igy.net.mx
with",EntireHeader,contains,.attbi.com,EntireHeade r,contains,.ss01.net
,EntireHeader,contains,dyn.optonline.net,EntireHea der,contains,.rcsntx
..swbell.net,EntireHeader,contains,.telesp.net.br, EntireHeader,contains
,.ehostpros.com,EntireHeader,contains,.telecom.net .ar,EntireHeader,con
tains,.mi.chartermi.net,EntireHeader,contains,.mi. comcast.net

[enabled],"spamming isp block 3","isp block
3",16711680,OR,Delete,EntireHeader,contains,.malib umailz,EntireHeader,
contains,.virtua.com.br,EntireHeader,contains,.spe cial1buys.net,Entire
Header,contains,bestspecials.biz,EntireHeader,cont ains,102441021,Entir
eHeader,contains,coolmail.com,EntireHeader,contain s,.charter.com,Entir
eHeader,contains,.sunnyvision.com,EntireHeader,con tains,
[61.171.,EntireHeader,contains,veloxzone.com.br

[enabled],"spamming isp block 4","isp block
4",16711680,OR,Delete,EntireHeader,contains,mx.aol .com,EntireHeader,co
ntains,.usuarios.retecal.es,EntireHeader,contains, .comcast.net,EntireH
eader,contains,.adelphia.net,EntireHeader,contains ,.shawcable.net,Enti
reHeader,contains,.dsl-
verizon.net,EntireHeader,contains,.cable.mindsprin g.com,EntireHeader,c
ontains,phish.food,EntireHeader,contains,.seed.net .tw

[enabled],"spamming isp block 5","isp block
5",16711680,OR,Delete,EntireHeader,contains,.broad band.hu,EntireHeader
,contains,.surfer.at,EntireHeader,contains,.dip.t-
dialin.net,EntireHeader,contains,.bezeqint.net,Ent ireHeader,contains,s
unmail1.com,EntireHeader,contains,.proxad.net,Enti reHeader,contains,.r
r.com,EntireHeader,contains,.mail.ukl.yahoo.com,En tireHeader,contains,
..swbell.net,EntireHeader,contains,.tpnet.pl

[enabled],"spamming isp block 6","isp block
6",16711680,OR,Delete,EntireHeader,contains,.telus .net,EntireHeader,co
ntains,.telefonica-
data.net,EntireHeader,contains,.verizon.net,Entire Header,contains,.bel
lsouth.net,EntireHeader,contains,
(helo=btiruseless),EntireHeader,contains,mchsi.com ,EntireHeader,contai
ns,.telesp.net.br,EntireHeader,contains,
@proxad.,EntireHeader,contains,.ameritech.net,Enti reHeader,contains,op
tonline.net

[enabled],"spamming isp block 7","isp block
7",16711680,OR,Delete,EntireHeader,contains,pro d-
infinitum.com,EntireHeader,contains,.videotron.,En tireHeader,contains,
..cgocable.net,EntireHeader,contains,helo=juno.com ,EntireHeader,contain
s,.cable.rogers.com,EntireHeader,contains,
(218.71.,EntireHeader,contains,.ne.jp,EntireHeader ,contains,.giga.net.
tw,EntireHeader,contains,.cox.net,EntireHeader,con

[enabled],"spamming isp block 8","isp block
8",16711680,OR,Delete,EntireHeader,contains,.bigpo nd.,EntireHeader,con
tains,.chartertn.net,EntireHeader,contains,.charte rmi.net,EntireHeader
,contains,.netvision.net.il,EntireHeader,contains, .interbusiness.it,En
tireHeader,contains,.sympatico.ca,EntireHeader,con tains,.hispeed.ch,En
tireHeader,contains,.hkcable.com.hk,EntireHeader,c ontains,RNDUCCHAR13%
,EntireHeader,contains,.hotbar.com

[enabled],"spamming isp block 9","isp block
9",16711680,OR,Delete,EntireHeader,contains,.sc1.c p.net,EntireHeader,c
ontains,.rima-tde.,EntireHeader,contains,.arcor-
ip.net,EntireHeader,contains,.fibertel.com.ar,Enti reHeader,contains,dy
namic.hinet.net,EntireHeader,contains,007mundo.com ,EntireHeader,contai
ns,.pacbell.net,EntireHeader,contains,.tomodo.com, EntireHeader,contain
s,.surfer.at,EntireHeader,contains,adsl.terra.cl

[enabled],"spamming isp block 10","isp block
10",16711680,OR,Delete,EntireHeader,contains,.ajat o.com.br,EntireHeade
r,contains,wanadoo.fr,EntireHeader,contains,charte rpipeline.net,Entire
Header,contains,.cable.rcn.com,EntireHeader,contai ns,xinetmail.net,Ent
ireHeader,contains,.tiscali.cz,EntireHeader,contai ns,.club-
internet.fr,EntireHeader,contains,".com.br
(",EntireHeader,contains,.cable.net.co,EntireHeade r,contains,.ono.com

