Help me block the MI5 crap w/outlook

Please. I've created a bunch of rules and the spammer just won't go away!

Re: Help me block the MI5 crap w/outlook

John wrote:

> Please. I've created a bunch of rules and the spammer just won't go away!

Sorry, but I'm having the same problem with KNode on LINUX.

I've first edited the scoring rules, then selected the spam and hit I to
ignore, giving an total score of -200. It was working fine until now.

I'm kind of at a loss on how to handle spam barrage's like the recent one.

Re: Help me block the MI5 crap w/outlook

On Dec 23, 11:07 am, Robert Jones wrote:
> John wrote:
> > Please. I've created a bunch of rules and the spammer just won't go away!
>
> Sorry, but I'm having the same problem with KNode on LINUX.
>
> I've first edited the scoring rules, then selected the spam and hit I to
> ignore, giving an total score of -200. It was working fine until now.
>
> I'm kind of at a loss on how to handle spam barrage's like the recent one.

There appears to be something different about these current M15 posts.
First, the number of messages is much greater. In the past few weeks,
M15 posts have been on the weekends on 10 groups I read and are made
at about the same time. So far the current batch of M15 posts have
appeared only on this group of the 10 groups I read. Usually I just
scroll past the M15 posts. However, this time there are so many M15
posts that this becomes a bother. Any spammer could copy the posts and
repost them somewhere. I suspect that M15 posts have been made by many
different spammers in the past. Thus getting a spammer blocked is
likely just a temporary fix.

Re: Help me block the MI5 crap w/outlook

cwdjrxyz carefully considered the situation and wrote:
> On Dec 23, 11:07 am, Robert Jones wrote:
I suspect that M15 posts have been made by many
> different spammers in the past. Thus getting a spammer blocked is
> likely just a temporary fix.

It's very likely to be a single psychotic individual. It's extremely
difficult to stop him (and it will be a 'him') because he can create any
number of gmail/Hotmail addresses and there's very little one can do
about it. If an IP address can be found then a complaint can be made to
his ISP but he can do this spamming from an internet cafe if he wants.

Aside from the fact that it's as irritating as hell, it's interesting
that one determined individual can do this much damage.

Re: Help me block the MI5 crap w/outlook

On 2007-12-23, Halloway wrote:
> cwdjrxyz carefully considered the situation and wrote:
>> On Dec 23, 11:07 am, Robert Jones wrote:
> I suspect that M15 posts have been made by many
>> different spammers in the past. Thus getting a spammer blocked is
>> likely just a temporary fix.
>
> It's very likely to be a single psychotic individual. It's extremely
> difficult to stop him (and it will be a 'him') because he can create any
> number of gmail/Hotmail addresses and there's very little one can do
> about it. If an IP address can be found then a complaint can be made to
> his ISP but he can do this spamming from an internet cafe if he wants.
>
> Aside from the fact that it's as irritating as hell, it's interesting
> that one determined individual can do this much damage.

You need to kill based on Subject containing the string "MI5
Persecution". Not on the From field since that appears to be randomly
generated.

Re: Help me block the MI5 crap w/outlook

Halloway wrote:

> cwdjrxyz carefully considered the situation and wrote:
>> I suspect that M15 posts have been made by many different spammers in
>> the past. Thus getting a spammer blocked is likely just a temporary
>> fix.
>
> It's very likely to be a single psychotic individual. ...

It is one man. Google for "Mike Corley".

--
-bts
-Motorcycles defy gravity; cars just suck

Re: Help me block the MI5 crap w/outlook

John wrote:
> Please. I've created a bunch of rules and the spammer just won't go away!
>
>
Thunderbird > Tools > Message Filters does not work.
It does not work for alt.html (this group).
It does not work for news.verizon.net (my provider).
"Mark Read" does not work.
"Delete" does not work.
I suspect it is because I cannot control what exists
on "news.verizon.net".

Somebody suggested tracking it back to its' ISP.
I wonder if that would work?
Charles

Re: Help me block the MI5 crap w/outlook

charles cashion wrote:
> John wrote:
>> Please. I've created a bunch of rules and the spammer just won't go away!
>>
> Thunderbird > Tools > Message Filters does not work.

