$ Rev 2003-06-23 $
(Updated every few weeks, so check: http://w5hq.com/MailWasher)
=========================================================================
=======
CONTENTS:
1. DISCLAIMER
2. HOW TO INSTALL THE FILTERS
3. THE FILTERS
4. BEFORE USING THE FILTERS ()+([\w\s,\.\-
]){1,20}){3}",Body,containsRE,"()[\w\s,\.\-]{1,20}(\1([\w\s,\.\-
]){1,20}){2}"
[enabled],"[2] Insurance/Healthcare (S,B)","[2] Insurance/Healthcare
(S,B)",16711680,OR,Blacklist,Delete,Subject,contains,"Rates
Reduced",Subject,contains,"Life
Insurance",Subject,containsRE,"(Affordable|Reasonable) .*(Health
?care|Dental)",Body,contains,"Life Insurance"
[enabled],"[2] International Drivers (S,B)","[2] International Drivers
(S,B)",16711680,OR,Blacklist,Delete,Subject,containsRE,"International
Driver(s|'s|) License",Body,containsRE,"International Driver(s|'s|)
License"
[enabled],"[2] Invalid Header Field (H)","[2] Invalid Header Field
(H)",16711680,OR,Blacklist,Delete,EntireHeader,doesn'tContainRE,(?m)^Mess
age-ID:\s+,EntireHeader,doesn'tContainRE,"(?m)^Date:\s+([A-
Z]{3},\s+)?\d{1,2}\s+[A-Z]{3}\s+\d{4}\s+\d{1,2}:\d{2}(:\d{2})?\s+(([+-
]\d{4})|([CEMP][DS]|GM|U)T|[AMNYZ])"
[enabled],"[2] Investing (S)","[2] Investing
(S)",16711680,OR,Blacklist,Delete,Subject,contains,"Investment Report"
[enabled],"[2] Loans/Refinance (S)","[2] Loans/Refinance
(S)",16711680,OR,Blacklist,Delete,Subject,containsRE,Refinance|Mortgage,S
ubject,containsRE,"(Homeowner|Get Your)
.*Loan",Subject,containsRE,"((Sell or Buy)|(Buy or
Sell)).+Home",Subject,containsRE,"Lowest.+Rates|Lower Your
.+Payment",Subject,containsRE,(No|Low).Cost.+(Loan|Application),Subject,c
ontainsRE,"Pre.?Approved|Perfect
Credit|You(r|'re)\W+Approved",Subject,containsRE,"Need Credit\?"
[enabled],"[2] Misc. Ads (S)","[2] Misc. Ads
(S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"(?-
i)GUARANTEED(?i)|[,-] Guaranteed",Subject,containsRE,"Pennies A Day|As
Seen On|Act Now|Risk
Free|Get.+(Today|Now)!",Subject,containsRE,"(Seized|Unclaimed)
(Property|Properties)",Subject,containsRE,"In (Just|Only)
(Minutes|Moments)",Subject,containsRE,"^Now Available|Try Our New|We Can
Help|No Cost",Subject,containsRE,Call\s\S*\d\d,Subject,containsRE,"Lowest
(Price|Rate)|Save (Hundreds|Thousands)",Subject,containsRE,"100%
(Safe|Effective|Guaranteed)|Guarantee .*Results|Results Guaranteed|Cut.+
Cost",Subject,containsRE,"No.Obligation|No.Risk|Seen On TV|Limited
Time|Join Now|\sNow!|Why Wait"
[enabled],"[2] Misc. Ads (B)","[2] Misc. Ads
(B)",16711680,OR,Blacklist,Delete,Body,containsRE,"Revealed.{1,10}Pros\W"
,Body,containsRE,"Money.Back Guarantee|Real Savings
On",Body,containsRE,"Dear Homeowner|No Credit Card|To Learn
More",Body,containsRE,"Risk.Free
Trial",Body,containsRE,"(Special|Limited|Limited
Time).{1,25}(Offer|Opportunity)",Body,containsRE,"Get Your Free|Order Now
And Get"
[enabled],"[2] Money Making 1 (S)","[2] Money Making 1
(S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"((Work(ing|)
(From|At))|Money At) .*Home",Subject,containsRE,"Learn How To Make|Get
Paid (To|For)|Make A Fortune|Build Your
Wealth",Subject,containsRE,"(\$|Bonus|Free).+(\$|Bonus|Free|Paid|Hour|Rea
l
Estate)",Subject,containsRE,"(Residual|Guaranteed|Serious|Earn|Mak(e|ing)
|Extra|Long
Term).+(\$|Money|Income)",Subject,contains,Cash,Subject,containsRE,"Busin
ess Owners|Increase
Sales|Advertise.+Business",Subject,containsRE,"Be.+Your Own
Boss",Subject,containsRE,"(Excellent|Wonderful|Money
Making|Investment).+Opportunity",Subject,containsRE,"(Home.Based|Your
Own).+Business",Subject,containsRE,"We Will Train|At Home Rep|Side
Business"
[enabled],"[2] Money Making 2 (S)","[2] Money Making 2
(S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"%.+Money|Money.+%|M
oney Making",Subject,containsRE,"Advance Your Career|Career
Advancement",Subject,containsRE,"Your Own Hours|Work(|ing).+When You
Want|Employment Opportunity"
[enabled],"[2] Money Making (B)","[2] Money Making
(B)",16711680,OR,Blacklist,Delete,Body,contains,"No Experience
Necessary",Body,contains,"Per Week!",Body,containsRE,"(Earn(ing|)|Make)
Money .{1,15}From Home",Body,contains,"Make Up To $"
[enabled],"[2] My Name/E-mail* (F,S)","[2] My Name/E-mail*
(F,S)",16711680,OR,Blacklist,Delete,Subject,contains,jwsmith2,From,contai
ns,jwsmith2
[enabled],"[2] Not A Recipient* (T,C)","[2] Not A Recipient*
(T,C)",16711680,AND,Blacklist,Delete,To,doesn'tContainRE,MailBoxName1|Mai
lBoxName2,CC,doesn'tContainRE,MailBoxName1|MailBoxName2
[enabled],"[2] Pharmacy (S,B)","[2] Pharmacy
(S,B)",16711680,OR,Blacklist,Delete,Subject,containsRE,V[i1l]agra|Erectil
e,Subject,containsRE,"(?-i)HGF|HGH(?-i)|Human
Growth",Body,containsRE,Growth.+Hormone|(?-
i)HGH|HGF(?i),Subject,containsRE,"Let Our Doctors|Prescribed
Online",Body,containsRE,"Online
(Prescription|Rx|Drug|Pharmacy)",Subject,containsRE,"Online
(Prescription|Rx|Drug|Pharmacy)",Body,containsRE,"Prescription Drugs
Online|bestexpressmeds",Subject,containsRE,"Non.?Prescription|Herbal
Alternative"
[enabled],"[2] Possible Virus/Worm/Trojan (S,B)","[2] Possible
Virus/Worm/Trojan
(S,B)",16711680,OR,Delete,TakesPrecedence,Subject,contains,"Fw: Naked
Wife",Subject,contains,"Important: Windows
update",Subject,contains,"Internet Security
Update",Subject,containsRE,".+you have an E-Card from.+|.+you have a
greeting card from .+\.",Body,containsRE,"(?i)Friend-
Greetings\.com|FriendGreetings\.com "
[enabled],"[2] Printer/Toner (S)","[2] Printer/Toner
(S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"(Ink(jet)?|Printer)
Cartridges",Subject,containsRE,(Ink.+toner)|(Toner.+Ink)
[enabled],"[2] Probable Hoax (S)","[2] Probable Hoax
(S)",16711680,OR,Delete,TakesPrecedence,Subject,contains,"Bill 602P"
[enabled],"[2] Satellite/Cable TV (S)","[2] Satellite/Cable TV
(S)",16711680,OR,Blacklist,Delete,Subject,containsRE,(DirecTV|DishNet),Su
bject,containsRE,Free.+(Installation|Satellite),Subject,containsRE,"(TV|S
ystem|Digital) .+Installed",Subject,containsRE,"(Digital|Cable)
Descramble|Descramble (Digital|Cable)"
[enabled],"[2] S P A C E D Subject (S)","[2] S P A C E D Subject
(S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"[A-Z]([^A-Z0-
9]+)([A-Z]\1){2,}[A-Z]",Subject,containsRE,"([A-Z]+[:=\.\-_]){3,}"
[enabled],"[2] Spy/Detective (B,S)","[2] Spy/Detective
(B,S)",16711680,OR,Blacklist,Delete,Subject,containsRE,(Uncover.+Truth|Fi
nd|Investigate).+Anyone,Subject,containsRE,"(Background
Investigation|Investigative|Spy|Top Secret)
Software",Subject,containsRE,"Detective Software|Private Eye|Spy On
(People|Anyone)",Body,containsRE,"Spy On Anyone|Discover.{1,15}Secrets"
[enabled],"[2] Telephone/Long Distance (S)","[2] Telephone/Long Distance
(S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"(Phone|Long
Distance|Calling) Card",Subject,containsRE,"Long
Distance.+(Calls|Calling|Service|Rates)",Subject,containsRE,"Rate
Plans?",Subject,containsRE,"(Paying|Cheap(est|)|Lower).+Long
Distance",Subject,containsRE,(Night|Weekend).+Minutes,Subject,contains,"N
o Monthly Fee"
[disabled],"[2] Vague Recipient (T)","[2] Vague Recipient
(T)",16711680,OR,Blacklist,Delete,To,containsRE,"Friend|Undisclosed
Recipients",To,containsRE,"Valued
(Customer|Consumer)",To,containsRE,"Rates
At.+Lows",To,containsRE,^(Postmaster|Webmaster|Administrator|User)$
[enabled],"[2] Weight Loss (S)","[2] Weight Loss
(S)",16711680,OR,Blacklist,Delete,Subject,containsRE,We[i1l]ght.Loss,Subj
ect,containsRE,(Lose|Melt).+(LBS|Pounds|We[i1l]ght|Fat),Subject,containsR
E,"Dieting|Unwanted (Weight|Pounds)",Subject,containsRE,"Fat
Burn(ing|er)|Burn(ing|) Fat",Subject,containsRE,"Get.+Firm Abs"
[enabled],"[3] Base 64 Encoded (B)","[3] Base 64 Encoded
(B)",33023,OR,Blacklist,Delete,Body,contains,"Content-Transfer-Encoding:
base64",EntireHeader,contains,"Content-Transfer-Encoding: base64"
[enabled],"[3] Contains Script (B)","[3] Contains Script
(B)",33023,OR,Delete,Body,contains,"SCRIPT LANGUAGE="
[enabled],"[3] Opt-Out (B)","[3] Opt-Out
(B)",33023,OR,Blacklist,Delete,Body,containsRE,"""?Remove""? In the
Subject",Body,containsRE,"To Stop Receiving.{1,20}Offers|To
Unsubscribe",Body,containsRE,"To Be (Removed|Taken
off).{1,10}Mailing",Body,containsRE,"See.{1,10}Unsubscribe
Instructions",Body,containsRE,"Click (Here|The
Link)",Body,containsRE,"Future Mailings|You Are
Receiving",Body,containsRE,"You.{1,10}Opted.{1,10}To
Receive.{1,10}(Promotions|Offers)"
[enabled],"[3] Questionable Link (B)","[3] Questionable Link
(B)",33023,OR,Blacklist,Delete,Body,containsRE,http://[1-
9],Body,containsRE,"Click.{1,20}To
Order",Body,containsRE,http://[\w\.]+@,Body,contains,"href=""http://massi
vefreehosting.com"
[enabled],"[3] Subject All Caps/Missing (S)","[3] Subject All
Caps/Missing (S)",33023,OR,Delete,Subject,doesn'tContainRE,(?-i)[a-
z],Subject,doesn'tContainRE,.
