$ Rev 2003-06-23 $ (Updated every few weeks, so check: http://w5hq.com/MailWasher) ================================================================================ CONTENTS: 1. DISCLAIMER 2. HOW TO INSTALL THE FILTERS 3. THE FILTERS 4. BEFORE USING THE FILTERS (<- READ THIS!) 5. HOW THE FILTERS ARE ORGANIZED 6. TIPS AND HINTS 7. TROUBLESHOOTING 8. SUGGESTED STARTER BLACKLIST (<- highly recommended) 9. COUNTRY CODES REFERENCE 10. HISTORY, BUGS, TODO, ETC. ================================================================================ ============== 1. DISCLAIMER: ============== These filters were written for my personal use, so your mileage may vary. Use at your own risk, and no warranty or claims as to usability or effectiveness are made. You may modify, copy, and distribute at will. If you include any part of this document or the filters in your own work, however, please give credit where credit is due. (I mainly want to know if anything in here is worth stealing! ;-) ) If you are not comfortable using an editor to modify files, or you do not how to make backups of your old files, these filters may not be for you. No problem - just build your own! It's easy to do using the MailWasher interface. NOTE THAT THE FILTERS AND DOCUMENTATION BELOW WERE NOT WRITTEN BY MAILWASHER, NOR DOES MAILWASHER SUPPORT THEM. (In other words, don't bug them with questions or problems specifically regarding these filters, so that they can get on with writing great software. :-) ). Please see the bottom of "7. Troubleshooting" section for contact information if you need help, have some suggestions, or have questions about writing your own filters. ============================== 2. HOW TO INSTALL THE FILTERS: ============================== If you are a computer professional, jump down to the "FOR ADVANCED USERS" section, below.) * IF YOU ARE INSTALLING THE FILTERS FOR THE FIRST TIME: 1) Run MailWasher, and open the "Help", "About" pop-up. 2) Click on the link for MailWasher's data directory. It's the one at the very bottom of the pop-up. It will open an Explorer window. 3) Click on the "OK" button in the "Help", "About" pop-up, and exit MailWasher (IMPORTANT!). 4) Back up your old filters.txt file (always a good idea) by highlighting the file "filters.txt" in your Explorer window, then pressing Ctrl-C, then Ctrl-V. This creates a file called "Copy of filters.txt". (You can also right-click and choose "Copy", then "Paste" from the pop-up menu.) 5) Open the filters.txt file in an editor. You can usually do this by right-clicking the file, and choosing "Open With" or "Open". Use a text or "programmer's" editor if you have one, but Notepad should work just fine, as long as "word wrap" is turned off. Highlight the contents of the Filters section of this file, starting with the first "[", and ending with the last double-quote ("). Hit Ctrl-C. Go back to the filters.txt file, and highlight the contents of the file (usually by hitting Ctrl-A). Hit Ctrl-V, or "Paste". 6) Save your file, and start MailWasher. 7) If you wish, rather than overwriting the contents of your filters.txt file, You may append these sample filters to your existing filter list. Be sure that there are no blank lines or extra carriage returns between lines or at the end of the file, or MailWasher may either fail to start, or not recognize your new filters. 8) Don't forget to customize the filters ending in an asterisk (*)! See the "4. BEFORE USING THE FILTERS" section for instructions. * IF YOU ARE UPDATING THE FILTERS: 1) Find the section of this document called "10. HISTORY, BUGS, TODO, ETC." at the bottom of this file. You will find the history of the last 5 or 6 revisions there. 2) The revision history is listed in descending chronological order, most recent first. Move down the list until you find the date of the revision which is just after the one you last installed. 3) Overwrite each filter of the same name in the filters.txt file with the newer version you find in the History section of this document. Repeat for all of the modified filters for the revision date, then move to the next more recent date. Repeat this procedure until you have completed all revisions. You are now up to date. 4) Don't forget to check your filters.txt file for any extra spaces, line breaks, or empty lines at the end of the file, then save filters.txt. * FOR ADVANCED USERS: The original filter installation and updates may be made by copying and pasting the filters in this file over the filters in filters.txt. You can overwrite the entire filters.txt, or selectively replace lines. Be very careful not to add extra lines or line breaks to the file, however, as it may result in an application error on startup (the famous "Access Violation" error). =============== 3. THE FILTERS: =============== [disabled],"[1] ""Friend"" Code* (S)","[1] ""Friend"" Code* (S)",26112,OR,Legitimate,Subject,contains,[nospam] [enabled],"[1] Always Bounce* (F)","[1] Always Bounce* (F)",255,OR,Delete,Bounce,From,contains,EmailAddress@Domain.Com [enabled],"[1] Bad ""From"" (F)","[1] Blank From: Address (F)",255,OR,Delete,From,doesn'tContainRE,"[\w.-]+@([\w-]+\.)+[A-Z]{2,4}" [enabled],"[1] Extended Blacklist (F)","[1] Extended Blacklist (F)",255,OR,Blacklist,Delete,From,containsRE,[a-z]+\d\d\d\d[a-z]\d\d@,From,containsRE,[a-z]\d\d\d\d[a-z]\d\d\d\d@,From,containsRE,"([a-z]+_){2,}\d+@yahoo\.com",From,containsRE,"Reduce .*Debt|Deals|Financially",From,containsRE,"\?|Car Loan|Loans|Rewards|Credit|Instant|Special[ \._-]?offer|Offers|Vacation|Blowout|Compare|Coral[ \._-]?Calcium|Values",From,containsRE,\w+-replyto-\d+-d+@.+\.com [enabled],"[1] Mailing List* (T)","[1] Mailing List* (T)",26112,OR,Legitimate,To,contains,list1@domain1.com,To,contains,list2@domain2.com [enabled],"[2] ""Not Spam"" (B)","[2] ""Not Spam"" (B)",16711680,OR,Blacklist,Delete,Body,containsRE,"This Is Not (Spam|Unsolicited)|This message was not.{1,10}Unsolicited" [enabled],"[2] Ad/Spam Marker (S)","[2] Ad/Spam Marker (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,Adv?:|\WAdv\W|^Adv\W,Subject,containsRE,"(\s|\.){5,}.*\w+$",Subject,containsRE,\{B\},Subject,containsRE,"(\s|\.){10,}$",Subject,containsRE,Message-Id.+(Mach10|RAF[0-9]),Subject,containsRE,"[\w\|]{15,}$" [enabled],"[2] Adult (S)","[2] Adult (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"XXX|(Adult|Mature) Content|Adults? Only|No Minors|Uncensored",Subject,containsRE,"(Rough|Hot|Teen).