Fairly surprising. I just tested here and it works for me. I used:

(Match any of the following)
Subject contains MI5
Action: Delete Message

> It does not work for alt.html (this group).
> It does not work for news.verizon.net (my provider).
> "Mark Read" does not work.
> "Delete" does not work.
> I suspect it is because I cannot control what exists
> on "news.verizon.net".

What would that have to do with it? None of us can control our NSPs
(unless we're running our own news server). The Thunderbird filter works
by just not grabbing the posts that match the conditions you set up.
What filter rules did you try?


--
John
Pondering the value of the UIP: http://improve-usenet.org/

Re: Help me block the MI5 crap w/outlook

John wrote:
> Please. I've created a bunch of rules and the spammer just won't go away!
>

Your subject line mentions Outlook, but you are using Outlook Express to
post (and you neglected to specify in your post's message which
newsreader you mean). Since I assume you really mean Outlook Express
(OE) and not Outlook (Outlook being not very famous as a newsreader), we
can now talk about what steps you took.

You say you created "a bunch of rules" although it seems to me that one
would be sufficient. I just made one in OE6 with, well, here it is:

Apply this rule after the message arrives
Where the Subject line contains 'MI5'
Delete it

My result: no messages from the paranoid poster (nor from this thread)
get downloaded. Victory is mine.

I did this using version "Microsoft Outlook Express 6.00.2600.0000",
which I take to be a bit older than yours, but similar enough. I am
wondering what multitude of rules you tried.

Of course, none of this actually makes the spammer "go away," but I
don't see the spam, and that's good enough for me.

--
John
Read about the UIP: http://improve-usenet.org/

Re: Help me block the MI5 crap w/outlook

Ben C wrote:

> On 2007-12-23, Halloway wrote:
>> cwdjrxyz carefully considered the situation and wrote:
>>> On Dec 23, 11:07 am, Robert Jones wrote:
>> I suspect that M15 posts have been made by many
>>> different spammers in the past. Thus getting a spammer blocked is
>>> likely just a temporary fix.
>>
>> It's very likely to be a single psychotic individual. It's extremely
>> difficult to stop him (and it will be a 'him') because he can create any
>> number of gmail/Hotmail addresses and there's very little one can do
>> about it. If an IP address can be found then a complaint can be made to
>> his ISP but he can do this spamming from an internet cafe if he wants.
>>
>> Aside from the fact that it's as irritating as hell, it's interesting
>> that one determined individual can do this much damage.
>
> You need to kill based on Subject containing the string "MI5
> Persecution". Not on the From field since that appears to be randomly
> generated.

Thanks I did that one hour after I made my post. But was late getting back.
It seems to be working.

Re: Help me block the MI5 crap w/outlook

Beauregard T. Shagnasty wrote:
> Halloway wrote:
>
>> cwdjrxyz carefully considered the situation and wrote:
>>> I suspect that M15 posts have been made by many different spammers in
>>> the past. Thus getting a spammer blocked is likely just a temporary
>>> fix.
>> It's very likely to be a single psychotic individual. ...
>
> It is one man. Google for "Mike Corley".
>

I heard a strange, but plausible, explanation for the MI5 posts. I say
plausible because it explains some curious features about them.

First off, notice that all links to Mike Corley's site have been
removed. (It's actually at http://www.five.org.uk. Would he have removed
his own links?)

Next, notice that most of them (For some reason, excepting these latest
ones) have a date on the subject line which shows them to be pretty
ancient. Surely someone with paranoid delusions could invent some new
delusions from time to time!

Lastly, there is always a number on the subject line. This, I was told,
is the number of people who are tricked into replying to each post. The
suggestion is that Corley might have been behind the original posts, but
that they are now passed around usenet by trolls looking for a reaction.
It works!

It reminds me of the man looking over the edge of a cliff and saying 74,
74, 74, over and over again. A passer-by stops and asks what he is
doing, but the man continues to go 74, 74, 74..... Eventually the
passer-by finds that his curiosity gets the better of him and he looks
over the edge to see what the man is staring at, whereupon the
mysterious counter pushed him into the sea and goes, 75, 75, 75, 75......

Remember, just because you're paranoid doesn't mean that they aren't out
to get you!