[enabled],"[3] Suspicious Origin (F)","[3] Suspicious Origin
(F)",33023,OR,Blacklist,Delete,From,containsRE,@(msn\.com|yahoo\.com|hotm
ail\.com|excite\.com|aol\.com),From,containsRE,you(rmail|rdomain)\.(net|c
om|org|cc),From,containsRE,friend@public\.(net|com|org|cc),From,containsR
E,"promotions?|bargains?|Screen
?Saver",From,containsRE,Anybody|Anyone|Bulk|Casino|Credit|Everybody|Every
one|Friend|Hotdeals|Nobody|Promo|Savetrees|Winner|User|XX+|Free|AutoQuote
,From,containsRE,offers|sav(e|ings)|special|free|hotdeals|wincash,From,co
ntainsRE,"Inkjet ?Cartridges",From,containsRE,"Relief From|Concerned|Work
At Home",From,containsRE,Suffering|Unwanted|Guaranteed|opt[\._-
]?in,From,containsRE,"(.)\1{3,}|(.+_){2,}|([A-Z]+[\.\-_]){3,}"
[enabled],"[3] Suspicious Routing* (H)","[3] Suspicious Routing
(H)",33023,OR,Blacklist,Delete,EntireHeader,containsRE,(?m)^Received:.+(\
.ru|\.cz|\.ro|\.md|\.fi|\.dk|\.vu|\.kr|\.no|\.br|\.jp|\.tw|\.cn|\.nl|\.co
|\.in|\.se|\.ac|\.it|\.fr|\.tr|\.be|\.at|\.za|\.es)[^\.\w]
[enabled],"[3] Wide Distribution (T)","[3] Wide Distribution
(T)",33023,OR,Delete,To,containsRE,"(.+@){10,}",CC,containsRE,"(.+@){10,}
"
[disabled],"POPFile Spam","POPFile
Spam",255,AND,Blacklist,Delete,EntireHeader,contains,"X-Text-
Classification: spam"
============================
4. BEFORE USING THE FILTERS:
============================
Some of the filters require customization before use, because they
check
for something specific to you - like your mailbox name, etc. To
edit the
filters, open MailWasher, hit Ctrl-I (or use the Filter Sidebar),
and
customize any filter marked with an asterisk (*) at the end of its
name:
* Enter the country codes you most often receive spam from in the
"Suspicious Routing" filter. Make sure the filter DOES NOT
include your
country code or that of friends you often correspond with. You
can
always add more as you go if you are not sure -- watch your
blacklist
for hints. Refer to the Country Codes list at the bottom of this
e-mail
for ideas, if you like.
* Change the "My Name/E-mail" filter to contain your mailbox name.
For
example, if your e-mail address is jwsmith2@msn.com, you would
enter
"jwsmith2". Do this for each account you check. Also, be sure to
put
all of your legitimate e-mail addresses in your "Friends" list.
* Put the e-mail address of all of the accounts that you are
checking in
the "Not a recipient" filter. If you don't care to use this
filter,
you can disable it, and enable the more generic "Vague Recipient
List"
filter, but it does not work as well. Be sure your friends list
is up
to date when using this filter, and also pay attention to the
next
point:
* Add any mailing lists to which you belong to the "Mailing List"
filter.
This prevents messages from them being marked as spam. (Mailing
list
emails normally have the same "To" address, like
"mygroup@yahoogroups.com", but can come from many different
"From"
addresses, so you would not be able to add them all to your
"Friends"
list.)
* If there is a person who has been an annoyance, put their
address in
"Always Bounce" filter. After a few attempts, perhaps they will
get the
idea that the mailbox has been deleted. ;-)
=================================
5. HOW THE FILTERS ARE ORGANIZED:
=================================
The filters are named to aid in sorting and recognition. The
convention
is:
[Priority] Name (Type)
For example:
[2] Misc. Ads (S)
Priority:
There are currently three priority fields:
1: High priority, such as detecting legitimate e-mails
2: Normal priority, used for most filters
3: Low priority, for catchall filters such as Suspicious Routing
Type:
Indicates the mail field(s) being checked.
B = Body
C = CC
F = From
H = Entire Header
R = Return Path
S = Subject
T = To
etc.
The filters are sorted in [Priority, Name, Type] order when
distributed.
==================
6. TIPS AND HINTS:
==================
* Make heavy use of the Blacklist and Friends list. If your
filtering is
aggressive, it can be almost as important that known friendly
addresses are in your Friends list as having spammers in your
Blacklist. Also, these are the only addresses that you can be
SURE
are spammers or friends - the rest is just a good guess by the
various
filters.
* Check through your blacklist from time to time to see if there
are
many offenders from a single domain, or with the same name from
multiple domains, which you may then blacklist using a wildcard
expression. Use the spiffy "Sort the emails in the blacklist and
friends list by domain" option to help you find them, by sorting
by
name, then by domain. For example, do you see the pattern here?
fat-burner2301w07@excite.com
fat-burner4520u33@excite.com
fat-burner7365q45@excite.com
fat-burner7816k13@excite.com
[...]
Try replacing these with fat-burner*@excite.com instead. Make
sure when
blacklisting an entire domain that it is a spam domain, however,
or you
may filter legitimate e-mails. The danger is much less if the
domain
has a name like "opt-in.com", "greatdeals.org", or
"SpammersRUs.net".
;-) If you want to do more precise wildcard blacklisting using
regular expressions, modify the "Extended Blacklist" or
"Suspicious
Origin" Filters.
* Set a reasonable expiration time for the addresses in your
blacklist.
Many spam addresses are forged and probably won't be used again.
* If you are sure of your blacklist, use the "Auto-delete
Blacklisted
Messages" option in MailWasher so that you don't have to look at
messages from the buggers anymore. :-)
* Use MailWasher's Heuristic filters to help locate spam.
* Every effort has been made to match likely spam words and
phrases and
*not* match friendly e-mails, but the best spam checker is still
you.
Modify and grow these filters to suit your individual needs.
Remember
that many spammers *want* their e-mails to look like personal e-
mail,
so you might have to be a little clever in what you look for.
* Tweak! Modify! If you don't like something, change it! The more
you
work with it, the better you will get. Put on your nerd hat and
go for
it.
* There has been a lot of debate regarding bouncing e-mail
messages. Some
people are almost violently opposed to it because of the extra
load it
creates for the mail servers, and there is merit to their
argument. In
my personal experience, bouncing has been effective in only
about 1% of
the cases, down from about 5% a couple of years ago. Most of
that seems
to be due to the increase in in forged return addresses -- less
than
10% of the spam I receive has a valid return address. I've found
that
bouncing is most effective against bothersome individuals, or
"legitimate" ad list maintainers (is that an oxymoron, or
what?!). In
summary, I still find bouncing effective in certain cases. The
approach
I take is to selectively bounce. If the message looks like it
has a
forged address, it will probably do no good to try to bounce it.
==================
7. TROUBLESHOOTING
==================
* SLOW FILTERING
If your filtering speed is not acceptable, it is possible that the
number
of regular expressions in the filters and wildcards in the
Blacklist are
the culprits. You can try disabling some of the filters that are
least
effective for you, and removing some of the wildcard Blacklist
items.
* FILTERS MARK LEGITIMATE EMAILS AS SPAM
This may happen from time to time, and no spam filter is immune
from it.
I've experimented with a number of different filter types -- even
ones
which rely on people manually marking spam for submission to a
central
database -- and there were still false positives. It turns out
that one
person's spam might be another person's "ham"! You can edit a
filter to
remove the problematic portion, disable it completely, or simply
add the
sender to your "Friends" list.
* FILTERS NOT CATCHING ALL SPAM
Spammers are pretty crafty, so there are bound to be some missed
spam
messages. In some cases, such as Base64 encoded messages, or ones
with
special characters purposly inserted in the middle of words (e.g.:
MALE ORGAN), it might not be possible to
directly
catch the spam phrases. Try to look for other indicators,
including the
technique used to obfuscate the spam, and add them to your
filters.
If you use a product such as Firetrust Benign, you can daisy-chain
MailWasher and Benign together. Benign will decode Base64, get rid
of
extraneous comments, etc., that spammers try to use to confuse
filters.
* MAILWASHER GIVES ACCESS VIOLATION ON STARTUP, OR DOES NOT
REGOGNIZE ALL
OF THE FILTERS
This is most commonly caused by a badly formatted filters.txt
file. Some
editors will break lines if they are long by inserting CR or CR/LF
characters. Unfortunately, this will make the file unusable.
1) Go to the end of the file and delete any extra characters
(usually
blank spaces or extra lines) at the end of the text. Your
cursor
should be sitting behind the very last character when you are
through.
2) Look for, and delete, any blank lines.
3) If the above options do not work, go back into the file and
review it
for wrapped lines. The filter lines should be too long to fit
in the
editor window, and each line should begin with "[enabled]" or
"[disabled]". If using Notepad as your editor, be sure that
Word
Wrap is turned off.
*** IF ALL ELSE FAILS ... HELP!! (Contact Info) ***
If you find yourself stuck, drop a note in the MailWasher support
forum
at http://www.computercops.biz/forum50.html. I monitor the forum,
as do a
number of other very helpful folks who can give you a hand even if
I'm
not around. The Firetrust forums in general can be accessed at
http://www.computercops.biz/forum-cat15.html.
===============================
8. SUGGESTED STARTER BLACKLIST:
===============================
I highly recommend using blacklists to mark emails from known spam
domains, or from domains which have no MX records (so that you
can't
reply to their emails). I go so far as to auto-delete blacklisted
messages, so that I never even have to see the spam from these
fellows.
Use caution if you do that, though - if a friend accidentally gets
on
your blacklist, you will never see their emails again!
Wildcards cause slower address matching, so if your speed is
unacceptable, try backing some of these out. Also, glance through
them
and make sure that they don't filter out any legitimate domains
from
which you may want to accept e-mails.
Be sure to set a resonable expiration time on unused addresses in
your
blacklist, or you will find it getting huge. Many spammers forge
an
address and use it only once, so there is no use keeping it
around. I use
90 days, but you may want to use more or less depending on your
volume of
spam.
You can install the addresses below by copying them under the
[Blacklisted emails] section of blacklist.txt (be sure to leave a
blank
line between "[Blacklisted emails]" and the first list item, if
your list
is empty), or you may copy and paste each one (minus the space and
number
at the end)into the MailWasher "Wildcard expression" box when
adding an
entry to the Blacklist.
