OTish-regexp for multi addressed spam

[mike ring]

I hope some of the assembled brains can help.

I get a lot of spam addressed to [e-mail], [e-mail], [e-mail] etc.

I've tried to filter with the expression

btinternet{2,} I avoided the .com to dodge troubles with escaping metacharacters

which I think means 2 upwards occurences of btinternet.

But it doesn't work at all.

Do I need to somehow capture the strings x,y,z?

If so how?

The tutorials make it look easy as pie, but it don't work, it doesn't capture anything

Any help appreciated, I've fried my mind

mike

[Colin Wilson]

The only one I could help with, would be if they`re multiple to: addresses - if that`s the case, try...

(?is)([@].*){7,}

I don`t know how to put regexp together, this was one that someone on TheBat! mailing list did for me a while ago - looks for 7 email addresses in the TO: or CC: field (the way i`ve got it set up at least, in Mailwasher)

If you want filters for mailwasher i`ve got a heap of them (no bayesian filters in my setup) - seems to capture 90%+ of the spam for me.

One filter that seems to stop more spam than any other on its own for me is deleting anything from ".mail.ukl.yahoo.com" in the headers !

[Andy Pandy]

Hi Mike

How about...

(.*@btinternet.com,*){2}

Andy

[Andy Pandy]

And yes.. I've left the comma off the 2 :-(

Andy

[mike ring]

You're a star, Andy, now I'll have to try to work out how it works.

I put it in complete with brackets, though all the net tutors I've looked at don't mention them; (perhaps I'll try it without to check).

I *did* spot the comma, my hours spent kicking quantifiers round the floor weren't entirely wasted ;-)

It seemed so simple in the tutors!

I'm just trying poptray, which seems much improved since I last saw it and has a nice rule entering section. I've used Mailwasher for ages and love it, I've got some rules (that I was helped with) that get nearly all spam, and I don't like smart spamguards, it doesn't seem so smart to me to fetch the mail in the first place, specially on a slow dialup, though I'll be broadband (NOT btinternet) soon.

Many thanks

mike

[Andy Pandy]

Hi Mike

Glad you're happy. :-)

Whilst I still use Mailwasher to sift out subject matter, I've slightly changed my strategy by registering my own domain name for the princely sum, I think of £6 for 2 years.

I have then created several e-mail addresses, each for a different purpose and pointed them back to my ISP address, but of course I can use my e-mail client to 'sift' them into dedicated in-trays.

Using this method I have been able to update any users I want to keep and simply ignore the rest. Additionally, when like you I inevitably change ISP, it's a simple case af updating the forwarding site, rather than contacting many individuals and sites.

Andy

[mike ring]

I've never changed ISPs before! Says a lot for patience and fear.

Bt's dialup has been getting worse, and it seems deliberate, as traffic stops dead for say 3 0r 4 minutes in every 10.

It's so reliable I have a desktop game going to tide me over the outages, the old trick of looking for a different port doesnt have any effect.

And then they email everybody saying "look how rough dialup's getting, change to BT broadband".

It's the last straw of many.

I never thought of getting my own domain - it feels a bit like getting above me station (touches forelock)

mike

[Rob Morley]

mikering.com and michaelring.com are already gone, but you could have mike-ring.com or michael-ring.com

[Colin Wilson]

Piece of cake at

and will cost about =A36.04 for= =20 a .co.uk domain.

I`ve got "several" domains with them, and simply redirect all mail to my=20 "normal" email address - there`s a tick box for "forward all" when you=20 sign up, and the config page lets you set the address to send them to.

I use it to track who might be leaking my details, and personalise the=20 email address I give out according the company i`m in touch with, i.e.=20 maplins@xxxxx ticketmaster@xxxxx - that way, if I ever receive email to=20 those addresses from someone other than the company, I know where it was=20 leaked from, and can instantly blacklist the email address and bollock=20 the company.

(incidentally Ticketmaster are the only cun*s i`ve ever caught passing=20 on my details)