* Adult|Sex|Barely Legal Teen|Wet Teen|Teen (Action|Sweetheart|Orgies)|Bitch|Escorts|(^|\s)Cum($|\s|-)|C0ck|Pen[i1l]s|Lesbian",Subject,containsRE,"Sluts|F[u\*\-_~^]ck|Pussy|Pussies|(Suck|Big|Massive|Large) Cock|Virgin\W|Hard-?core|Cumshot|\WCum\W|Suck My|Lesbo Site|Blow ?Job|Sex Videos|Hot(test)? .*P[i1l]cs",Subject,containsRE,(?-i)ADULT|COCKS,Subject,containsRE,"(Nude|Naked|Sex) .*Pic|Barely (Legal|Adult)|(Wet|Dripping|Hot) (Teens|Lesbians)",Subject,containsRE,"Adult Links|Sex (Show|Site)|Porn (Movies|Flick)|Married.+But.+Lonely|Hot Moms|Sexy Photo|Wet Sex",Subject,containsRE,"Horny.+(Housewives|Teens)|(Naked|Nude) (Lesbians|Women|Teens|Girls)",Subject,containsRE,Animals.+(Girls|Women)|(Girls|Women).+Animals,Subject,containsRE,"Tight(est)? (Pussy|Vagina)|Dicks|V[il1]rg[il1]ns|P[0@]rn|L[o0][l1][il1]ta|Gang[ -]?bang| Dong|Hardc0re|H0rny|Cunt|Twat|Gir1s|\bTits?\b|Asshole" [enabled],"[2] Adult (B)","[2] Adult (B)",16711680,OR,Blacklist,Delete,Body,containsRE,"(Hot|Wet) Teen|Barely (Legal|Adult)",Body,containsRE,"(?-i)\WXXX\W(?i)|Site Secrets|Adult (Site )?Links",Body,containsRE,"\WCum\W|Hot Naked Women|Gang ?Bang|Fuck|Dildos",Body,containsRE,"Phone Sex|Married[ \.-]But[ \.-]Lonely",Body,containsRE,"You.{1,15}\d\d .{1,20}To Enter",Body,containsRE,https?://.*xxx.+$ [enabled],"[2] Bad ""X"" Header (H)","[2] Bad ""X"" Header (H)",16711680,OR,Blacklist,Delete,EntireHeader,containsRE,X-BulkEmail|X-Removal,EntireHeader,containsRE,"X-Sender.*News Breaker",EntireHeader,containsRE,X-Adverti[sz]e?ment:,EntireHeader,containsRE,"X-Mailer.*(Aristotle Mail|Avalanche|E-Mail Magnet|Emailer Platinum.*Internet Marketing|eMarksman|Extractor Pro|Floodgate Pro|Group ?Mail|Mailcast|Millennium Mailer|motion sender|SuperSpam|WorldMerge)" [enabled],"[2] CD/DVD (S)","[2] CD/DVD (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,Copy.+(DVDs|CDs),Subject,containsRE,"Copy Any (DVD|CD)",Subject,containsRE,"Back ?Up.+(DVDs|CDs)" [enabled],"[2] Cell Phone (S)","[2] Cell Phone (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"Free .*(Phone|Cellular|Nokia|Motorola)",Subject,containsRE,"(Cell |Cell.?Phone|Cellular) .+(Free|Static|Reception)",Subject,containsRE,boost.+(Cell.?Phone).+Signal,Subject,containsRE,(Cell.?Phone).+Signal.+boost,Subject,contains,"Antenna Amplifier",Subject,containsRE,"Better.+Cell Phone" [enabled],"[2] College Degree (S,B)","[2] College Degree (S,B)",16711680,OR,Blacklist,Delete,Subject,containsRE,"(Earn|University|College|Your|You Qualify).{1,20}(Degree|Diploma)",Body,containsRE,"(Earn|University|College|Your|You Qualify).{1,20}(Degree|Diploma)" [enabled],"[2] Computer (S)","[2] Computer (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"(No More|Rid Of|Stop|Eliminate|Delete|Tired Of) .*(Pop.?Up|Adware|Spyware)",Subject,containsRE,Protect.Your.Computer,Subject,containsRE,Surf.+Fast,Subject,contains,"Screen Saver" [enabled],"[2] Credit Cards (S,B)","[2] Credit Cards (S,B)",16711680,OR,Blacklist,Delete,Subject,containsRE,"(Gold|Platinum|Titanium|Approval|Guaranteed|Unsecured|Credit|No Deposit|Free|Get|Qualify).+(Master ?Card|Visa|(Credit|Gold|platinum).+Card|Approved|Approval)",Subject,containsRE,(Credit|Card).+(Approved|Approval|Accepted),Subject,containsRE,"(Get|New|Approved|Guaranteed|Apply).+ (Credit|Gold|Platinum|Titanium|Visa|MasterCard)",Subject,containsRE,"Accept.+Credit Cards|Merchant Account",Body,containsRE,"Accept.{1,15}Credit Cards|Merchant Account" [enabled],"[2] Credit Reports (S)","[2] Credit Reports (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"Credit Report" [enabled],"[2] Dating Service (S,F)","[2] Dating Service (S,F)",16711680,OR,Blacklist,Delete,Subject,containsRE,"(Find Your|Dream|Soul|Sexier).+Mate",Subject,containsRE,"(Are You|Meet Other|Chat With|Local|Contact) .*Single",Subject,containsRE,"True Love|Photos Of Singles|Find Someone Special|Meet Single People",Subject,containsRE,"(Some ?one|Guess Who) Wants To Meet You|Attract .*Instantly",From,contains,Dating,Subject,containsRE,"(Females|Singles|Women|Sexy) .* Your Area" [enabled],"[2] Dating Service (B)","[2] Dating Service (B)",16711680,OR,Blacklist,Delete,Body,containsRE,"(Find Your|Dream|Soul)[\s-]Mate",Body,containsRE,"Quality Relationship",Body,containsRE,"(Are You|Meet Other).{1,15}Single",Body,contains,"Meet A Married Woman" [enabled],"[2] Debt Consolidation (S)","[2] Debt Consolidation (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,(Debt|Bill).+(Payments|Relief|Free|Elimination|Help|Assistance|Termination),Subject,containsRE,"(Erase|Slash|Eliminate|Reduce|Cut|Too Much|Get Out Of|Credit Card|Away Your|Consolidate|Freedom From|Take Control|Solutions? To|Without|Clear|Paying|Terminate) .*(Debt|Bills)",Subject,containsRE,"(In|Got|Overwhelmed|Too (Much|Many)|Wipe Out|Worry.+About|Dissolve|Monthly|More).+(Debt|Bills)",Subject,containsRE,"(Perfect|Rebuild|Get Back|Bad|Clear).+Credit",Subject,containsRE,"Consolidation|(Home (Equity|Loan))|Bill Free|Financial .*(Help|Assistance)",Subject,containsRE,"Back (Taxes|Child Support)",Subject,containsRE,"(Stop Making|Reduce) .*Payments|Lost.+Job",Subject,containsRE,"Tax (Problems\?|Debt)",Subject,containsRE,"(Halt|Stop) Creditor|Get Help.+Today|Your Bills|Owe\?|Past Due\?|Financial Stress|(Bill|Money) Problems| Bill .*Free|Monthly Payments|Your .*Finances",Subject,containsRE,"High.+Interest|Improve.+Credit.+(Instantly|Immediately)|Consolidate .*Loan" [enabled],"[2] Debt Consolidation (B)","[2] Debt Consolidation (B)",16711680,OR,Blacklist,Delete,Body,containsRE,"Have Perfect Credit|Financially Free|Free (Yourself )?From Debt.*$",Body,containsRE,"Debt (Elimination|Consolidation)",Body,containsRE,"Tired of.{1,20}(Bill|Debt)" [enabled],"[2] Discounts (S)","[2] Discounts (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"(\d%|\$\d) .*(Off|Discount|Bonus|Intro|Financing|Reduce|Reduction|Less)",Subject,containsRE,"Hurry!|Pay Later|On Sale Today",Subject,containsRE,"Save .*(%|\$|Big|Huge|On Your)",Subject,containsRE,"(Discount|Cheap).+(Air ?Fare|Ticket|Vacation|Notice)",Subject,containsRE,((Unbelievable|Fantastic).+Price)|(Supplies.+Limited),Subject,containsRE,"Get Up To|Paying Too Much|For Just \$",Subject,containsRE,"Shop.+Save|Net Deals|Hot .* Deal" [enabled],"[2] Free/Win 1 (S)","[2] Free/Win 1 (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"(Award Confirmation|Sweepstakes Entry)",Subject,containsRE,Claim.+(Money|Your),Subject,containsRE,(Free|Win).+(\$|Access|Cash|Gifts?|Vacations?|Cruise|Pass(es|)|Unlimited|Tickets?|Coupons?|Certificates?|DVDs?|CDs?|Software),Subject,containsRE,"(Yours|You|Get|CDs|Try It|Shop For).+Free",Subject,containsRE,(?-i)FREE,Subject,containsRE,"Free .