*@*.? 37766
*@*.actionemail.com 37772
*@*.aol.com 37766
*@*.azogle.com 37766
*@*.clickboost.com 37702
*@*.cm02.net 37766
*@*.cm03.net 37763
*@*.compuserve.com 37766
*@*.dailyspecialdaily.com 37766
*@*.dlbnetwork.net 37772
*@*.emailcourrier.com 37768
*@*.eserve01.com 37766
*@*.ew01.com 37774
*@*.ew02.com 37766
*@*.gettinthewordout.com 37766
*@*.homesweb.com 37766
*@*.hotmail.com 37740
*@*.msn.com 37718
*@*.netscape.net 37774
*@*.null 37766
*@*.offersonthenet.com 37766
*@*.postalmanager.com 37766
*@*.rbtechnologies.net 37766
*@*.responsenetwork.net 37766
*@*.responsesystems.org 37766
*@*.savingspartner.com 37766
*@*.specialmailoffers.com 37766
*@*.superdealnow.com 37693
*@*.temd.net 37770
*@*.unitedmarketingstrategies.com 37766
*@*.yahoo.com 37757
*@*deals.+ 37774
*@*direct.+ 37772
*@*offers.+ 37774
*@*promotion*.+ 37766
*@+.tep1.com 37766
*@1-discounts.com 37766
*@4freespeech.us 37698
*@4mens-health.com 37766
*@4optin.net 37766
*@aaaaabb.com 37766
*@aaacdr.com 37773
*@adelivery.com 37693
*@admanmail.com 37766
*@asp-platform.com 37769
*@b.fwdml.com 37766
*@bargaineye.com 37766
*@bnb4.com 37702
*@businessvvorld.com 37751
*@buyercooperative.com 37766
*@chipsanddip.net 37751
*@clickboost.com 37702
*@clickitgood.com 37766
*@dealbag.com 37766
*@dealcop.com 37768
*@dealcowboy.com 37766
*@discountcertificates.com 37773
*@dlbnetwork.net 37766
*@dmx0.com 37766
*@dmx1.com 37691
*@edirectbroadcast.com 37766
*@emailbargains.cc 37766
*@emailbenefits.com 37687
*@emailpartners.com 37702
*@emailresults.* 37766
*@etracks.com 37766
*@extremepricecuts.com 37698
*@faceolpdk.net 37766
*@finalblast.com 37709
*@flashmail.com 37719
*@floortwo.com 37766
*@free2sample.com 37768
*@free-inter.net 37750
*@frugaljoe.com 37766
*@fultondirect.com 37766
*@gr8dls.com 37766
*@greatestsalesoffer.com 0
*@greenlightmail.com 37735
*@homesweb.com 37766
*@hotdealtime.com 37696
*@ientrymail.com 37773
*@ineedhits.com 37766
*@ixpweb.com 37771
*@jsuati.com 37773
*@jumpjive.com 37766
*@keromail.com 37766
*@labelsdaily.com 37766
*@labelxyz.com 37766
*@listpower.com 37772
*@lists.inglesa.net 37766
*@lists.postlite.com 37766
*@lists.postmastergeneral.com 37766
*@lists.zoanmail.com 37774
*@lotto-mail.com 37693
*@magic-inbox.com 37766
*@mail.directem.com 37766
*@mail.krazykash.com 37774
*@mail.realem.com 37766
*@mail5.optin-servers.com 37702
*@mailer.democrats.org 37771
*@mailexcite.com 37733
*@mandic.com.br 37766
*@mediaone.net 37735
*@mgob.woodlandmail.com 37766
*@migada.com 37689
*@mmsn.com 37766
*@monterey.tp40.net 37712
*@offer100.com 37766
*@offeremail.com 37698
*@offerwarehouse.com 37766
*@opti10.com 37702
*@opti8.com 37702
*@opti9.com 37702
*@opt-in.coopt.com 37766
*@optindeals.com 37766
*@optinemail.com 37766
*@optinprogram.net 37766
*@optmailer.net 37766
*@oselwz.com 37766
*@over*l*y*cute.net 37766
*@powerfulquotes.com 37766
*@rb27ex.com 37771
*@reply.inboxoffers-mail.com 37770
*@reply.mb00.net 37774
*@reply.pm0.net 37766
*@save99.com 37766
*@sbase22.com 37774
*@sbase30.com 37702
*@send-e-mail.com 37766
*@sendingtoyou.com 37766
*@smartdiscounts.net 37766
*@smarteryou.com 37702
*@specialoffers12.com 37763
*@speedyvalues.com 37766
*@sporttime.info 37766
*@spyvalues.com 37766
*@super-bargains.net 37766
*@thedealdoctor.com 37763
*@trackingclicks.com 37766
*@valuegazette.com 37763
*@vampiress.zzn.com 37769
*@varietymail.net 37693
*@vendeeamerica.com 37766
*@versioncorp.com 37705
*@winacomputer.net 37771
*@xmr3.com 37770
*@xtreme-dealz.com 37763
*@yosup.com 37702
*@yourbigfun.com 37766
*@yourbigvote.com 37766
*@yourmailsource.com 37774
*@yourwap.com 37746
*_adult_*@yahoo.com 37766
*_cock_*@yahoo.com 37766
*_girls_*@yahoo.com 37766
*_horny_*@yahoo.com 37766
*_naked_*@yahoo.com 37766
*_pussy_*@yahoo.com 37766
*_sluts_*@yahoo.com 37766
*_teens_*@yahoo.com 37766
*_virgin*_*@yahoo.com 37766
*_wet_*@yahoo.com 37766
aka+@excite.com 37766
bestoffers2@*.*.* 37698
crabtree*@yahoo.com 37766
fat-burner*@excite.com 37707
final??@seznam.cz 37768
free_*@yahoo.com 37766
free-whiteteeth*@excite.com 37766
irnmh+ooem@yahoo.com 37729
l.o.a.n.newsletter+@+ 37766
lst*1@cellb???.net 37766
mail*@mail.play4keeps.com 37774
mike0123+@yahoo.com 37766
mortgage.quote+@* 37766
niki+niki@yahoo.com 37725
offers@* 37774
optitarget-+@opti+.com 37766
suayjoe@* 37766
successx*@21cn.com 37766
tryu567@* 37766
updates*@smilepop.com 37766
===========================
9. COUNTRY CODES REFERENCE:
===========================
Use these country codes in your filters (such as "[3] Suspicious Routing*
(H)"),
or in your blacklist.
af Afghanistan
al Albania
dz Algeria
as American Samoa
ad Andorra
ao Angola
ai Anguilla
aq Antarctica
ag Antigua And Barbuda
ar Argentina
am Armenia
aw Aruba
ac Ascension Island
au Australia
at Austria
az Azerbaijan
bs Bahamas
bh Bahrain
bd Bangladesh
bb Barbados
by Belarus
be Belgium
bz Belize
bj Benin
bm Bermuda
bt Bhutan
bo Bolivia
ba Bosnia And Herzegowina
bw Botswana
bv Bouvet Island
br Brazil
io British Indian Ocean Territory
bn Brunei Darussalam
bg Bulgaria
bf Burkina Faso
bi Burundi
kh Cambodia
cm Cameroon
ca Canada
cv Cape Verde
ky Cayman Islands
cf Central African Republic
td Chad
cl Chile
cn China
cx Christmas Island
cc Cocos (Keeling) Islands
co Colombia
km Comoros
cg Congo
cd Congo The Democratic Republic Of The
ck Cook Islands
cr Costa Rica
ci Cote D'ivoire
hr Croatia
cu Cuba
cy Cyprus
cz Czech Republic
dk Denmark
dj Djibouti
dm Dominica
do Dominican Republic
tp East Timor
ec Ecuador
eg Egypt
sv El Salvador
gq Equatorial Guinea
er Eritrea
ee Estonia
et Ethiopia
fk Falkland Islands
fo Faroe Islands
fj Fiji
fi Finland
fr France
fx France Metropolitan
gf French Guiana
pf French Polynesia
tf French Southern Territories
ga Gabon
gm Gambia
ge Georgia
de Germany
gh Ghana
gi Gibraltar
gr Greece
gl Greenland
gd Grenada
gp Guadeloupe
gu Guam
gt Guatemala
gg Guernsey
gn Guinea
gw Guinea-Bissau
gy Guyana
ht Haiti
hm Heard And Mc Donald Islands
va Holy See (Vatican City State)
hn Honduras
hk Hong Kong
hu Hungary
is Iceland
in India
id Indonesia
int International
ir Iran
iq Iraq
ie Ireland
im Isle of Man
il Israel
it Italy
jm Jamaica
jp Japan
je Jersey
jo Jordan
kz Kazakhstan
ke Kenya
ki Kiribati
kp Korea, Democratic People's Republic Of
kr Korea, Republic Of
kw Kuwait
kg Kyrgyzstan
la Lao People's Democratic Republic
lv Latvia
lb Lebanon
ls Lesotho
lr Liberia
ly Libyan Arab Jamahiriya
li Liechtenstein
lt Lithuania
lu Luxembourg
mo Macau
mk Macedonia
mg Madagascar
mw Malawi
my Malaysia
mv Maldives
ml Mali
mt Malta
mh Marshall Islands
mq Martinique
mr Mauritania
mu Mauritius
yt Mayotte
mx Mexico
fm Micronesia
md Moldova
mc Monaco
mn Mongolia
ms Montserrat
ma Morocco
mz Mozambique
mm Myanmar
na Namibia
nr Nauru
np Nepal
nl Netherlands
an Netherlands Antilles
nc New Caledonia
nz New Zealand
ni Nicaragua
ne Niger
ng Nigeria
nu Niue
nf Norfolk Island
mp Northern Mariana Islands
no Norway
om Oman
pk Pakistan
pw Palau
pa Panama
pg Papua New Guinea
py Paraguay
pe Peru
ph Philippines
pn Pitcairn
pl Poland
pt Portugal
pr Puerto Rico
qa Qatar
re Reunion
ro Romania
ru Russian Federation
rw Rwanda
kn Saint Kitts And Nevis
lc Saint Lucia
vc Saint Vincent And The Grenadines
ws Samoa
sm San Marino
st Sao Tome And Principe
sa Saudi Arabia
sn Senegal
sc Seychelles
sl Sierra Leone
sg Singapore
sk Slovakia
si Slovenia
sb Solomon Islands
so Somalia
za South Africa
gs South Georgia And The South Sandwich Islands
es Spain
lk Sri Lanka
sh St. Helena
pm St. Pierre And Miquelon
sd Sudan
sr Suriname
sj Svalbard And Jan Mayen Islands
sz Swaziland
se Sweden
ch Switzerland
sy Syrian Arab Republic
tw Taiwan
tj Tajikistan
tz Tanzania, United Republic Of
th Thailand
tg Togo
tk Tokelau
to Tonga
tt Trinidad And Tobago
tn Tunisia
tr Turkey
tm Turkmenistan
tc Turks And Caicos Islands
tv Tuvalu
ug Uganda
ua Ukraine
ae United Arab Emirates
gb United Kingdom
uk United Kingdom
us United States
um United States Minor Outlying Islands
uy Uruguay
uz Uzbekistan
vu Vanuatu
ve Venezuela
vn Viet Nam
vg Virgin Islands (British)
vi Virgin Islands (U.S.)
wf Wallis And Futuna Islands
eh Western Sahara
ye Yemen
yu Yugoslavia
zm Zambia
zw Zimbabwe
=============================
10. HISTORY, BUGS, TODO, ETC.
=============================
HISTORY:
--------------------
2003-06-23 (Monday)
--------------------
* Fixed some bugs in the following filter (thanks to "TonyKlein" for
reporting!
hopefully I didn't create any new problems.)