[enabled],"spamming isp block 11","isp block
11",16711680,OR,Delete,EntireHeader,contains,.uu.n et,EntireHeader,cont
ains,gaoland.net,EntireHeader,contains,
[208.180,EntireHeader,contains,.saudi.net.sa,Entire Header,contains,.ch
ello.,EntireHeader,contains,speedy.com.ar,EntireHe ader,contains,.telko
m.net.id,EntireHeader,contains,.inode.at,EntireHea der,contains,netgrup
..ro,EntireHeader,contains,btcentralplus

[enabled],"spamming isp block 12","spamming isp block
12",16711680,OR,Delete,EntireHeader,contains,.9tel .net,EntireHeader,co
ntains,.net.pl,EntireHeader,contains,
=charter.com,EntireHeader,contains,net.ru

[disabled],"__ISP regexpr__","__ISP
regexpr__",16711680,AND,Subject,contains,devnull

[enabled],"AT&T regexpr","AT&T
regexpr",16711680,OR,Delete,EntireHeader,containsR E,(\(|\[)12
\.,EntireHeader,contains,"### (12.xxx ###",EntireHeader,containsRE,
(\(|\[)32\.,EntireHeader,contains,"### (32.xxx ###"

[enabled],"BT Broadband regexpr","BT Broadband
regexpr",16711680,OR,Delete,EntireHeader,containsR E,(\(|\[)86\.((12[8-
9])|(1[3-8][0-9])|(19[0-1]))\.,EntireHeader,contains,"### (86.128. -
(86.191. ###",EntireHeader,containsRE,(\(|\[)81\.((12[8-9])|(1[3-4][0-
9])|(15[0-9]))\.,EntireHeader,contains,"### (81.128. - (81.159. ###"

[enabled],"BELLSOUTH regexpr","BELLSOUTH
regexpr",16711680,OR,Delete,EntireHeader,containsR E,(\(|\[)68\.((20[8-
9])|(21[0-9])|(22[0-3]))\.,EntireHeader,contains,"### (68.208. -
(68.223. ###",EntireHeader,containsRE,(\(|\[)68\.(15[2-9])
\.,EntireHeader,contains,"### (68.152. - (68.159.
###",EntireHeader,containsRE,(\(|\[)72\.((14[4-9])|(15[0-9]))
\.,EntireHeader,contains,"### (72.144. - (72.159. ###"

[enabled],"BEYONDTHENETWORK regexpr","BEYONDTHENETWORK
regexpr",16711680,OR,Delete,EntireHeader,containsR E,(\(|\[)63\.((21[6-
9])|(22[0-3]))\.,EntireHeader,contains,"### (63.216 - (63.223. ###"

[enabled],"CHARTER regexpr","CHARTER
regexpr",16711680,OR,Delete,EntireHeader,containsR E,(\(|\[)24\.((17[6-
9])|(18[0-3]))\.,EntireHeader,contains,"### (24.176. - (24.183.
###",EntireHeader,containsRE,(\(|\[)68\.((18[4-9])|(19[0-1]))
\.,EntireHeader,contains,"### (68.184. - (68.191.
###",EntireHeader,containsRE,(\(|\[)68\.(11[2-9])
\.,EntireHeader,contains,"### (68.112. - (68.119.
###",EntireHeader,containsRE,(\(|\[)71\.((8[0-9])|(9[0-5]))
\.,EntireHeader,contains,"### (71.80. - (71.95.
###",EntireHeader,containsRE,(\(|\[)75\.((12[8-9])|(13[0-2]))
\.,EntireHeader,contains,"### (75.128. - (75.132. ###"

[enabled],"COMCAST regexpr","COMCAST
regexpr",16711680,OR,Delete,EntireHeader,containsR E,(\(|\[)71\.((22[4-
9])|(23[0-6]))\.,EntireHeader,contains,"### (71.224. - (71.236.
###",EntireHeader,containsRE,(\(|\[)68\.((3[2-9])|([4-5][0-9])|(6[0-
3]))\.,EntireHeader,contains,"### (68.32. - (68.63.
###",EntireHeader,containsRE,(\(|\[)75\.((6[4-9])|(7[0-5]))
\.,EntireHeader,contains,"### (75.64. - (75.75. ###"

[enabled],"NTL regexpr","NTL
regexpr",16711680,OR,Delete,EntireHeader,containsR E,(\(|\[)86\.(([0-
9])|([1-2][0-9])|(3[0-1]))\.,EntireHeader,contains,"### (86.0. -
(86.31. ###"

[enabled],"QWEST regexpr","QWEST
regexpr",16711680,OR,Delete,EntireHeader,containsR E,(\(|\[)71\.((20[8-
9])|(21[0-9])|(22[0-3]))\.,EntireHeader,contains,"### (71.208 -
(71.223. ###",EntireHeader,containsRE,(\(|\[)71\.(3[2-9])
\.,EntireHeader,contains,"### (71.32 - (71.39. ###"