Brian.

PS I don't actually let the MI5 posts bother me. Try posting on
uk.transport and mention that you think speeding is dangerous or
uk.rec.cycling and mention that you think helmets are a good idea.
You'll soon find the MI5 posts refreshingly sane by comparison. ;-)

Re: Help me block the MI5 crap w/outlook

In article ,
Brian Robertson wrote:

> It reminds me of the man looking over the edge of a cliff and saying 74,
> 74, 74, over and over again. A passer-by stops and asks what he is
> doing, but the man continues to go 74, 74, 74..... Eventually the
> passer-by finds that his curiosity gets the better of him and he looks
> over the edge to see what the man is staring at, whereupon the
> mysterious counter pushed him into the sea and goes, 75, 75, 75, 75......

The version in my collection is school kids behind a opaque fence
that has a little hole in it and constant chanting from the
school side. The numbers go up as each passerby that falls to
curiosity gets a poke in the eye.

--
dorayme

Re: Help me block the MI5 crap w/outlook

cwdjrxyz wrote:
> On Dec 23, 11:07 am, Robert Jones wrote:
>> John wrote:
>>> Please. I've created a bunch of rules and the spammer just won't go away!
>> Sorry, but I'm having the same problem with KNode on LINUX.
>>
>> I've first edited the scoring rules, then selected the spam and hit I to
>> ignore, giving an total score of -200. It was working fine until now.
>>
>> I'm kind of at a loss on how to handle spam barrage's like the recent one.
>
> There appears to be something different about these current M15 posts.

If you're trying to block M15 you won't succeed because it's MI5 (em eye 5).

Re: Help me block the MI5 crap w/outlook

On Dec 26, 6:57 am, Harlan Messinger
wrote:
> cwdjrxyz wrote:
> > On Dec 23, 11:07 am, Robert Jones wrote:
> >> John wrote:
> >>> Please. I've created a bunch of rules and the spammer just won't go away!
> >> Sorry, but I'm having the same problem with KNode on LINUX.
>
> >> I've first edited the scoring rules, then selected the spam and hit I to
> >> ignore, giving an total score of -200. It was working fine until now.
>
> >> I'm kind of at a loss on how to handle spam barrage's like the recent one.
>
> > There appears to be something different about these current M15 posts.
>
> If you're trying to block M15 you won't succeed because it's MI5 (em eye 5).

This morning, some groups such as alt.food.wine have posts with a
title that starts with M'I.5'Persecut ion . So you will have to
change your filters yet again.

Re: Help me block the MI5 crap w/outlook

cwdjrxyz wrote:
> On Dec 26, 6:57 am, Harlan Messinger
> wrote:
>> cwdjrxyz wrote:
>>> On Dec 23, 11:07 am, Robert Jones wrote:
>>>> John wrote:
>>>>> Please. I've created a bunch of rules and the spammer just won't go away!
>>>> Sorry, but I'm having the same problem with KNode on LINUX.
>>>> I've first edited the scoring rules, then selected the spam and hit I to
>>>> ignore, giving an total score of -200. It was working fine until now.
>>>> I'm kind of at a loss on how to handle spam barrage's like the recent one.
>>> There appears to be something different about these current M15 posts.
>> If you're trying to block M15 you won't succeed because it's MI5 (em eye 5).
>
> This morning, some groups such as alt.food.wine have posts with a
> title that starts with M'I.5'Persecut ion . So you will have to
> change your filters yet again.
I note that there are only five (good) messages in alt.food.wine
in the last few weeks, that reach 200 lines. The shortest M'I.5'
message posted this morning is 207 lines. Perhaps that information
could be something that could be used in a filter. But perhaps not
with a simple Thunderbird filter which only considers (1) Subject;
(2) from; and (3) date.

Could spam assassin help? Is there a way to run news thru spam
assassin? Could a Bayes filter help? The longer I think about this,
I think we are playing a game. We set up road blocks and he or she
devises a way to go around it. (Yuck! I just succeeded in making a
working filter in Thunderbird.)
Charles
************************************************************ *********
* Today's source of strife and conflict is found not so much in *
* outward circumstances as in the selfish and undisciplined heart. *
************************************************************ *********