[enabled],"[3] Opt-Out (B)","[3] Opt-Out
(B)",33023,OR,Blacklist,Delete,Body,containsRE,"""?Remove""? In the
Subject",Body,containsRE,"To Stop Receiving.{1,20}Offers|To
Unsubscribe",Body,containsRE,"To Be (Removed|Taken
off).{1,10}Mailing",Body,containsRE,"See.{1,10}Unsubscribe
Instructions",Body,containsRE,"Click (Here|The
Link)",Body,containsRE,"Future Mailings|You Are
Receiving",Body,containsRE,"You.{1,10}Opted.{1,10}To
Receive.{1,10}(Promotions|Offers)"
* Altered this filter to work better by catching more types of spacing
characters. Thanks to "shortbackandsides" for the suggestion!
[enabled],"[2] S P A C E D Subject (S)","[2] S P A C E D Subject
(S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"[A-Z]([^A-Z0-
9]+)([A-Z]\1){2,}[A-Z]",Subject,containsRE,"([A-Z]+[:=\.\-_]){3,}"
* Changed this filter to catch some of those fake HTML tags used to break
up
words:
[enabled],"[2] HTML Spam Tricks (B)","[2] HTML Spam Tricks
(B)",16711680,OR,Blacklist,Delete,Body,containsRE,"font
size=""?0""?",Body,containsRE,"(()+([\w\s,\.\-
]){1,20}){3}",Body,containsRE,"()[\w\s,\.\-]{1,20}(\1([\w\s,\.\-
]){1,20}){2}"
* Updated the following filters with minor tweaks:
[enabled],"[2] Adult (S)","[2] Adult
(S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"XXX|(Adult|Mature)
Content|Adults? Only|No
Minors|Uncensored",Subject,containsRE,"(Rough|Hot|Teen).*
Adult|Sex|Barely Legal Teen|Wet Teen|Teen
(Action|Sweetheart|Orgies)|Bitch|Escorts|(^|\s)Cum($|\s|-
)|C0ck|Pen[i1l]s|Lesbian",Subject,containsRE,"Sluts|F[u\*\-
_~^]ck|Pussy|Pussies|(Suck|Big|Massive|Large) Cock|Virgin\W|Hard-
?core|Cumshot|\WCum\W|Suck My|Lesbo Site|Blow ?Job|Sex Videos|Hot(test)?
.*P[i1l]cs",Subject,containsRE,(?-
i)ADULT|COCKS,Subject,containsRE,"(Nude|Naked|Sex) .*Pic|Barely
(Legal|Adult)|(Wet|Dripping|Hot)
(Teens|Lesbians)",Subject,containsRE,"Adult Links|Sex (Show|Site)|Porn
(Movies|Flick)|Married.+But.+Lonely|Hot Moms|Sexy Photo|Wet
Sex",Subject,containsRE,"Horny.+(Housewives|Teens)|(Naked|Nude)
(Lesbians|Women|Teens|Girls)",Subject,containsRE,Animals.+(Girls|Women)|(
Girls|Women).+Animals,Subject,containsRE,"Tight(est)?
(Pussy|Vagina)|Dicks|V[il1]rg[il1]ns|P[0@]rn|L[o0][l1][il1]ta|Gang[ -
]?bang| Dong|Hardc0re|H0rny|Cunt|Twat|Gir1s|\bTits?\b|Asshole"
[enabled],"[2] Debt Consolidation (S)","[2] Debt Consolidation
(S)",16711680,OR,Blacklist,Delete,Subject,containsRE,(Debt|Bill).+(Paymen
ts|Relief|Free|Elimination|Help|Assistance|Termination),Subject,containsR
E,"(Erase|Slash|Eliminate|Reduce|Cut|Too Much|Get Out Of|Credit Card|Away
Your|Consolidate|Freedom From|Take Control|Solutions?
To|Without|Clear|Paying|Terminate)
.*(Debt|Bills)",Subject,containsRE,"(In|Got|Overwhelmed|Too
(Much|Many)|Wipe
Out|Worry.+About|Dissolve|Monthly|More).+(Debt|Bills)",Subject,containsRE
,"(Perfect|Rebuild|Get
Back|Bad|Clear).+Credit",Subject,containsRE,"Consolidation|(Home
(Equity|Loan))|Bill Free|Financial
.*(Help|Assistance)",Subject,containsRE,"Back (Taxes|Child
Support)",Subject,containsRE,"(Stop Making|Reduce)
.*Payments|Lost.+Job",Subject,containsRE,"Tax
(Problems\?|Debt)",Subject,containsRE,"(Halt|Stop) Creditor|Get
Help.+Today|Your Bills|Owe\?|Past Due\?|Financial Stress|(Bill|Money)
Problems| Bill .*Free|Monthly Payments|Your
.*Finances",Subject,containsRE,"High.+Interest|Improve.+Credit.+(Instantl
y|Immediately)|Consolidate .*Loan"
[enabled],"[2] Health/Beauty (S)","[2] Health/Beauty
(S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"Feel
.*(Healthier|Younger)|Reverse.Aging|Perfect
Skin",Subject,containsRE,"(Stop|Quit) Smoking|Stimulate
Hair",Subject,containsRE,"Penis.+(Enlargement|Bigger|Size)|Be
Longer",Subject,containsRE,"Better Sex|Your Impotenc|Sexual Potency|Male
Organ|Your Member\s",Subject,containsRE,"Doctor
Approved|Pheromones",Subject,containsRE,"Bigger Breast|Enhance Your
Size|Size (Matters|Does
Matter)",Subject,containsRE,"(Giant|Thick(|er)|Fuller|Big(|ger)|Large(|r)
|Enlarge Your) (Pen[i1l]s|Johnson|Dick|Tool|Knob|Manhood|Breasts)"
* Changed the default state of this filter to "disabled", since it does
not seem
to be that commonly used. Please toggle it on if you need it! That was
the
only change.
[disabled],"[1] ""Friend"" Code* (S)","[1] ""Friend"" Code*
(S)",26112,OR,Legitimate,Subject,contains,[nospam]
* Added the following filter for those of you using the POPFile hack.
I'll put
the instructions on my site, but for now they are in the forum at
http://www.computercops.biz/postlite4137-.html. Note that it doesn't
have a
prioritization or type, since there's another program doing the actual
filtering/categorization.
[disabled],"POPFile Spam","POPFile
Spam",255,AND,Blacklist,Delete,EntireHeader,contains,"X-Text-
Classification: spam"
--------------------
2003-06-02 (Monday)
--------------------
This revision is larger than usual, mainly because of the new version of
MailWasher due out shortly. The option to download more than 20 lines of
a
message prompted me to get busy cleaning up some sloppy filters, and to
be more
careful with the "+" and "*" iteration qualifiers, so that there will be
less
falsing accross the message body.
* All of the starter blacklist items now have an expiration date instead
of
being non-expiring, as they were before. That way you can tell if they
are
being used, and they won't clutter up your list after the expiration
period if
they are not. Remember to UN-select the "Expire unused wildcard
expressions
from the list after X days" option if you don't want them to expire, or
use a
"0" as the number at the end of the individual item that you want to
not
expire. I'll use whatever is on my own system for future releases.
* The suggested starter blacklist has been updated.
* All of the filters, with the exception of "[1] Always Bounce* (F)",
have had
"Mark for Bounce" removed (see the explanation in "6. TIPS AND HINTS"
if you
like). Please toggle them on or off according to your own taste.
* Added this flter (actually broke it off from the "[2] Invalid Header
Field
(F,H)" filter) because it is an excellent spam indicator on its own:
[enabled],"[1] Bad ""From"" (F)","[1] Blank From: Address
(F)",255,OR,Delete,From,doesn'tContainRE,"[\w.-]+@([\w-]+\.)+[A-Z]{2,4}"
* Added the following filter, which is my first attempt at detecting HTML
spam
tricks to get around filtering:
[enabled],"[2] HTML Spam Tricks (B)","[2] HTML Spam Tricks
(B)",16711680,OR,Blacklist,Delete,Body,containsRE,"font
size=""?0""?",Body,containsRE,"(()([\w\s,\.\-
]){1,10}){3,}"
* Added the following filter to detect those freakin' spaced out words in
the
subject line, which are almost always spam:
[enabled],"[2] S P A C E D Subject (S)","[2] S P A C E D Subject
(S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"[A-Z]([ \.\*:_-
]+)([A-Z]\1){2,}[A-Z]",Subject,containsRE,"([A-Z]+[:=\.\-_]){3,}"
* Some drastic changes were made to the following filter, and it seems to
have
a lower incidence of falsing now. Note that it accepts only a
relatively
strict subset of the Date: field values. I've found so far that most
all
personal mail sticks to this format.
[enabled],"[2] Invalid Header Field (H)","[2] Invalid Header Field
(H)",16711680,OR,Blacklist,Delete,EntireHeader,doesn'tContainRE,(?m)^Mess
age-ID:\s+,EntireHeader,doesn'tContainRE,"(?m)^Date:\s+([A-
Z]{3},\s+)?\d{1,2}\s+[A-Z]{3}\s+\d{4}\s+\d{1,2}:\d{2}(:\d{2})?\s+(([+-
]\d{4})|([CEMP][DS]|GM|U)T|[AMNYZ])"
* The following filters have been modified:
[enabled],"[1] Extended Blacklist (F)","[1] Extended Blacklist
(F)",255,OR,Blacklist,Delete,From,containsRE,[a-z]+\d\d\d\d[a-
z]\d\d@,From,containsRE,[a-z]\d\d\d\d[a-z]\d\d\d\d@,From,containsRE,"([a-
z]+_){2,}\d+@yahoo\.com",From,containsRE,"Reduce
.*Debt|Deals|Financially",From,containsRE,"\?|Car
Loan|Loans|Rewards|Credit|Instant|Special[ \._-
]?offer|Offers|Vacation|Blowout|Compare|Coral[ \._-
]?Calcium|Values",From,containsRE,\w+-replyto-\d+-d+@.+\.com
[enabled],"[2] ""Not Spam"" (B)","[2] ""Not Spam""
(B)",16711680,OR,Blacklist,Delete,Body,containsRE,"This Is Not
(Spam|Unsolicited)|This message was not.{1,10}Unsolicited"
[enabled],"[2] Ad/Spam Marker (S)","[2] Ad/Spam Marker
(S)",16711680,OR,Blacklist,Delete,Subject,containsRE,Adv?:|\WAdv\W|^Adv\W
,Subject,containsRE,"(\s|\.){5,}.*\w+$",Subject,containsRE,\{B\},Subject,
containsRE,"(\s|\.){10,}$",Subject,containsRE,Message-Id.+(Mach10|RAF[0-
9]),Subject,containsRE,"[\w\|]{15,}$"
[enabled],"[2] Adult (S)","[2] Adult
(S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"XXX|(Adult|Mature)
Content|Adults? Only|No
Minors|Uncensored",Subject,containsRE,"(Rough|Hot|Teen).*
Adult|Sex|Barely Legal Teen|Wet Teen|Teen
(Action|Sweetheart|Orgies)|Bitch|Escorts|(^|\s)Cum($|\s|-
)|C0ck|Pen[i1l]s|Lesbian",Subject,containsRE,"Sluts|Fuck|Pussy|Pussies|(S
uck|Big|Massive|Large) Cock|Virgin\W|Hard-?core|Cumshot|\WCum\W|Suck
My|Lesbo Site|Blow ?Job|Sex Videos|Hot(test)?