[enabled],"ROADRUNNER regexpr","ROADRUNNER
regexpr",16711680,OR,Delete,EntireHeader,containsR E,(\(|\[)66\.(6[5-
9])\.,EntireHeader,contains,"### (66.65 - (66.69.
###",EntireHeader,containsRE,(\(|\[)72\.((22[4-9])|(23[0-1]))
\.,EntireHeader,contains,"### (72.224. - (72.231.
###",EntireHeader,containsRE,(\(|\[)24\.((16[0-9])|(170))
\.,EntireHeader,contains,"### (24.160. - (24.170. ###"

[enabled],"SHAW CABLE regexpr","SHAW CABLE
regexpr",16711680,OR,Delete,EntireHeader,containsR E,(\(|\[)24\.((6[4-
9])|(7[0-1]))\.,EntireHeader,contains,"### (24.64. - (24.71.
###",EntireHeader,containsRE,(\(|\[)68\.((14[4-9])|(15[0-1]))
\.,EntireHeader,contains,"### (68.144. - (68.151. ###"

[enabled],"SPRINT regexpr","SPRINT
regexpr",16711680,OR,Delete,EntireHeader,containsR E,(\(|\[)76\.([0-7])
\.,EntireHeader,contains,"### (76.0. - (76.7. ###"

[enabled],"SKY regexpr","SKY
regexpr",16711680,OR,Delete,EntireHeader,containsR E,(\(|\[)90\.(19[2-
9])\.,EntireHeader,contains,"### (90.192. - (90.199. ###"

[enabled],"VERIZON regexpr","VERIZON
regexpr",16711680,OR,Delete,EntireHeader,containsR E,(\(|\[)71\.((9[6-
9])|(10[0-9])|(11[0-9])|(12[0-7]))\.,EntireHeader,contains,"###
(71.96. - (71.127 ###",EntireHeader,containsRE,(\(|\[)71\.((1[6-7][0-
9])|(18[0-6]))\.,EntireHeader,contains,"### (71.160. - (71.186.
###",EntireHeader,containsRE,(\(|\[)72\.((6[4-9])|([7-8][0-9])|(9[0-
5]))\.,EntireHeader,contains,"### (72.64. - (72.95.
###",EntireHeader,containsRE,(\(|\[)151\.((19[6-9])|(20[0-5]))
\.,EntireHeader,contains,"### (151.196. - 151.205. ###"

[enabled],"Asstd US ISP regexpr","Asstd US ISP
regexpr",16711680,OR,Delete,EntireHeader,containsR E,(\(|\[)(67|69|65|
70|130|170)\.,EntireHeader,contains,"### (67 / 69 / 65 / 70 / 130 /
170",EntireHeader,containsRE,(\(|\[)24\.(([0-9])|([1-9][0-9])|(1[0-2]
[0-9])|(13[0-2]))\.,EntireHeader,contains,"### (24.0. - (24.132.
###",EntireHeader,containsRE,(\(|\[)66\.,EntireHeader,contains,"###
(66.0. - (66.255. ###"

[enabled],"weird characters","weird
chars",16711680,OR,Delete,EntireHeader,contains,, Body,contains,,Enti
reHeader,contains,,Body,contains,,EntireHeader,c ontains,,Body,conta
ins,,EntireHeader,contains,,Body,contains,

[enabled],"weird fonts","weird
fonts",16711680,OR,Delete,EntireHeader,contains,wi ndows-
1251,EntireHeader,contains,=?KOI8
  #6  
Old March 10th 08, 10:34 AM posted to uk.telecom.broadband
David Quinton
external usenet poster
 
Posts: 57
Default Doing My Own Spam Filtering

On Sat, 8 Mar 2008 22:20:06 -0000, Colin Wilson
o.uk wrote:

I use Mailwasher, and recommend it.
(blocking LACNIC / APNIC, and most yankee ISPs works a treat - of
course any whitelisted / friendly emails are unaffected)

How do you filter against LACNIC/APNIC please?


Try adding these lines


Thanks Colin.
Looks like I'd better wait until I have enough spare time!
--
Locate your Mobile phone: http://www.bizorg.co.uk/news.html
Great gifts: http://www.ThisBritain.com/ASOS_popup.html
 




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Doing My Own Spam Filtering A.N. Onymous Esq uk.telecom.broadband (UK broadband) 22 March 12th 08 10:51 AM
Demon spam filtering Alan Norris uk.telecom.broadband (UK broadband) 7 February 15th 04 09:05 PM
Spam filtering (again) Colin Wilson uk.telecom.broadband (UK broadband) 17 February 2nd 04 12:00 PM
Spam Filtering Paul Hanson uk.telecom.broadband (UK broadband) 3 January 24th 04 02:09 PM
Spam filtering Steven Campbell uk.telecom.broadband (UK broadband) 9 January 19th 04 05:37 PM


All times are GMT +1. The time now is 05:18 AM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2019, Jelsoft Enterprises Ltd.Content Relevant URLs by vBSEO 2.4.0
Copyright 2004-2019 BroadbanterBanter.
The comments are property of their posters.