*(Delivery|Domain Registration|Hosting|Help|Porn|Quote|Shipping|Sample|Trial|Secrets|Consultation)",Subject,containsRE,"Win An? |Complimentary" [enabled],"[2] Free/Win 2 (S)","[2] Free/Win 2 (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,You.+(Won|Win|Winners?),Subject,containsRE,"^Win A.+",Subject,contains,"Government Grant",Subject,containsRE,"(Free Business Cards|Business Cards Free)",Subject,containsRE,"Become A Winner|Get (Your|A) Free" [enabled],"[2] Free/Win (B)","[2] Free/Win (B)",16711680,OR,Blacklist,Delete,Body,containsRE,"Get.{1,15}Free (Membership|Info)",Body,contains,"Claim Your Complimentary" [enabled],"[2] Gambling (S)","[2] Gambling (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,(Casino|WinBig!),Subject,containsRE,Get.+\$.+Free,Subject,containsRE,"Pay.+To Play" [enabled],"[2] Genealogy (S)","[2] Genealogy (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"Family (Tree|History)",Subject,contains,"Interactive Genealogy" [enabled],"[2] Health/Beauty (S)","[2] Health/Beauty (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"Feel .*(Healthier|Younger)|Reverse.Aging|Perfect Skin",Subject,containsRE,"(Stop|Quit) Smoking|Stimulate Hair",Subject,containsRE,"Penis.+(Enlargement|Bigger|Size)|Be Longer",Subject,containsRE,"Better Sex|Your Impotenc|Sexual Potency|Male Organ|Your Member\s",Subject,containsRE,"Doctor Approved|Pheromones",Subject,containsRE,"Bigger Breast|Enhance Your Size|Size (Matters|Does Matter)",Subject,containsRE,"(Giant|Thick(|er)|Fuller|Big(|ger)|Large(|r)|Enlarge Your) (Pen[i1l]s|Johnson|Dick|Tool|Knob|Manhood|Breasts)" [enabled],"[2] Health/Beauty (B)","[2] Health/Beauty (B)",16711680,OR,Blacklist,Delete,Body,containsRE,"Your Penis",Body,containsRE,"(Penile|Penis|Organ) Enlargement",Body,containsRE,"Large(|r) Penis" [enabled],"[2] HTML Spam Tricks (B)","[2] HTML Spam Tricks (B)",16711680,OR,Blacklist,Delete,Body,containsRE,"font size=""?0""?",Body,containsRE,"(()+([\w\s,\.\-]){1,20}){3}",Body,containsRE,"()[\w\s,\.\-]{1,20}(\1([\w\s,\.\-]){1,20}){2}" [enabled],"[2] Insurance/Healthcare (S,B)","[2] Insurance/Healthcare (S,B)",16711680,OR,Blacklist,Delete,Subject,contains,"Rates Reduced",Subject,contains,"Life Insurance",Subject,containsRE,"(Affordable|Reasonable) .*(Health ?care|Dental)",Body,contains,"Life Insurance" [enabled],"[2] International Drivers (S,B)","[2] International Drivers (S,B)",16711680,OR,Blacklist,Delete,Subject,containsRE,"International Driver(s|'s|) License",Body,containsRE,"International Driver(s|'s|) License" [enabled],"[2] Invalid Header Field (H)","[2] Invalid Header Field (H)",16711680,OR,Blacklist,Delete,EntireHeader,doesn'tContainRE,(?m)^Message-ID:\s+<.+@[\w\.-]+>,EntireHeader,doesn'tContainRE,"(?m)^Date:\s+([A-Z]{3},\s+)?\d{1,2}\s+[A-Z]{3}\s+\d{4}\s+\d{1,2}:\d{2}(:\d{2})?\s+(([+-]\d{4})|([CEMP][DS]|GM|U)T|[AMNYZ])" [enabled],"[2] Investing (S)","[2] Investing (S)",16711680,OR,Blacklist,Delete,Subject,contains,"Investment Report" [enabled],"[2] Loans/Refinance (S)","[2] Loans/Refinance (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,Refinance|Mortgage,Subject,containsRE,"(Homeowner|Get Your) .*Loan",Subject,containsRE,"((Sell or Buy)|(Buy or Sell)).+Home",Subject,containsRE,"Lowest.+Rates|Lower Your .+Payment",Subject,containsRE,(No|Low).Cost.+(Loan|Application),Subject,containsRE,"Pre.?Approved|Perfect Credit|You(r|'re)\W+Approved",Subject,containsRE,"Need Credit\?" [enabled],"[2] Misc. Ads (S)","[2] Misc. Ads (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"(?-i)GUARANTEED(?i)|[,-] Guaranteed",Subject,containsRE,"Pennies A Day|As Seen On|Act Now|Risk Free|Get.+(Today|Now)!",Subject,containsRE,"(Seized|Unclaimed) (Property|Properties)",Subject,containsRE,"In (Just|Only) (Minutes|Moments)",Subject,containsRE,"^Now Available|Try Our New|We Can Help|No Cost",Subject,containsRE,Call\s\S*\d\d,Subject,containsRE,"Lowest (Price|Rate)|Save (Hundreds|Thousands)",Subject,containsRE,"100% (Safe|Effective|Guaranteed)|Guarantee .*Results|Results Guaranteed|Cut.+ Cost",Subject,containsRE,"No.Obligation|No.Risk|Seen On TV|Limited Time|Join Now|\sNow!|Why Wait" [enabled],"[2] Misc. Ads (B)","[2] Misc. Ads (B)",16711680,OR,Blacklist,Delete,Body,containsRE,"Revealed.{1,10}Pros\W",Body,containsRE,"Money.Back Guarantee|Real Savings On",Body,containsRE,"Dear Homeowner|No Credit Card|To Learn More",Body,containsRE,"Risk.Free Trial",Body,containsRE,"(Special|Limited|Limited Time).{1,25}(Offer|Opportunity)",Body,containsRE,"Get Your Free|Order Now And Get" [enabled],"[2] Money Making 1 (S)","[2] Money Making 1 (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"((Work(ing|) (From|At))|Money At) .*Home",Subject,containsRE,"Learn How To Make|Get Paid (To|For)|Make A Fortune|Build Your Wealth",Subject,containsRE,"(\$|Bonus|Free).+(\$|Bonus|Free|Paid|Hour|Real Estate)",Subject,containsRE,"(Residual|Guaranteed|Serious|Earn|Mak(e|ing)|Extra|Long Term).+(\$|Money|Income)",Subject,contains,Cash,Subject,containsRE,"Business Owners|Increase Sales|Advertise.+Business",Subject,containsRE,"Be.+Your Own Boss",Subject,containsRE,"(Excellent|Wonderful|Money Making|Investment).+Opportunity",Subject,containsRE,"(Home.Based|Your Own).+Business",Subject,containsRE,"We Will Train|At Home Rep|Side Business" [enabled],"[2] Money Making 2 (S)","[2] Money Making 2 (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"%.+Money|Money.+%|Money Making",Subject,containsRE,"Advance Your Career|Career Advancement",Subject,containsRE,"Your Own Hours|Work(|ing).+When You Want|Employment Opportunity" [enabled],"[2] Money Making (B)","[2] Money Making (B)",16711680,OR,Blacklist,Delete,Body,contains,"No Experience Necessary",Body,contains,"Per Week!",Body,containsRE,"(Earn(ing|)|Make) Money .{1,15}From Home",Body,contains,"Make Up To $" [enabled],"[2] My Name/E-mail* (F,S)","[2] My Name/E-mail* (F,S)",16711680,OR,Blacklist,Delete,Subject,contains,jwsmith2,From,contains,jwsmith2 [enabled],"[2] Not A Recipient* (T,C)","[2] Not A Recipient* (T,C)",16711680,AND,Blacklist,Delete,To,doesn'tContainRE,MailBoxName1|MailBoxName2,CC,doesn'tContainRE,MailBoxName1|MailBoxName2 [enabled],"[2] Pharmacy (S,B)","[2] Pharmacy (S,B)",16711680,OR,Blacklist,Delete,Subject,containsRE,V[i1l]agra|Erectile,Subject,containsRE,"(?-i)HGF|HGH(?-i)|Human Growth",Body,containsRE,Growth.+Hormone|(?-i)HGH|HGF(?i),Subject,containsRE,"Let Our Doctors|Prescribed Online",Body,containsRE,"Online (Prescription|Rx|Drug|Pharmacy)",Subject,containsRE,"Online (Prescription|Rx|Drug|Pharmacy)",Body,containsRE,"Prescription Drugs Online|bestexpressmeds",Subject,containsRE,"Non.?Prescription|Herbal Alternative" [enabled],"[2] Possible Virus/Worm/Trojan (S,B)","[2] Possible Virus/Worm/Trojan (S,B)",16711680,OR,Delete,TakesPrecedence,Subject,contains,"Fw: Naked Wife",Subject,contains,"Important: Windows update",Subject,contains,"Internet Security Update",Subject,containsRE,".