.*P[i1l]cs",Subject,containsRE,(?-
i)ADULT|COCKS,Subject,containsRE,"(Nude|Naked|Sex) .*Pic|Barely
(Legal|Adult)|(Wet|Dripping|Hot)
(Teens|Lesbians)",Subject,containsRE,"Adult Links|Sex (Show|Site)|Porn
(Movies|Flick)|Married.+But.+Lonely|Hot Moms|Sexy Photo|Wet
Sex",Subject,containsRE,"Horny.+(Housewives|Teens)|(Naked|Nude)
(Lesbians|Women|Teens|Girls)",Subject,containsRE,Animals.+(Girls|Women)|(
Girls|Women).+Animals,Subject,containsRE,"Tight(est)?
(Pussy|Vagina)|Dicks|V[il1]rg[il1]ns|P[0@]rn|L[o0][l1][il1]ta|Gang[ -
]?bang| Dong|Hardc0re|H0rny|Cunt|Twat "
[enabled],"[2] Adult (B)","[2] Adult
(B)",16711680,OR,Blacklist,Delete,Body,containsRE,"(Hot|Wet) Teen|Barely
(Legal|Adult)",Body,containsRE,"(?-i)\WXXX\W(?i)|Site Secrets|Adult (Site
)?Links",Body,containsRE,"\WCum\W|Hot Naked Women|Gang
?Bang|Fuck|Dildos",Body,containsRE,"Phone Sex|Married[ \.-]But[ \.-
]Lonely",Body,containsRE,"You.{1,15}\d\d .{1,20}To
Enter",Body,containsRE,https?://.*xxx.+$
[enabled],"[2] Cell Phone (S)","[2] Cell Phone
(S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"Free
.*(Phone|Cellular|Nokia|Motorola)",Subject,containsRE,"(Cell
|Cell.?Phone|Cellular)
.+(Free|Static|Reception)",Subject,containsRE,boost.+(Cell.?Phone).+Signa
l,Subject,containsRE,(Cell.?Phone).+Signal.+boost,Subject,contains,"Anten
na Amplifier",Subject,containsRE,"Better.+Cell Phone"
[enabled],"[2] College Degree (S,B)","[2] College Degree
(S,B)",16711680,OR,Blacklist,Delete,Subject,containsRE,"(Earn|University|
College|Your|You
Qualify).{1,20}(Degree|Diploma)",Body,containsRE,"(Earn|University|Colleg
e|Your|You Qualify).{1,20}(Degree|Diploma)"
[enabled],"[2] Computer (S)","[2] Computer
(S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"(No More|Rid
Of|Stop|Eliminate|Delete|Tired Of)
.*(Pop.?Up|Adware|Spyware)",Subject,containsRE,Protect.Your.Computer,Subj
ect,containsRE,Surf.+Fast,Subject,contains,"Screen Saver"
[enabled],"[2] Credit Cards (S,B)","[2] Credit Cards
(S,B)",16711680,OR,Blacklist,Delete,Subject,containsRE,"(Gold|Platinum|Ti
tanium|Approval|Guaranteed|Unsecured|Credit|No
Deposit|Free|Get|Qualify).+(Master
?Card|Visa|(Credit|Gold|platinum).+Card|Approved|Approval)",Subject,conta
insRE,(Credit|Card).+(Approved|Approval|Accepted),Subject,containsRE,"(Ge
t|New|Approved|Guaranteed|Apply).+
(Credit|Gold|Platinum|Titanium|Visa|MasterCard)",Subject,containsRE,"Acce
pt.+Credit Cards|Merchant Account",Body,containsRE,"Accept.{1,15}Credit
Cards|Merchant Account"
[enabled],"[2] Dating Service (S,F)","[2] Dating Service
(S,F)",16711680,OR,Blacklist,Delete,Subject,containsRE,"(Find
Your|Dream|Soul|Sexier).+Mate",Subject,containsRE,"(Are You|Meet
Other|Chat With|Local|Contact) .*Single",Subject,containsRE,"True
Love|Photos Of Singles|Find Someone Special|Meet Single
People",Subject,containsRE,"(Some ?one|Guess Who) Wants To Meet
You|Attract
.*Instantly",From,contains,Dating,Subject,containsRE,"(Females|Singles|Wo
men|Sexy) .* Your Area"
[enabled],"[2] Dating Service (B)","[2] Dating Service
(B)",16711680,OR,Blacklist,Delete,Body,containsRE,"(Find
Your|Dream|Soul)[\s-]Mate",Body,containsRE,"Quality
Relationship",Body,containsRE,"(Are You|Meet
Other).{1,15}Single",Body,contains,"Meet A Married Woman"
[enabled],"[2] Debt Consolidation (S)","[2] Debt Consolidation
(S)",16711680,OR,Blacklist,Delete,Subject,containsRE,(Debt|Bill).+(Paymen
ts|Relief|Free|Elimination|Help|Assistance),Subject,containsRE,"(Erase|Sl
ash|Eliminate|Reduce|Cut|Too Much|Get Out Of|Credit Card|Away
Your|Consolidate|Freedom From|Take Control|Solutions?
To|Without|Clear|Paying)
.*(Debt|Bills)",Subject,containsRE,"(In|Got|Overwhelmed|Too
(Much|Many)|Wipe
Out|Worry.+About|Dissolve|Monthly|More).+(Debt|Bills)",Subject,containsRE
,"(Perfect|Rebuild|Get
Back|Bad|Clear).+Credit",Subject,containsRE,"Consolidation|(Home
(Equity|Loan))|Bill Free|Financial
.*(Help|Assistance)",Subject,containsRE,"Back (Taxes|Child
Support)",Subject,containsRE,"(Stop Making|Reduce)
.*Payments|Lost.+Job",Subject,containsRE,"Tax
(Problems\?|Debt)",Subject,containsRE,"(Halt|Stop) Creditor|Get
Help.+Today|Your Bills|Owe\?|Past Due\?|Financial Stress|(Bill|Money)
Problems| Bill .*Free|Monthly Payments|Your
.*Finances",Subject,containsRE,"High.+Interest|Improve.+Credit.+(Instantl
y|Immediately)|Consolidate .*Loan"
[enabled],"[2] Debt Consolidation (B)","[2] Debt Consolidation
(B)",16711680,OR,Blacklist,Delete,Body,containsRE,"Have Perfect
Credit|Financially Free|Free (Yourself )?From
Debt.*$",Body,containsRE,"Debt
(Elimination|Consolidation)",Body,containsRE,"Tired of.{1,20}(Bill|Debt)"
[enabled],"[2] Free/Win (B)","[2] Free/Win
(B)",16711680,OR,Blacklist,Delete,Body,containsRE,"Get.{1,15}Free
(Membership|Info)",Body,contains,"Claim Your Complimentary"
[enabled],"[2] Health/Beauty (S)","[2] Health/Beauty
(S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"Feel
.*(Healthier|Younger)|Reverse.Aging|Perfect
Skin",Subject,containsRE,"(Stop|Quit) Smoking|Stimulate
Hair",Subject,containsRE,"Penis.+(Enlargement|Bigger|Size)|Be
Longer",Subject,containsRE,"Better Sex|Your Impotenc|Sexual Potency|Male
Organ",Subject,containsRE,"Doctor
Approved|Pheromones",Subject,containsRE,"Bigger Breast|Enhance Your
Size|Size (Matters|Does
Matter)",Subject,containsRE,"(Giant|Thick(|er)|Fuller|Big(|ger)|Large(|r)
|Enlarge Your) (Pen[i1l]s|Johnson|Dick|Tool|Knob|Manhood|Breasts)"
[enabled],"[2] Misc. Ads (S)","[2] Misc. Ads
(S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"(?-
i)GUARANTEED(?i)|[,-] Guaranteed",Subject,containsRE,"Pennies A Day|As
Seen On|Act Now|Risk
Free|Get.+(Today|Now)!",Subject,containsRE,"(Seized|Unclaimed)
(Property|Properties)",Subject,containsRE,"In (Just|Only)
(Minutes|Moments)",Subject,containsRE,"^Now Available|Try Our New|We Can
Help|No Cost",Subject,containsRE,Call\s\S*\d\d,Subject,containsRE,"Lowest
(Price|Rate)|Save (Hundreds|Thousands)",Subject,containsRE,"100%
(Safe|Effective|Guaranteed)|Guarantee .*Results|Results Guaranteed|Cut.+
Cost",Subject,containsRE,"No.Obligation|No.Risk|Seen On TV|Limited
Time|Join Now|\sNow!|Why Wait"
[enabled],"[2] Misc. Ads (B)","[2] Misc. Ads
(B)",16711680,OR,Blacklist,Delete,Body,containsRE,"Revealed.{1,10}Pros\W"
,Body,containsRE,"Money.Back Guarantee|Real Savings
On",Body,containsRE,"Dear Homeowner|No Credit Card|To Learn
More",Body,containsRE,"Risk.Free
Trial",Body,containsRE,"(Special|Limited|Limited
Time).{1,25}(Offer|Opportunity)",Body,containsRE,"Get Your Free|Order Now
And Get"
[enabled],"[2] Money Making 2 (S)","[2] Money Making 2
(S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"%.+Money|Money.+%|M
oney Making",Subject,containsRE,"Advance Your Career|Career
Advancement",Subject,containsRE,"Your Own Hours|Work(|ing).+When You
Want|Employment Opportunity"
[enabled],"[2] Money Making (B)","[2] Money Making
(B)",16711680,OR,Blacklist,Delete,Body,contains,"No Experience
Necessary",Body,contains,"Per Week!",Body,containsRE,"(Earn(ing|)|Make)
Money .{1,15}From Home",Body,contains,"Make Up To $"
[enabled],"[2] Pharmacy (S,B)","[2] Pharmacy
(S,B)",16711680,OR,Blacklist,Delete,Subject,containsRE,V[i1l]agra|Erectil
e,Subject,containsRE,"(?-i)HGF|HGH(?-i)|Human
Growth",Body,containsRE,Growth.+Hormone|(?-
i)HGH|HGF(?i),Subject,containsRE,"Let Our Doctors|Prescribed
Online",Body,containsRE,"Online
(Prescription|Rx|Drug|Pharmacy)",Subject,containsRE,"Online
(Prescription|Rx|Drug|Pharmacy)",Body,containsRE,"Prescription Drugs
Online|bestexpressmeds",Subject,containsRE,"Non.?Prescription|Herbal
Alternative"
[enabled],"[2] Printer/Toner (S)","[2] Printer/Toner
(S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"(Ink(jet)?|Printer)
Cartridges",Subject,containsRE,(Ink.+toner)|(Toner.+Ink)
[enabled],"[2] Spy/Detective (B,S)","[2] Spy/Detective
(B,S)",16711680,OR,Blacklist,Delete,Subject,containsRE,(Uncover.+Truth|Fi
nd|Investigate).+Anyone,Subject,containsRE,"(Background
Investigation|Investigative|Spy|Top Secret)
Software",Subject,containsRE,"Detective Software|Private Eye|Spy On
(People|Anyone)",Body,containsRE,"Spy On Anyone|Discover.{1,15}Secrets"
[enabled],"[2] Weight Loss (S)","[2] Weight Loss
(S)",16711680,OR,Blacklist,Delete,Subject,containsRE,We[i1l]ght.Loss,Subj
ect,containsRE,(Lose|Melt).+(LBS|Pounds|We[i1l]ght|Fat),Subject,containsR
E,"Dieting|Unwanted (Weight|Pounds)",Subject,containsRE,"Fat
Burn(ing|er)|Burn(ing|) Fat",Subject,containsRE,"Get.+Firm Abs"
[enabled],"[3] Opt-Out (B)","[3] Opt-Out
(B)",33023,OR,Blacklist,Delete,Body,containsRE,"""?Remove""? In the
Subject",Body,containsRE,"To Stop Receiving{1,20}Offers|To
Unsubscribe",Body,containsRE,"To Be (Removed|Taken
off.{1,10}Mailing)",Body,containsRE,"See.{1,10}Unsubscribe
Instructions",Body,containsRE,"Click (Here|The
Link)",Body,containsRE,"Future Mailings|You Are
Receiving",Body,containsRE,"You.{1,10}Opted.{1,10}To
Receive{1,10}(Promotions|Offers)"
[enabled],"[3] Questionable Link (B)","[3] Questionable Link
(B)",33023,OR,Blacklist,Delete,Body,containsRE,http://[1-
9],Body,containsRE,"Click.{1,20}To
Order",Body,containsRE,http://[\w\.]+@,Body,contains,"href=""http://massi
vefreehosting.com"
[enabled],"[3] Suspicious Origin (F)","[3] Suspicious Origin
(F)",33023,OR,Blacklist,Delete,From,containsRE,@(msn\.com|yahoo\.com|hotm
ail\.com|excite\.com|aol\.com),From,containsRE,you(rmail|rdomain)\.(net|c
om|org|cc),From,containsRE,friend@public\.(net|com|org|cc),From,containsR
E,"promotions?|bargains?|Screen
?Saver",From,containsRE,Anybody|Anyone|Bulk|Casino|Credit|Everybody|Every
one|Friend|Hotdeals|Nobody|Promo|Savetrees|Winner|User|XX+|Free|AutoQuote
,From,containsRE,offers|sav(e|ings)|special|free|hotdeals|wincash,From,co
ntainsRE,"Inkjet ?Cartridges",From,containsRE,"Relief From|Concerned|Work
At Home",From,containsRE,Suffering|Unwanted|Guaranteed|opt[\._-
]?in,From,containsRE,"(.)\1{3,}|(.+_){2,}|([A-Z]+[\.\-_]){3,}"
* Many thanks to BillT, Eric P., IkeB, Porter, and everyone else (sorry
if I
left you out!) who helped shake the bugs out of this version, made
suggestions, and provided moral support in general. It is greatly
appreciated!
-------------------
2003-05-05 (Monday)
-------------------
* Updated the following filters:
[enabled],"[2] Adult (S)","[2] Adult
(S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"XXX|X.X.X|(A
dult|Mature) Content|Adults? Only|No
Minors|Uncensored",Subject,containsRE,"(Rough|Hot|Teen).*
Adult|Sex|Barely Legal Teen|Wet Teen|Teen
(Action|Sweetheart|Orgies)|Bitch|Escorts|(^|\s)Cum($|\s)|C0ck|Lesbian",Su
bject,containsRE,"Sluts|Fuck|Pussy|Pussies|(Suck|Big|Massive)
Cock|Virgin\W|Hard-?core|Cumshot|\WCum\W|Suck My|Lesbo Site|Blow ?Job|Sex
Videos|Hot(test)? .*Pics",Subject,containsRE,(?-
i)ADULT|COCKS,Subject,containsRE,"(Nude|Naked|Sex) .*Pic|Barely
(Legal|Adult)|(Wet|Dripping|Hot)
(Teens|Lesbians)",Subject,containsRE,"Adult Links|Sex (Show|Site)|Porn
(Movies|Flick)|Married.+But.+Lonely|Hot Moms|Sexy Photo|Wet
Sex",Subject,containsRE,"Horny.+(Housewives|Teens)|(Naked|Nude)
(Lesbians|Women|Teens|Girls)",Subject,containsRE,Animals.+(Girls|Women)|(
Girls|Women).+Animals,Subject,containsRE,"Tight(est)?
(Puss(y|ies)|Vaginas?)|Dicks|V[il1]rg[il1]ns"
[enabled],"[2] Adult (B)","[2] Adult
(B)",16711680,OR,Blacklist,Delete,Bounce,Body,containsRE,"(Hot|Wet)
Teen|Barely (Legal|Adult)",Body,containsRE,"(?-i)\WXXX\W(?i)|Site
Secrets|Free.+Adult.+Links",Body,containsRE,"\WCum\W|Hot Naked Women|Gang
?Bang|Fucking|Dildos",Body,containsRE,"Phone
Sex|Married.+But.+Lonely|Webcam",Body,containsRE,"You .+ \d\d .+To
Enter$",Body,containsRE,https?://.*xxx.+$
[enabled],"[2] Credit Cards (S,B)","[2] Credit Cards
(S,B)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"(Gold|Plat
inum|Titanium|Approval|Guaranteed|Unsecured|Credit|No
Deposit|Free|Get|Qualify).+(Master
?Card|Visa|(Credit|Gold|platinum).+Card|Approved|Approval)",Subject,conta
insRE,(Credit|Card).+(Approved|Approval|Accepted),Subject,containsRE,"(Ge
t|New|Approved|Guaranteed|Apply).+
(Credit|Gold|Platinum|Titanium|Visa|MasterCard)",Subject,containsRE,"Acce
pt.+Credit Cards|Merchant Account",Body,containsRE,"Accept.+Credit
Cards|Merchant Account"
[enabled],"[2] Dating Service (B)","[2] Dating Service
(B)",16711680,OR,Blacklist,Delete,Bounce,Body,containsRE,"(Find
Your|Dream|Soul).+Mate",Body,containsRE,"Quality
Relationships?",Body,containsRE,"(Are You|Meet
Other).+Singles?",Body,contains,"Meet A Married Woman"
[enabled],"[2] Dating Service (S,F)","[2] Dating Service
(S,F)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"(Find
Your|Dream|Soul|Sexier).+Mate",Subject,containsRE,"(Are You|Meet
Other).+Singles?",Subject,containsRE,"True Love|Photos Of Singles|Find
Someone Special|Meet Single People",Subject,containsRE,"(Some ?one|Guess
Who) Wants To Meet You|Attract .*Instantly",From,contains,Dating
[enabled],"[2] Debt Consolidation (S)","[2] Debt Consolidation
(S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,(Debt|Bill).+
(Payments|Relief|Free|Elimination|Help|Assistance),Subject,containsRE,"(E
rase|Slash|Eliminate|Reduce|Cut|Too Much|Get Out Of|Credit Card|Away
Your|Consolidate|Freedom From|Take Control|Solutions?
To|Without|Clear|Paying)
.*(Debt|Bills)",Subject,containsRE,"(In|Got|Overwhelmed|Too
(Much|Many)|Wipe
Out|Worry.+About|Dissolve|Monthly|More).+(Debt|Bills)",Subject,containsRE
,"(Perfect|Rebuild|Get
Back|Bad|Clear).+Credit",Subject,containsRE,"Consolidation|(Home
(Equity|Loan))|Bill Free|Financial
.*(Help|Assistance)",Subject,containsRE,"Back (Taxes|Child
Support)",Subject,containsRE,"(Stop Making|Reduce)
.*Payments|Lost.+Job",Subject,containsRE,"Tax
(Problems\?|Debt)",Subject,containsRE,"Halt Creditor|Get Help.+Today|Your
Bills|Owe\?|Past Due\?|Financial Stress|(Bill|Money) Problems| Bill
.*Free|Monthly Payments|Your
.*Finances",Subject,containsRE,"High.+Interest|Improve.+Credit.+(Instantl
y|Immediately)|Consolidate .*Loan"
[enabled],"[2] Debt Consolidation (B)","[2] Debt Consolidation
(B)",16711680,OR,Blacklist,Delete,Bounce,Body,containsRE,"Have Perfect
Credit|Financially Free|Free (Yourself )?From
Debt.*$",Body,containsRE,"Debt
(Elimination|Consolidation)",Body,containsRE,"Tired of .*(Bill|Debt)"
[enabled],"[2] Free/Win 1 (S)","[2] Free/Win 1
(S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"(Award
Confirmation|Sweepstakes
Entry)",Subject,containsRE,Claim.+(Money|Your),Subject,containsRE,(Free|W
in).+(\$|Access|Cash|Gifts?|Vacations?|Cruise|Pass(es|)|Unlimited|Tickets
?|Coupons?|Certificates?|DVDs?|CDs?|Software),Subject,containsRE,"(Yours|
You|Get|CDs|Try It|Shop For).+Free",Subject,containsRE,(?-
i)FREE,Subject,containsRE,"Free .*(Delivery|Domain
Registration|Hosting|Help|Porn|Quote|Shipping|Sample|Trial|Secrets|Consul
tation)",Subject,containsRE,"Win An? |Complimentary"
[enabled],"[2] Health/Beauty (S)","[2] Health/Beauty
(S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"Feel
.*(Healthier|Younger)|Reverse.Aging|Perfect
Skin",Subject,containsRE,"(Stop|Quit) Smoking|Stimulate
Hair",Subject,containsRE,"Penis.+(Enlargement|Bigger|Size)|Be
Longer",Subject,containsRE,"Better Sex|Bigger Penis|Your Impotenc|Sexual
Potency|Male Organ",Subject,containsRE,"Doctor
Approved|Pheromones",Subject,containsRE,"Bigger Breast|Enhance Your
Size|Size (Matters|Does
Matter)",Subject,containsRE,"(Thick(|er)|Fuller|Big(|ger)|Large(|r))
Penis"
[enabled],"[2] Health/Beauty (B)","[2] Health/Beauty
(B)",16711680,OR,Blacklist,Delete,Bounce,Body,containsRE,"Your
Penis",Body,containsRE,"(Penile|Penis|Organ)
Enlargement",Body,containsRE,"Large(|r) Penis"
[enabled],"[2] Misc. Ads (S)","[2] Misc. Ads
(S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,(?-
i)GUARANTEED,Subject,containsRE,"Pennies A Day|As Seen On|Act Now|Risk
Free|Get.+(Today|Now)!",Subject,containsRE,"(Seized|Unclaimed)
(Property|Properties)",Subject,containsRE,"In (Just|Only)
(Minutes|Moments)",Subject,containsRE,"^Now Available|Try Our New|We Can
Help|No Cost",Subject,containsRE,Call\s\S*\d\d,Subject,containsRE,"Lowest
(Price|Rate)|Save (Hundreds|Thousands)",Subject,containsRE,"100%
(Safe|Effective|Guaranteed)|Guarantee .*Results|Results Guaranteed|Cut.+
Cost",Subject,containsRE,"No.Obligation|Seen On TV|Limited Time|Join
Now|\sNow!|Why Wait"
[enabled],"[2] Misc. Ads (B)","[2] Misc. Ads
(B)",16711680,OR,Blacklist,Delete,Bounce,Body,containsRE,Revealed.+Pros\W
,Body,containsRE,"Money.Back Guarantee|Real Savings
On",Body,contains,"Dear Homeowner",Body,contains,"No Credit
Card",Body,contains,"To Learn More",Body,containsRE,"Risk.Free
Trial",Body,containsRE,"(A|This) (Special|Limited|Limited Time)
Offer",Body,containsRE,"Get Your Free|Order Now And Get"
[enabled],"[2] Money Making 2 (S)","[2] Money Making 2
(S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,%.+Money|Mone
y.+%,Subject,containsRE,"Advance Your Career|Career
Advancement",Subject,containsRE,"Your Own Hours|Work(|ing).+When You
Want|Employment Opportunity"
[enabled],"[2] Pharmacy (S,B)","[2] Pharmacy
(S,B)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,Viagra|Erec
tile,Subject,containsRE,"(?-i)HGF|HGH(?-i)|Human
Growth",Body,containsRE,Growth.+Hormone|(?-
i)HGH|HGF(?i),Subject,containsRE,"Let Our Doctors|Prescribed
Online",Body,containsRE,"Online
(Prescription|Rx|Drug|Pharmacy)",Subject,containsRE,"Online
(Prescription|Rx|Drug|Pharmacy)",Body,containsRE,"Prescription Drugs
Online|bestexpressmeds",Subject,containsRE,"Non.?Prescription|Herbal
Alternative"
[enabled],"[3] Base 64 Encoded (B)","[3] Base 64 Encoded
(B)",33023,OR,Blacklist,Delete,Bounce,Body,contains,"Content-Transfer-
Encoding: base64",EntireHeader,contains,"Content-Transfer-Encoding:
base64"
[enabled],"[3] Questionable Link (B)","[3] Questionable Link
(B)",33023,OR,Blacklist,Delete,Bounce,Body,containsRE,http://[1-
9],Body,containsRE,"Click.+To Order",Body,containsRE,http://[\w\.]+@
[enabled],"[3] Suspicious Origin (F,H,R)","[3] Suspicious Origin
(F,H,R)",33023,OR,Blacklist,Delete,Bounce,From,containsRE,msn.com|yahoo.c
om|hotmail.com|excite.com|aol..com,From,containsRE,you(rmail.*|rdomain)\.