+you have an E-Card from.+|.+you have a greeting card from .+\.",Body,containsRE,"(?i)Friend-Greetings\.com|FriendGreetings\.com " [enabled],"[2] Printer/Toner (S)","[2] Printer/Toner (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"(Ink(jet)?|Printer) Cartridges",Subject,containsRE,(Ink.+toner)|(Toner.+Ink) [enabled],"[2] Probable Hoax (S)","[2] Probable Hoax (S)",16711680,OR,Delete,TakesPrecedence,Subject,contains,"Bill 602P" [enabled],"[2] Satellite/Cable TV (S)","[2] Satellite/Cable TV (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,(DirecTV|DishNet),Subject,containsRE,Free.+(Installation|Satellite),Subject,containsRE,"(TV|System|Digital) .+Installed",Subject,containsRE,"(Digital|Cable) Descramble|Descramble (Digital|Cable)" [enabled],"[2] S P A C E D Subject (S)","[2] S P A C E D Subject (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"[A-Z]([^A-Z0-9]+)([A-Z]\1){2,}[A-Z]",Subject,containsRE,"([A-Z]+[:=\.\-_]){3,}" [enabled],"[2] Spy/Detective (B,S)","[2] Spy/Detective (B,S)",16711680,OR,Blacklist,Delete,Subject,containsRE,(Uncover.+Truth|Find|Investigate).+Anyone,Subject,containsRE,"(Background Investigation|Investigative|Spy|Top Secret) Software",Subject,containsRE,"Detective Software|Private Eye|Spy On (People|Anyone)",Body,containsRE,"Spy On Anyone|Discover.{1,15}Secrets" [enabled],"[2] Telephone/Long Distance (S)","[2] Telephone/Long Distance (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"(Phone|Long Distance|Calling) Card",Subject,containsRE,"Long Distance.+(Calls|Calling|Service|Rates)",Subject,containsRE,"Rate Plans?",Subject,containsRE,"(Paying|Cheap(est|)|Lower).+Long Distance",Subject,containsRE,(Night|Weekend).+Minutes,Subject,contains,"No Monthly Fee" [disabled],"[2] Vague Recipient (T)","[2] Vague Recipient (T)",16711680,OR,Blacklist,Delete,To,containsRE,"Friend|Undisclosed Recipients",To,containsRE,"Valued (Customer|Consumer)",To,containsRE,"Rates At.+Lows",To,containsRE,^(Postmaster|Webmaster|Administrator|User)$ [enabled],"[2] Weight Loss (S)","[2] Weight Loss (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,We[i1l]ght.Loss,Subject,containsRE,(Lose|Melt).+(LBS|Pounds|We[i1l]ght|Fat),Subject,containsRE,"Dieting|Unwanted (Weight|Pounds)",Subject,containsRE,"Fat Burn(ing|er)|Burn(ing|) Fat",Subject,containsRE,"Get.+Firm Abs" [enabled],"[3] Base 64 Encoded (B)","[3] Base 64 Encoded (B)",33023,OR,Blacklist,Delete,Body,contains,"Content-Transfer-Encoding: base64",EntireHeader,contains,"Content-Transfer-Encoding: base64" [enabled],"[3] Contains Script (B)","[3] Contains Script (B)",33023,OR,Delete,Body,contains,"SCRIPT LANGUAGE=" [enabled],"[3] Opt-Out (B)","[3] Opt-Out (B)",33023,OR,Blacklist,Delete,Body,containsRE,"""?Remove""? In the Subject",Body,containsRE,"To Stop Receiving.{1,20}Offers|To Unsubscribe",Body,containsRE,"To Be (Removed|Taken off).{1,10}Mailing",Body,containsRE,"See.{1,10}Unsubscribe Instructions",Body,containsRE,"Click (Here|The Link)",Body,containsRE,"Future Mailings|You Are Receiving",Body,containsRE,"You.{1,10}Opted.{1,10}To Receive.{1,10}(Promotions|Offers)" [enabled],"[3] Questionable Link (B)","[3] Questionable Link (B)",33023,OR,Blacklist,Delete,Body,containsRE,http://[1-9],Body,containsRE,"Click.{1,20}To Order",Body,containsRE,http://[\w\.]+@,Body,contains,"href=""http://massivefreehosting.com" [enabled],"[3] Subject All Caps/Missing (S)","[3] Subject All Caps/Missing (S)",33023,OR,Delete,Subject,doesn'tContainRE,(?-i)[a-z],Subject,doesn'tContainRE,. [enabled],"[3] Suspicious Origin (F)","[3] Suspicious Origin (F)",33023,OR,Blacklist,Delete,From,containsRE,@(msn\.com|yahoo\.com|hotmail\.com|excite\.com|aol\.com),From,containsRE,you(rmail|rdomain)\.(net|com|org|cc),From,containsRE,friend@public\.(net|com|org|cc),From,containsRE,"promotions?|bargains?|Screen ?Saver",From,containsRE,Anybody|Anyone|Bulk|Casino|Credit|Everybody|Everyone|Friend|Hotdeals|Nobody|Promo|Savetrees|Winner|User|XX+|Free|AutoQuote,From,containsRE,offers|sav(e|ings)|special|free|hotdeals|wincash,From,containsRE,"Inkjet ?Cartridges",From,containsRE,"Relief From|Concerned|Work At Home",From,containsRE,Suffering|Unwanted|Guaranteed|opt[\._-]?in,From,containsRE,"(.)\1{3,}|(.+_){2,}|([A-Z]+[\.\-_]){3,}" [enabled],"[3] Suspicious Routing* (H)","[3] Suspicious Routing (H)",33023,OR,Blacklist,Delete,EntireHeader,containsRE,(?m)^Received:.+(\.ru|\.cz|\.ro|\.md|\.fi|\.dk|\.vu|\.kr|\.no|\.br|\.jp|\.tw|\.cn|\.nl|\.co|\.in|\.se|\.ac|\.it|\.fr|\.tr|\.be|\.at|\.za|\.es)[^\.\w] [enabled],"[3] Wide Distribution (T)","[3] Wide Distribution (T)",33023,OR,Delete,To,containsRE,"(.+@){10,}",CC,containsRE,"(.+@){10,}" [disabled],"POPFile Spam","POPFile Spam",255,AND,Blacklist,Delete,EntireHeader,contains,"X-Text-Classification: spam" ============================ 4. BEFORE USING THE FILTERS: ============================ Some of the filters require customization before use, because they check for something specific to you - like your mailbox name, etc. To edit the filters, open MailWasher, hit Ctrl-I (or use the Filter Sidebar), and customize any filter marked with an asterisk (*) at the end of its name: * Enter the country codes you most often receive spam from in the "Suspicious Routing" filter. Make sure the filter DOES NOT include your country code or that of friends you often correspond with. You can always add more as you go if you are not sure -- watch your blacklist for hints. Refer to the Country Codes list at the bottom of this e-mail for ideas, if you like. * Change the "My Name/E-mail" filter to contain your mailbox name. For example, if your e-mail address is jwsmith2@msn.com, you would enter "jwsmith2". Do this for each account you check. Also, be sure to put all of your legitimate e-mail addresses in your "Friends" list. * Put the e-mail address of all of the accounts that you are checking in the "Not a recipient" filter. If you don't care to use this filter, you can disable it, and enable the more generic "Vague Recipient List" filter, but it does not work as well. Be sure your friends list is up to date when using this filter, and also pay attention to the next point: * Add any mailing lists to which you belong to the "Mailing List" filter. This prevents messages from them being marked as spam. (Mailing list emails normally have the same "To" address, like "mygroup@yahoogroups.com", but can come from many different "From" addresses, so you would not be able to add them all to your "Friends" list.) * If there is a person who has been an annoyance, put their address in "Always Bounce" filter. After a few attempts, perhaps they will get the idea that the mailbox has been deleted. ;-) ================================= 5. HOW THE FILTERS ARE ORGANIZED: ================================= The filters are named to aid in sorting and recognition. The convention is: [Priority] Name (Type) For example: [2] Misc. Ads (S) Priority: There are currently three priority fields: 1: High priority, such as detecting legitimate e-mails 2: Normal priority, used for most filters 3: Low priority, for catchall filters such as Suspicious Routing Type: Indicates the mail field(s) being checked. B = Body C = CC F = From H = Entire Header R = Return Path S = Subject T = To etc. The filters are sorted in [Priority, Name, Type] order when distributed. ================== 6. TIPS AND HINTS: ================== * Make heavy use of the Blacklist and Friends list. If your filtering is aggressive, it can be almost as important that known friendly addresses are in your Friends list as having spammers in your Blacklist. Also, these are the only addresses that you can be SURE are spammers or friends - the rest is just a good guess by the various filters. * Check through your blacklist from time to time to see if there are many offenders from a single domain, or with the same name from multiple domains, which you may then blacklist using a wildcard expression. Use the spiffy "Sort the emails in the blacklist and friends list by domain" option to help you find them, by sorting by name, then by domain. For example, do you see the pattern here? fat-burner2301w07@excite.com fat-burner4520u33@excite.com fat-burner7365q45@excite.com fat-burner7816k13@excite.com [...] Try replacing these with fat-burner*@excite.com instead. Make sure when blacklisting an entire domain that it is a spam domain, however, or you may filter legitimate e-mails. The danger is much less if the domain has a name like "opt-in.com", "greatdeals.org", or "SpammersRUs.net". ;-) If you want to do more precise wildcard blacklisting using regular expressions, modify the "Extended Blacklist" or "Suspicious Origin" Filters. * Set a reasonable expiration time for the addresses in your blacklist. Many spam addresses are forged and probably won't be used again. * If you are sure of your blacklist, use the "Auto-delete Blacklisted Messages" option in MailWasher so that you don't have to look at messages from the buggers anymore. :-) * Use MailWasher's Heuristic filters to help locate spam. * Every effort has been made to match likely spam words and phrases and *not* match friendly e-mails, but the best spam checker is still you. Modify and grow these filters to suit your individual needs. Remember that many spammers *want* their e-mails to look like personal e-mail, so you might have to be a little clever in what you look for. * Tweak! Modify! If you don't like something, change it! The more you work with it, the better you will get. Put on your nerd hat and go for it. * There has been a lot of debate regarding bouncing e-mail messages. Some people are almost violently opposed to it because of the extra load it creates for the mail servers, and there is merit to their argument. In my personal experience, bouncing has been effective in only about 1% of the cases, down from about 5% a couple of years ago. Most of that seems to be due to the increase in in forged return addresses -- less than 10% of the spam I receive has a valid return address. I've found that bouncing is most effective against bothersome individuals, or "legitimate" ad list maintainers (is that an oxymoron, or what?!). In summary, I still find bouncing effective in certain cases. The approach I take is to selectively bounce. If the message looks like it has a forged address, it will probably do no good to try to bounce it. ================== 7. TROUBLESHOOTING ================== * SLOW FILTERING If your filtering speed is not acceptable, it is possible that the number of regular expressions in the filters and wildcards in the Blacklist are the culprits. You can try disabling some of the filters that are least effective for you, and removing some of the wildcard Blacklist items. * FILTERS MARK LEGITIMATE EMAILS AS SPAM This may happen from time to time, and no spam filter is immune from it. I've experimented with a number of different filter types -- even ones which rely on people manually marking spam for submission to a central database -- and there were still false positives. It turns out that one person's spam might be another person's "ham"! You can edit a filter to remove the problematic portion, disable it completely, or simply add the sender to your "Friends" list. * FILTERS NOT CATCHING ALL SPAM Spammers are pretty crafty, so there are bound to be some missed spam messages. In some cases, such as Base64 encoded messages, or ones with special characters purposly inserted in the middle of words (e.g.: MALE ORGAN), it might not be possible to directly catch the spam phrases. Try to look for other indicators, including the technique used to obfuscate the spam, and add them to your filters. If you use a product such as Firetrust Benign, you can daisy-chain MailWasher and Benign together. Benign will decode Base64, get rid of extraneous comments, etc., that spammers try to use to confuse filters. * MAILWASHER GIVES ACCESS VIOLATION ON STARTUP, OR DOES NOT REGOGNIZE ALL OF THE FILTERS This is most commonly caused by a badly formatted filters.txt file. Some editors will break lines if they are long by inserting CR or CR/LF characters. Unfortunately, this will make the file unusable. 1) Go to the end of the file and delete any extra characters (usually blank spaces or extra lines) at the end of the text. Your cursor should be sitting behind the very last character when you are through. 2) Look for, and delete, any blank lines. 3) If the above options do not work, go back into the file and review it for wrapped lines. The filter lines should be too long to fit in the editor window, and each line should begin with "[enabled]" or "[disabled]". If using Notepad as your editor, be sure that Word Wrap is turned off. *** IF ALL ELSE FAILS ... HELP!! (Contact Info) *** If you find yourself stuck, drop a note in the MailWasher support forum at http://www.computercops.biz/forum50.html. I monitor the forum, as do a number of other very helpful folks who can give you a hand even if I'm not around. The Firetrust forums in general can be accessed at http://www.computercops.biz/forum-cat15.html. =============================== 8. SUGGESTED STARTER BLACKLIST: =============================== I highly recommend using blacklists to mark emails from known spam domains, or from domains which have no MX records (so that you can't reply to their emails). I go so far as to auto-delete blacklisted messages, so that I never even have to see the spam from these fellows. Use caution if you do that, though - if a friend accidentally gets on your blacklist, you will never see their emails again! Wildcards cause slower address matching, so if your speed is unacceptable, try backing some of these out. Also, glance through them and make sure that they don't filter out any legitimate domains from which you may want to accept e-mails. Be sure to set a resonable expiration time on unused addresses in your blacklist, or you will find it getting huge. Many spammers forge an address and use it only once, so there is no use keeping it around. I use 90 days, but you may want to use more or less depending on your volume of spam. You can install the addresses below by copying them under the [Blacklisted emails] section of blacklist.txt (be sure to leave a blank line between "[Blacklisted emails]" and the first list item, if your list is empty), or you may copy and paste each one (minus the space and number at the end)into the MailWasher "Wildcard expression" box when adding an entry to the Blacklist. *@*.? 37766 *@*.actionemail.com 37772 *@*.aol.com 37766 *@*.azogle.com 37766 *@*.clickboost.com 37702 *@*.cm02.net 37766 *@*.cm03.net 37763 *@*.compuserve.com 37766 *@*.dailyspecialdaily.com 37766 *@*.dlbnetwork.net 37772 *@*.emailcourrier.com 37768 *@*.eserve01.com 37766 *@*.ew01.com 37774 *@*.ew02.com 37766 *@*.gettinthewordout.com 37766 *@*.homesweb.com 37766 *@*.hotmail.com 37740 *@*.msn.com 37718 *@*.netscape.net 37774 *@*.null 37766 *@*.offersonthenet.com 37766 *@*.postalmanager.com 37766 *@*.rbtechnologies.net 37766 *@*.responsenetwork.net 37766 *@*.responsesystems.org 37766 *@*.savingspartner.com 37766 *@*.specialmailoffers.com 37766 *@*.superdealnow.com 37693 *@*.temd.net 37770 *@*.unitedmarketingstrategies.com 37766 *@*.yahoo.com 37757 *@*deals.+ 37774 *@*direct.+ 37772 *@*offers.+ 37774 *@*promotion*.+ 37766 *@+.tep1.com 37766 *@1-discounts.com 37766 *@4freespeech.us 37698 *@4mens-health.com 37766 *@4optin.net 37766 *@aaaaabb.com 37766 *@aaacdr.com 37773 *@adelivery.com 37693 *@admanmail.com 37766 *@asp-platform.com 37769 *@b.fwdml.com 37766 *@bargaineye.com 37766 *@bnb4.com 37702 *@businessvvorld.com 37751 *@buyercooperative.com 37766 *@chipsanddip.net 37751 *@clickboost.com 37702 *@clickitgood.com 37766 *@dealbag.com 37766 *@dealcop.com 37768 *@dealcowboy.com 37766 *@discountcertificates.com 37773 *@dlbnetwork.net 37766 *@dmx0.com 37766 *@dmx1.com 37691 *@edirectbroadcast.com 37766 *@emailbargains.cc 37766 *@emailbenefits.com 37687 *@emailpartners.com 37702 *@emailresults.* 37766 *@etracks.com 37766 *@extremepricecuts.com 37698 *@faceolpdk.net 37766 *@finalblast.com 37709 *@flashmail.com 37719 *@floortwo.com 37766 *@free2sample.com 37768 *@free-inter.net 37750 *@frugaljoe.com 37766 *@fultondirect.com 37766 *@gr8dls.com 37766 *@greatestsalesoffer.com 0 *@greenlightmail.com 37735 *@homesweb.com 37766 *@hotdealtime.com 37696 *@ientrymail.com 37773 *@ineedhits.com 37766 *@ixpweb.com 37771 *@jsuati.com 37773 *@jumpjive.com 37766 *@keromail.com 37766 *@labelsdaily.com 37766 *@labelxyz.com 37766 *@listpower.com 37772 *@lists.inglesa.net 37766 *@lists.postlite.com 37766 *@lists.postmastergeneral.com 37766 *@lists.zoanmail.com 37774 *@lotto-mail.com 37693 *@magic-inbox.com 37766 *@mail.directem.com 37766 *@mail.krazykash.com 37774 *@mail.realem.com 37766 *@mail5.optin-servers.com 37702 *@mailer.democrats.org 37771 *@mailexcite.com 37733 *@mandic.com.br 37766 *@mediaone.net 37735 *@mgob.woodlandmail.com 37766 *@migada.com 37689 *@mmsn.com 37766 *@monterey.tp40.net 37712 *@offer100.com 37766 *@offeremail.com 37698 *@offerwarehouse.com 37766 *@opti10.com 37702 *@opti8.com 37702 *@opti9.com 37702 *@opt-in.coopt.com 37766 *@optindeals.com 37766 *@optinemail.com 37766 *@optinprogram.net 37766 *@optmailer.net 37766 *@oselwz.com 37766 *@over*l*y*cute.net 37766 *@powerfulquotes.com 37766 *@rb27ex.com 37771 *@reply.inboxoffers-mail.com 37770 *@reply.mb00.net 37774 *@reply.pm0.net 37766 *@save99.com 37766 *@sbase22.com 37774 *@sbase30.com 37702 *@send-e-mail.com 37766 *@sendingtoyou.com 37766 *@smartdiscounts.net 37766 *@smarteryou.com 37702 *@specialoffers12.com 37763 *@speedyvalues.com 37766 *@sporttime.info 37766 *@spyvalues.com 37766 *@super-bargains.net 37766 *@thedealdoctor.com 37763 *@trackingclicks.com 37766 *@valuegazette.com 37763 *@vampiress.zzn.com 37769 *@varietymail.net 37693 *@vendeeamerica.com 37766 *@versioncorp.com 37705 *@winacomputer.net 37771 *@xmr3.com 37770 *@xtreme-dealz.com 37763 *@yosup.com 37702 *@yourbigfun.com 37766 *@yourbigvote.com 37766 *@yourmailsource.com 37774 *@yourwap.com 37746 *_adult_*@yahoo.com 37766 *_cock_*@yahoo.com 37766 *_girls_*@yahoo.com 37766 *_horny_*@yahoo.com 37766 *_naked_*@yahoo.com 37766 *_pussy_*@yahoo.com 37766 *_sluts_*@yahoo.com 37766 *_teens_*@yahoo.com 37766 *_virgin*_*@yahoo.com 37766 *_wet_*@yahoo.com 37766 aka+@excite.com 37766 bestoffers2@*.*.* 37698 crabtree*@yahoo.com 37766 fat-burner*@excite.com 37707 final??@seznam.cz 37768 free_*@yahoo.com 37766 free-whiteteeth*@excite.com 37766 irnmh+ooem@yahoo.com 37729 l.o.a.n.newsletter+@+ 37766 lst*1@cellb???.net 37766 mail*@mail.play4keeps.com 37774 mike0123+@yahoo.com 37766 mortgage.quote+@* 37766 niki+niki@yahoo.com 37725 offers@* 37774 optitarget-+@opti+.com 37766 suayjoe@* 37766 successx*@21cn.com 37766 tryu567@* 37766 updates*@smilepop.com 37766 =========================== 9. COUNTRY CODES REFERENCE: =========================== Use these country codes in your filters (such as "[3] Suspicious Routing* (H)"), or in your blacklist. af Afghanistan al Albania dz Algeria as American Samoa ad Andorra ao Angola ai Anguilla aq Antarctica ag Antigua And Barbuda ar Argentina am Armenia aw Aruba ac Ascension Island au Australia at Austria az Azerbaijan bs Bahamas bh Bahrain bd Bangladesh bb Barbados by Belarus be Belgium bz Belize bj Benin bm Bermuda bt Bhutan bo Bolivia ba Bosnia And Herzegowina bw Botswana bv Bouvet Island br Brazil io British Indian Ocean Territory bn Brunei Darussalam bg Bulgaria bf Burkina Faso bi Burundi kh