(net|com|org|cc),EntireHeader,containsRE,friend@public\.(net|com|org|cc),
ReturnPath,containsRE,"promotions?|bargains?|Screen
?Saver",From,containsRE,^(Anybody|Anyone|Bulk|Casino|Credit|Everybody|Eve
ryone|Friend|Hotdeals|Nobody|Promo|Savetrees|Winner|User|XX+|Free|AutoQuo
te),From,containsRE,(offers|sav(e|ings)|special|free|hotdeals|wincash).*@
,From,containsRE,"Inkjet ?Cartridges",From,containsRE,"Relief
From|Concerned|Work At Home",From,containsRE,"(.)\1{3,}"
[enabled],"[3] Suspicious Routing* (H)","[3] Suspicious Routing
(H)",33023,OR,Blacklist,Delete,Bounce,EntireHeader,containsRE,(?m)^Receiv
ed:.+(\.ru|\.cz|\.ro|\.md|\.fi|\.dk|\.vu|\.kr|\.no|\.br|\.jp|\.tw|\.cn|\.
nl|\.co|\.in|\.se|\.ac|\.it|\.fr|\.tr|\.be|\.at|\.za|\.es)[^\.\w]
* Renamed & updated the following filter:
[enabled],"[2] Satellite/Cable TV (S)","[2] Satellite/Cable TV
(S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,(DirecTV|Dish
Net),Subject,containsRE,Free.+(Installation|Satellite),Subject,containsRE
,"(TV|System|Digital) .+Installed",Subject,containsRE,"(Digital|Cable)
Descramble|Descramble (Digital|Cable)"
* Updated the "Hints" section slightly.
----------------------
2003-03-22 (Saturday)
----------------------
* Updated the following filters:
[enabled],"[2] Adult (S)","[2] Adult
(S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"XXX|X.X.X|(A
dult|Mature) Content|Adults? Only|No
Minors|Uncensored",Subject,containsRE,"(Rough|Hot|Teen).+Sex|Barely Legal
Teen|Wet Teen|Teen
(Action|Sweetheart|Orgies)|Bitch|Escorts|(^|\s)Cum($|\s)",Subject,contain
sRE,"Sluts|Fuck|Pussy|Pussies|(Suck|Big|Massive) Cock|Virgin\W|Hard-
?core|Cumshot|\WCum\W|Suck My|Lesbo Site|Blow ?Job|Sex Videos|Hot(test)?
.*Pics",Subject,containsRE,(?-i)ADULT,Subject,containsRE,"(Nude|Sex)
Pic|Barely (Legal|Adult)|(Wet|Dripping|Hot)
(Teens|Lesbians)",Subject,containsRE,"Adult Links|Sex (Show|Site)|Porn
MoviesMarried.+But.+Lonely|Hot Moms|Sexy Photo|Wet
Sex",Subject,containsRE,"Horny.+(Housewives|Teens)|(Naked|Nude)
(Lesbians|Women|Teens|Girls)",Subject,containsRE,Animals.+(Girls|Women)|(
Girls|Women).+Animals,Subject,containsRE,"Tight(est)?
(Puss(y|ies)|Vaginas?)|Dicks"
[enabled],"[2] Adult (B)","[2] Adult
(B)",16711680,OR,Blacklist,Delete,Bounce,Body,containsRE,"(Hot|Wet)
Teen|Barely (Legal|Adult)",Body,containsRE,"(?-i)\WXXX\W(?i)|Site
Secrets|Free.+Adult.+Links",Body,containsRE,"\WCum\W|Hot Naked Women|Gang
?Bang|Fucking|Dildos",Body,containsRE,"Phone
Sex|Married.+But.+Lonely",Body,containsRE,"You .+ \d\d .+To
Enter",Body,containsRE,https?://.*xxx.+$
[enabled],"[2] Cell Phone (S)","[2] Cell Phone
(S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"Free.+
(Cell.?Phone|Phone|Cellular|Nokia|Motorola)",Subject,containsRE,"(Cell
|Cell.?Phone|Cellular)
.+(Free|Static|Reception)",Subject,containsRE,boost.+(Cell.?Phone).+Signa
l,Subject,containsRE,(Cell.?Phone).+Signal.+boost,Subject,contains,"Anenn
a Amplifier",Subject,containsRE,"Better.+Cell Phone"
[enabled],"[2] Debt Consolidation (S)","[2] Debt Consolidation
(S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"Debt.+(Payme
nts|Relief|Paying
Bills|Free)",Subject,containsRE,"(Erase|Slash|Eliminate|Reduce|Cut|Too
Much|Get Out Of|Credit Card|Away Your|Consolidate|Freedom From|Take
Control|Solutions? To|Without|Clear)
.*(Debt|Bills)",Subject,containsRE,"(In|Got|Overwhelmed|Too
(Much|Many)|Wipe
Out|Worry.+About|Dissolve|Monthly|More).+(Debt|Bills)",Subject,containsRE
,"(Perfect|Rebuild|Get
Back|Bad|Clear).+Credit",Subject,containsRE,"Consolidation|(Home
(Equity|Loan))|Bill Free",Subject,containsRE,"Back (Taxes|Child
Support)",Subject,containsRE,"(Stop Making|Reduce)
.*Payments|Lost.+Job",Subject,containsRE,"Tax
(Problems\?|Debt)",Subject,containsRE,"Halt Creditor|Get Help.+Today|Your
Bills|Owe\?|Past Due\?|Financial Stress|Bill Problems| Bill.*Free|Monthly
Payments",Subject,containsRE,High.+Interest|Improve.+Credit.+(Instantly|I
mmediately)
[enabled],"[2] Debt Consolidation (B)","[2] Debt Consolidation
(B)",16711680,OR,Blacklist,Delete,Bounce,Body,containsRE,"Have Perfect
Credit|Financially Free|Free (Yourself )?From
Debt.*$",Body,contains,"Debt Consolidation",Body,containsRE,"Tired
of.+Bill"
[enabled],"[2] Discounts (S)","[2] Discounts
(S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"(\d%|\$\d)
.*(Off|Discount|Bonus|Intro|Financing|Reduce|Reduction|Less)",Subject,con
tainsRE,"Hurry!|Pay Later|On Sale Today",Subject,containsRE,"Save
.*(%|\$|Big|Huge|On Your)",Subject,containsRE,"(Discount|Cheap).+(Air
?Fare|Ticket|Vacation|Notice)",Subject,containsRE,((Unbelievable|Fantasti
c).+Price)|(Supplies.+Limited),Subject,containsRE,"Get Up To|Paying Too
Much|For Just \$",Subject,containsRE,"Shop.+Save|Net Deals|Hot .* Deal"
[enabled],"[2] Free/Win 2 (S)","[2] Free/Win 2
(S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,You.+(Won|Win
|Winners?),Subject,containsRE,"^Win A.+",Subject,contains,"Government
Grant",Subject,containsRE,"(Free Business Cards|Business Cards
Free)",Subject,containsRE,"Become A Winner|Get (Your|A) Free"
[enabled],"[2] Free/Win (B)","[2] Free/Win
(B)",16711680,OR,Blacklist,Delete,Bounce,Body,containsRE,"Get .*Free
(Membership|Info)",Body,contains,"Claim Your Complimentary"
[enabled],"[2] Health/Beauty (S)","[2] Health/Beauty
(S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"Feel.+Younge
r|Reverse.Aging|Perfect Skin",Subject,containsRE,"(Stop|Quit)
Smoking|Stimulate
Hair",Subject,containsRE,"Penis.+(Enlargement|Bigger|Size)|Be
Longer",Subject,containsRE,"Better Sex|Bigger Penis|Your Impotenc|Sexual
Potency",Subject,contains,"Doctor Approved",Subject,containsRE,"Bigger
Breast|Enhance Your Size"
[enabled],"[2] Health/Beauty (B)","[2] Health/Beauty
(B)",16711680,OR,Blacklist,Delete,Bounce,Body,containsRE,"Enlarg(e|ing)
Your Penis",Body,containsRE,"(Penile|Penis|Organ)
Enlargement",Body,containsRE,"Large(|r) Penis"
[enabled],"[2] Insurance/Healthcare (S,B)","[2] Insurance/Healthcare
(S,B)",16711680,OR,Blacklist,Delete,Bounce,Subject,contains,"Rates
Reduced",Subject,contains,"Life
Insurance",Subject,containsRE,"(Affordable|Reasonable) .*(Health
?care|Dental)",Body,contains,"Life Insurance"
[enabled],"[2] Loans/Refinance (S)","[2] Loans/Refinance
(S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,Refinance|Mor
tgage,Subject,containsRE,"(Homeowner|Get Your)
.*Loan",Subject,containsRE,"((Sell or Buy)|(Buy or
Sell)).+Home",Subject,containsRE,"Lowest.+Rates|Lower Your
.+Payment",Subject,containsRE,(No|Low).Cost.+(Loan|Application),Subject,c
ontainsRE,"Pre.?Approved|Perfect
Credit|You(r|'re)\W+Approved",Subject,containsRE,"Need Credit\?"
[enabled],"[2] Money Making 1 (S)","[2] Money Making 1
(S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"((Work(ing|)
(From|At))|Money At) .*Home",Subject,containsRE,"Learn How To Make|Get
Paid (To|For)|Make A Fortune|Build Your
Wealth",Subject,containsRE,"(\$|Bonus|Free).+(\$|Bonus|Free|Paid|Hour|Rea
l
Estate)",Subject,containsRE,"(Residual|Guaranteed|Serious|Earn|Mak(e|ing)
|Extra|Long
Term).+(\$|Money|Income)",Subject,contains,Cash,Subject,containsRE,"Busin
ess Owners|Increase
Sales|Advertise.+Business",Subject,containsRE,"Be.+Your Own
Boss",Subject,containsRE,"(Excellent|Wonderful|Money
Making|Investment).+Opportunity",Subject,containsRE,"(Home.Based|Your
Own).+Business",Subject,containsRE,"We Will Train|At Home Rep|Side
Business"
[enabled],"[2] Weight Loss (S)","[2] Weight Loss
(S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,Weight.Loss,S
ubject,containsRE,(Lose|Melt).+(LBS|Pounds|Weight|Fat),Subject,containsRE
,"Dieting|Unwanted (Weight|Pounds)",Subject,containsRE,"(Fat
Burning|Burn(ing|) Fat)",Subject,containsRE,"Get.+Firm Abs"
* Updated the wilcard addresses in the blacklist (see that section of
this
file.)