Cambodia cm Cameroon ca Canada cv Cape Verde ky Cayman Islands cf Central African Republic td Chad cl Chile cn China cx Christmas Island cc Cocos (Keeling) Islands co Colombia km Comoros cg Congo cd Congo The Democratic Republic Of The ck Cook Islands cr Costa Rica ci Cote D'ivoire hr Croatia cu Cuba cy Cyprus cz Czech Republic dk Denmark dj Djibouti dm Dominica do Dominican Republic tp East Timor ec Ecuador eg Egypt sv El Salvador gq Equatorial Guinea er Eritrea ee Estonia et Ethiopia fk Falkland Islands fo Faroe Islands fj Fiji fi Finland fr France fx France Metropolitan gf French Guiana pf French Polynesia tf French Southern Territories ga Gabon gm Gambia ge Georgia de Germany gh Ghana gi Gibraltar gr Greece gl Greenland gd Grenada gp Guadeloupe gu Guam gt Guatemala gg Guernsey gn Guinea gw Guinea-Bissau gy Guyana ht Haiti hm Heard And Mc Donald Islands va Holy See (Vatican City State) hn Honduras hk Hong Kong hu Hungary is Iceland in India id Indonesia int International ir Iran iq Iraq ie Ireland im Isle of Man il Israel it Italy jm Jamaica jp Japan je Jersey jo Jordan kz Kazakhstan ke Kenya ki Kiribati kp Korea, Democratic People's Republic Of kr Korea, Republic Of kw Kuwait kg Kyrgyzstan la Lao People's Democratic Republic lv Latvia lb Lebanon ls Lesotho lr Liberia ly Libyan Arab Jamahiriya li Liechtenstein lt Lithuania lu Luxembourg mo Macau mk Macedonia mg Madagascar mw Malawi my Malaysia mv Maldives ml Mali mt Malta mh Marshall Islands mq Martinique mr Mauritania mu Mauritius yt Mayotte mx Mexico fm Micronesia md Moldova mc Monaco mn Mongolia ms Montserrat ma Morocco mz Mozambique mm Myanmar na Namibia nr Nauru np Nepal nl Netherlands an Netherlands Antilles nc New Caledonia nz New Zealand ni Nicaragua ne Niger ng Nigeria nu Niue nf Norfolk Island mp Northern Mariana Islands no Norway om Oman pk Pakistan pw Palau pa Panama pg Papua New Guinea py Paraguay pe Peru ph Philippines pn Pitcairn pl Poland pt Portugal pr Puerto Rico qa Qatar re Reunion ro Romania ru Russian Federation rw Rwanda kn Saint Kitts And Nevis lc Saint Lucia vc Saint Vincent And The Grenadines ws Samoa sm San Marino st Sao Tome And Principe sa Saudi Arabia sn Senegal sc Seychelles sl Sierra Leone sg Singapore sk Slovakia si Slovenia sb Solomon Islands so Somalia za South Africa gs South Georgia And The South Sandwich Islands es Spain lk Sri Lanka sh St. Helena pm St. Pierre And Miquelon sd Sudan sr Suriname sj Svalbard And Jan Mayen Islands sz Swaziland se Sweden ch Switzerland sy Syrian Arab Republic tw Taiwan tj Tajikistan tz Tanzania, United Republic Of th Thailand tg Togo tk Tokelau to Tonga tt Trinidad And Tobago tn Tunisia tr Turkey tm Turkmenistan tc Turks And Caicos Islands tv Tuvalu ug Uganda ua Ukraine ae United Arab Emirates gb United Kingdom uk United Kingdom us United States um United States Minor Outlying Islands uy Uruguay uz Uzbekistan vu Vanuatu ve Venezuela vn Viet Nam vg Virgin Islands (British) vi Virgin Islands (U.S.) wf Wallis And Futuna Islands eh Western Sahara ye Yemen yu Yugoslavia zm Zambia zw Zimbabwe ============================= 10. HISTORY, BUGS, TODO, ETC. ============================= HISTORY: -------------------- 2003-06-23 (Monday) -------------------- * Fixed some bugs in the following filter (thanks to "TonyKlein" for reporting! hopefully I didn't create any new problems.) [enabled],"[3] Opt-Out (B)","[3] Opt-Out (B)",33023,OR,Blacklist,Delete,Body,containsRE,"""?Remove""? In the Subject",Body,containsRE,"To Stop Receiving.{1,20}Offers|To Unsubscribe",Body,containsRE,"To Be (Removed|Taken off).{1,10}Mailing",Body,containsRE,"See.{1,10}Unsubscribe Instructions",Body,containsRE,"Click (Here|The Link)",Body,containsRE,"Future Mailings|You Are Receiving",Body,containsRE,"You.{1,10}Opted.{1,10}To Receive.{1,10}(Promotions|Offers)" * Altered this filter to work better by catching more types of spacing characters. Thanks to "shortbackandsides" for the suggestion! [enabled],"[2] S P A C E D Subject (S)","[2] S P A C E D Subject (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"[A-Z]([^A-Z0-9]+)([A-Z]\1){2,}[A-Z]",Subject,containsRE,"([A-Z]+[:=\.\-_]){3,}" * Changed this filter to catch some of those fake HTML tags used to break up words: [enabled],"[2] HTML Spam Tricks (B)","[2] HTML Spam Tricks (B)",16711680,OR,Blacklist,Delete,Body,containsRE,"font size=""?0""?",Body,containsRE,"(()+([\w\s,\.\-]){1,20}){3}",Body,containsRE,"()[\w\s,\.\-]{1,20}(\1([\w\s,\.\-]){1,20}){2}" * Updated the following filters with minor tweaks: [enabled],"[2] Adult (S)","[2] Adult (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"XXX|(Adult|Mature) Content|Adults? Only|No Minors|Uncensored",Subject,containsRE,"(Rough|Hot|Teen).* Adult|Sex|Barely Legal Teen|Wet Teen|Teen (Action|Sweetheart|Orgies)|Bitch|Escorts|(^|\s)Cum($|\s|-)|C0ck|Pen[i1l]s|Lesbian",Subject,containsRE,"Sluts|F[u\*\-_~^]ck|Pussy|Pussies|(Suck|Big|Massive|Large) Cock|Virgin\W|Hard-?core|Cumshot|\WCum\W|Suck My|Lesbo Site|Blow ?Job|Sex Videos|Hot(test)? .*P[i1l]cs",Subject,containsRE,(?-i)ADULT|COCKS,Subject,containsRE,"(Nude|Naked|Sex) .*Pic|Barely (Legal|Adult)|(Wet|Dripping|Hot) (Teens|Lesbians)",Subject,containsRE,"Adult Links|Sex (Show|Site)|Porn (Movies|Flick)|Married.+But.+Lonely|Hot Moms|Sexy Photo|Wet Sex",Subject,containsRE,"Horny.+(Housewives|Teens)|(Naked|Nude) (Lesbians|Women|Teens|Girls)",Subject,containsRE,Animals.+(Girls|Women)|(Girls|Women).+Animals,Subject,containsRE,"Tight(est)? (Pussy|Vagina)|Dicks|V[il1]rg[il1]ns|P[0@]rn|L[o0][l1][il1]ta|Gang[ -]?bang| Dong|Hardc0re|H0rny|Cunt|Twat|Gir1s|\bTits?\b|Asshole" [enabled],"[2] Debt Consolidation (S)","[2] Debt Consolidation (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,(Debt|Bill).+(Payments|Relief|Free|Elimination|Help|Assistance|Termination),Subject,containsRE,"(Erase|Slash|Eliminate|Reduce|Cut|Too Much|Get Out Of|Credit Card|Away Your|Consolidate|Freedom From|Take Control|Solutions? To|Without|Clear|Paying|Terminate) .*(Debt|Bills)",Subject,containsRE,"(In|Got|Overwhelmed|Too (Much|Many)|Wipe Out|Worry.+About|Dissolve|Monthly|More).+(Debt|Bills)",Subject,containsRE,"(Perfect|Rebuild|Get Back|Bad|Clear).+Credit",Subject,containsRE,"Consolidation|(Home (Equity|Loan))|Bill Free|Financial .*(Help|Assistance)",Subject,containsRE,"Back (Taxes|Child Support)",Subject,containsRE,"(Stop Making|Reduce) .*Payments|Lost.+Job",Subject,containsRE,"Tax (Problems\?|Debt)",Subject,containsRE,"(Halt|Stop) Creditor|Get Help.+Today|Your Bills|Owe\?|Past Due\?|Financial Stress|(Bill|Money) Problems| Bill .*Free|Monthly Payments|Your .