----------------------
2003-02-12 (Wednesday)
----------------------
* I've asked that the folks at MailWasher take a look at some of the
things
that can make it difficult for filters to locate spam. Namely, if a
message is
Base 64 encoded, has HTML tags or comments in the middle of words, or
contains
"escaped" characters, the filters will fail to find the words, as they
are
dealing with the raw data. MailWasher already decodes these types of
messages,
as you can see from the Preview window (not the "View Complete Header"
window). Perhaps there is a way to access this decoded, cleaned up text
with
the filters. We'll see what they come up with!
* Added more wildcard addresses to the blacklist. Those ove 90 days old
that
were not used have been deleted.
* Altered the following filters:
[enabled],"[2] Adult (S)","[2] Adult
(S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"XXX|X.X.X|(A
dult|Mature) Content|Adults? Only|No
Minors|Uncensored",Subject,containsRE,"(Rough|Hot|Teen).+Sex|Barely Legal
Teen|Wet Teen|Teen
(Action|Sweetheart|Orgies)|Bitch|Escorts",Subject,containsRE,"Sluts|Fuck|
Pussy|Suck Cock|Virgin\W|Hard-
?core|Cumshot|\WCum\W",Subject,containsRE,(?-
i)ADULT,Subject,containsRE,"(Nude|Sex) Pic|Barely
(Legal|Adult)",Subject,containsRE,"Adult Links|Sex Shows|Porn
MoviesMarried.+But.+Lonely|Hot Moms|Sex
Site",Subject,containsRE,"Horny.+(Housewives|Teens)|Naked
Lesbians",Subject,containsRE,Animals.+(Girls|Women)|(Girls|Women).+Animal
s
[enabled],"[2] Adult (B)","[2] Adult
(B)",16711680,OR,Blacklist,Delete,Bounce,Body,containsRE,"(Hot|Wet)
Teen|Barely (Legal|Adult)",Body,containsRE,"(?-i)\WXXX\W(?i)|Site
Secrets|Free.+Adult.+Links",Body,containsRE,"\WCum\W|Hot Naked
Women",Body,containsRE,"Phone
Sex|Married.+But.+Lonely",Body,containsRE,"You .+ \d\d .+To
Enter",Body,containsRE,https?://.*xxx.+$
[enabled],"[2] Debt Consolidation (S)","[2] Debt Consolidation
(S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"Debt.+(Payme
nts|Relief|Paying
Bills|Free)",Subject,containsRE,"(Erase|Slash|Eliminate|Reduce|Cut|Too
Much|Get Out Of|Credit Card|Away Your|Consolidate|Freedom From|Take
Control|Solutions? To|Without)
.*(Debt|Bills)",Subject,containsRE,"(In|Got|Overwhelmed|Too
(Much|Many)|Wipe
Out|Worry.+About|Dissolve|Monthly|More).+(Debt|Bills)",Subject,containsRE
,"(Perfect|Rebuild|Get
Back|Bad|Clear).+Credit",Subject,containsRE,"Consolidation|(Home
(Equity|Loan))",Subject,containsRE,"Back (Taxes|Child
Support)",Subject,containsRE,"(Stop Making|Reduce)
.*Payments|Lost.+Job",Subject,containsRE,"Tax
(Problems\?|Debt)",Subject,containsRE,"Halt Creditor|Get Help.+Today|Your
Bills|Owe\?|Past Due\?|Financial Stress|Bill Problems|
Bill.*Free",Subject,containsRE,High.+Interest|Improve.+Credit.+(Instantly
|Immediately)
[enabled],"[2] Discounts (S)","[2] Discounts
(S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"(\d%|\$\d)
.*(Off|Discount|Bonus|Intro|Financing|Reduce|Reduction|Less)",Subject,con
tainsRE,"Hurry!|Pay Later|On Sale
Today",Subject,containsRE,Save.+(%|\$|Big|Huge),Subject,containsRE,"(Disc
ount|Cheap).+(Air
?Fare|Ticket|Vacation|Notice)",Subject,containsRE,((Unbelievable|Fantasti
c).+Price)|(Supplies.+Limited),Subject,containsRE,"Get Up To|Paying Too
Much|For Just \$",Subject,containsRE,Shop.+Save
[enabled],"[2] Health/Beauty (B)","[2] Health/Beauty
(B)",16711680,OR,Blacklist,Delete,Bounce,Body,containsRE,"Enlarg(e|ing)
Your Penis",Body,containsRE,"(Penile|Penis|Organ) Enlargement"
[enabled],"[2] Misc. Ads (S)","[2] Misc. Ads
(S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,(?-
i)GUARANTEED,Subject,containsRE,"Pennies A Day|As Seen On|Act Now|Risk
Free|Get.+(Today|Now)!",Subject,containsRE,"(Seized|Unclaimed)
(Property|Properties)",Subject,containsRE,"In (Just|Only)
(Minutes|Moments)",Subject,containsRE,"^Now Available|Try Our New|We Can
Help|No Cost",Subject,containsRE,Call\s\S*\d\d,Subject,containsRE,"Lowest
(Price|Rate)|Save (Hundreds|Thousands)",Subject,containsRE,"100%
(Safe|Effective|Guaranteed)|Cut.+
Cost",Subject,containsRE,"No.Obligation|Seen On TV|Limited Time|Join
Now|\sNow!|Why Wait"
[enabled],"[2] Money Making (B)","[2] Money Making
(B)",16711680,OR,Blacklist,Delete,Bounce,Body,contains,"No Experience
Necessary",Body,contains,"Per Week!",Body,containsRE,"(Earn(ing|)|Make)
Money .+From Home",Body,contains,"Make Up To $"
[enabled],"[2] Satellite TV (S)","[2] Satellite TV
(S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,(DirecTV|Dish
Net),Subject,containsRE,Free.+(Installation|Satellite),Subject,containsRE
,"(TV|System|Digital)
.+Installed",Subject,containsRE,Digital.+Descramble|Descramble.+Digital
[enabled],"[3] Suspicious Origin (F,H,R)","[3] Suspicious Origin
(F,H,R)",33023,OR,Blacklist,Delete,Bounce,From,containsRE,msn.com|yahoo.c
om|hotmail.com|excite.com|aol..com,From,containsRE,you(rmail.*|rdomain)\.
(net|com|org|cc),EntireHeader,containsRE,friend@public\.(net|com|org|cc),
ReturnPath,containsRE,"promotions?|bargains?|Screen
?Saver",From,containsRE,^(Anybody|Anyone|Bulk|Casino|Credit|Everybody|Eve
ryone|Friend|Hotdeals|Nobody|Promo|Savetrees|Winner|User|XX+|Free),From,c
ontainsRE,(offers|sav(e|ings)|special|free|hotdeals|wincash).*@,From,cont
ainsRE,"Inkjet ?Cartridges",From,containsRE,"Relief
From|Concerned",From,containsRE,"(.)\1{3,}"
* Note: I'll probably rename the "Sattelite TV" filter to
"Satellite/Cable" in the
future, to make it a little more generic.
-------------------
2003-01-20 (Monday)
-------------------
* Added more wildcard addresses to the blacklist. In particular, those
using
addresses like "amy@dsfgk2elkr.aol.com"
* Altered the following filters:
[enabled],"[1] Extended Blacklist (F)","[1] Extended Blacklist
(F)",255,OR,Blacklist,Delete,Bounce,From,containsRE,[a-z]+\d\d\d\d[a-
z]\d\d@,From,containsRE,[a-z]\d\d\d\d[a-z]\d\d\d\d@,From,containsRE,"([a-
z]+_){2,}\d+@yahoo\.com"
[enabled],"[2] Adult (S)","[2] Adult
(S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"XXX|X.X.X|(A
dult|Mature) Content|Adults? Only|No
Minors|Uncensored",Subject,containsRE,"(Rough|Hot|Teen).+Sex|Barely Legal
Teen|Wet Teen|Teen
(Action|Sweetheart|Orgies)|Bitch",Subject,containsRE,"Sluts|Fuck|Pussy|Su
ck Cock|Virgin\W|Hard-?core|Cumshot|\WCum\W",Subject,containsRE,(?-
i)ADULT,Subject,containsRE,"(Nude|Sex) Pic|Barely
(Legal|Adult)",Subject,containsRE,"Adult Links|Sex Shows|Porn
MoviesMarried.+But.+Lonely|Hot
Moms",Subject,containsRE,Horny.+(Housewives|Teens),Subject,containsRE,Ani
mals.+(Girls|Women)|(Girls|Women).+Animals
[enabled],"[2] Loans/Refinance (S)","[2] Loans/Refinance
(S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,Refinance|Mor
tgage,Subject,containsRE,Homeowner.+Loan,Subject,containsRE,"((Sell or
Buy)|(Buy or
Sell)).+Home",Subject,containsRE,Lowest.+Rates,Subject,containsRE,(No|Low
).Cost.+(Loan|Application),Subject,containsRE,"Pre.?Approved|Perfect
Credit|You(r|'re) Approved",Subject,contains,"Need Credit?"
[enabled],"[2] Misc. Ads (S)","[2] Misc. Ads
(S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,(?-
i)GUARANTEED,Subject,containsRE,"Pennies A Day|As Seen On|Act Now|Risk
Free|Get.+(Today|Now)!",Subject,containsRE,"(Seized|Unclaimed)
(Property|Properties)",Subject,containsRE,"In (Just|Only)
(Minutes|Moments)",Subject,containsRE,"^Now Available|Try Our New|We Can
Help|No Cost",Subject,containsRE,Call\s\S*\d\d,Subject,containsRE,"Lowest
(Price|Rate)|Save (Hundreds|Thousands)",Subject,containsRE,"100%
(Safe|Effective|Guaranteed)|Cut.+
Cost",Subject,containsRE,"No.Obligation|Seen On TV|Limited Time|Join Now"
[enabled],"[3] Base 64 Encoded (B)","[3] Base 64 Encoded
(B)",33023,OR,Blacklist,Delete,Bounce,Body,contains,"Content-Transfer-
Encoding: base64"
[enabled],"[3] Suspicious Origin (F,H,R)","[3] Suspicious Origin
(F,H,R)",33023,OR,Blacklist,Delete,Bounce,From,containsRE,msn.com|yahoo.c
om|hotmail.com|excite.com|aol..com,From,containsRE,you(rmail.*|rdomain)\.
(net|com|org|cc),EntireHeader,containsRE,friend@public\.(net|com|org|cc),
ReturnPath,containsRE,"promotions?|bargains?|Screen
?Saver",From,containsRE,^(Anybody|Anyone|Bulk|Casino|Credit|Everybody|Eve
ryone|Friend|Hotdeals|Nobody|Promo|Savetrees|Winner|User|XX+),From,contai
nsRE,(offers|sav(e|ings)|special|free|hotdeals|wincash).*@,From,containsR
E,"Inkjet ?Cartridges",From,containsRE,"Relief
From|Concerned",From,containsRE,"(.)\1{3,}"