*Finances",Subject,containsRE,"High.+Interest|Improve.+Credit.+(Instantly|Immediately)|Consolidate .*Loan" [enabled],"[2] Health/Beauty (S)","[2] Health/Beauty (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"Feel .*(Healthier|Younger)|Reverse.Aging|Perfect Skin",Subject,containsRE,"(Stop|Quit) Smoking|Stimulate Hair",Subject,containsRE,"Penis.+(Enlargement|Bigger|Size)|Be Longer",Subject,containsRE,"Better Sex|Your Impotenc|Sexual Potency|Male Organ|Your Member\s",Subject,containsRE,"Doctor Approved|Pheromones",Subject,containsRE,"Bigger Breast|Enhance Your Size|Size (Matters|Does Matter)",Subject,containsRE,"(Giant|Thick(|er)|Fuller|Big(|ger)|Large(|r)|Enlarge Your) (Pen[i1l]s|Johnson|Dick|Tool|Knob|Manhood|Breasts)" * Changed the default state of this filter to "disabled", since it does not seem to be that commonly used. Please toggle it on if you need it! That was the only change. [disabled],"[1] ""Friend"" Code* (S)","[1] ""Friend"" Code* (S)",26112,OR,Legitimate,Subject,contains,[nospam] * Added the following filter for those of you using the POPFile hack. I'll put the instructions on my site, but for now they are in the forum at http://www.computercops.biz/postlite4137-.html. Note that it doesn't have a prioritization or type, since there's another program doing the actual filtering/categorization. [disabled],"POPFile Spam","POPFile Spam",255,AND,Blacklist,Delete,EntireHeader,contains,"X-Text-Classification: spam" -------------------- 2003-06-02 (Monday) -------------------- This revision is larger than usual, mainly because of the new version of MailWasher due out shortly. The option to download more than 20 lines of a message prompted me to get busy cleaning up some sloppy filters, and to be more careful with the "+" and "*" iteration qualifiers, so that there will be less falsing accross the message body. * All of the starter blacklist items now have an expiration date instead of being non-expiring, as they were before. That way you can tell if they are being used, and they won't clutter up your list after the expiration period if they are not. Remember to UN-select the "Expire unused wildcard expressions from the list after X days" option if you don't want them to expire, or use a "0" as the number at the end of the individual item that you want to not expire. I'll use whatever is on my own system for future releases. * The suggested starter blacklist has been updated. * All of the filters, with the exception of "[1] Always Bounce* (F)", have had "Mark for Bounce" removed (see the explanation in "6. TIPS AND HINTS" if you like). Please toggle them on or off according to your own taste. * Added this flter (actually broke it off from the "[2] Invalid Header Field (F,H)" filter) because it is an excellent spam indicator on its own: [enabled],"[1] Bad ""From"" (F)","[1] Blank From: Address (F)",255,OR,Delete,From,doesn'tContainRE,"[\w.-]+@([\w-]+\.)+[A-Z]{2,4}" * Added the following filter, which is my first attempt at detecting HTML spam tricks to get around filtering: [enabled],"[2] HTML Spam Tricks (B)","[2] HTML Spam Tricks (B)",16711680,OR,Blacklist,Delete,Body,containsRE,"font size=""?0""?",Body,containsRE,"(()([\w\s,\.\-]){1,10}){3,}" * Added the following filter to detect those freakin' spaced out words in the subject line, which are almost always spam: [enabled],"[2] S P A C E D Subject (S)","[2] S P A C E D Subject (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"[A-Z]([ \.\*:_-]+)([A-Z]\1){2,}[A-Z]",Subject,containsRE,"([A-Z]+[:=\.\-_]){3,}" * Some drastic changes were made to the following filter, and it seems to have a lower incidence of falsing now. Note that it accepts only a relatively strict subset of the Date: field values. I've found so far that most all personal mail sticks to this format. [enabled],"[2] Invalid Header Field (H)","[2] Invalid Header Field (H)",16711680,OR,Blacklist,Delete,EntireHeader,doesn'tContainRE,(?m)^Message-ID:\s+<.+@[\w\.-]+>,EntireHeader,doesn'tContainRE,"(?m)^Date:\s+([A-Z]{3},\s+)?\d{1,2}\s+[A-Z]{3}\s+\d{4}\s+\d{1,2}:\d{2}(:\d{2})?\s+(([+-]\d{4})|([CEMP][DS]|GM|U)T|[AMNYZ])" * The following filters have been modified: [enabled],"[1] Extended Blacklist (F)","[1] Extended Blacklist (F)",255,OR,Blacklist,Delete,From,containsRE,[a-z]+\d\d\d\d[a-z]\d\d@,From,containsRE,[a-z]\d\d\d\d[a-z]\d\d\d\d@,From,containsRE,"([a-z]+_){2,}\d+@yahoo\.com",From,containsRE,"Reduce .*Debt|Deals|Financially",From,containsRE,"\?|Car Loan|Loans|Rewards|Credit|Instant|Special[ \._-]?offer|Offers|Vacation|Blowout|Compare|Coral[ \._-]?Calcium|Values",From,containsRE,\w+-replyto-\d+-d+@.+\.com [enabled],"[2] ""Not Spam"" (B)","[2] ""Not Spam"" (B)",16711680,OR,Blacklist,Delete,Body,containsRE,"This Is Not (Spam|Unsolicited)|This message was not.{1,10}Unsolicited" [enabled],"[2] Ad/Spam Marker (S)","[2] Ad/Spam Marker (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,Adv?:|\WAdv\W|^Adv\W,Subject,containsRE,"(\s|\.){5,}.*\w+$",Subject,containsRE,\{B\},Subject,containsRE,"(\s|\.){10,}$",Subject,containsRE,Message-Id.+(Mach10|RAF[0-9]),Subject,containsRE,"[\w\|]{15,}$" [enabled],"[2] Adult (S)","[2] Adult (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"XXX|(Adult|Mature) Content|Adults? Only|No Minors|Uncensored",Subject,containsRE,"(Rough|Hot|Teen).* Adult|Sex|Barely Legal Teen|Wet Teen|Teen (Action|Sweetheart|Orgies)|Bitch|Escorts|(^|\s)Cum($|\s|-)|C0ck|Pen[i1l]s|Lesbian",Subject,containsRE,"Sluts|Fuck|Pussy|Pussies|(Suck|Big|Massive|Large) Cock|Virgin\W|Hard-?core|Cumshot|\WCum\W|Suck My|Lesbo Site|Blow ?Job|Sex Videos|Hot(test)? .*P[i1l]cs",Subject,containsRE,(?-i)ADULT|COCKS,Subject,containsRE,"(Nude|Naked|Sex) .*Pic|Barely (Legal|Adult)|(Wet|Dripping|Hot) (Teens|Lesbians)",Subject,containsRE,"Adult Links|Sex (Show|Site)|Porn (Movies|Flick)|Married.+But.+Lonely|Hot Moms|Sexy Photo|Wet Sex",Subject,containsRE,"Horny.+(Housewives|Teens)|(Naked|Nude) (Lesbians|Women|Teens|Girls)",Subject,containsRE,Animals.+(Girls|Women)|(Girls|Women).+Animals,Subject,containsRE,"Tight(est)? (Pussy|Vagina)|Dicks|V[il1]rg[il1]ns|P[0@]rn|L[o0][l1][il1]ta|Gang[ -]?bang| Dong|Hardc0re|H0rny|Cunt|Twat " [enabled],"[2] Adult (B)","[2] Adult (B)",16711680,OR,Blacklist,Delete,Body,containsRE,"(Hot|Wet) Teen|Barely (Legal|Adult)",Body,containsRE,"(?-i)\WXXX\W(?i)|Site Secrets|Adult (Site )?Links",Body,containsRE,"\WCum\W|Hot Naked Women|Gang ?Bang|Fuck|Dildos",Body,containsRE,"Phone Sex|Married[ \.-]But[ \.-]Lonely",Body,containsRE,"You.{1,15}\d\d .{1,20}To Enter",Body,containsRE,https?://.*xxx.+$ [enabled],"[2] Cell Phone (S)","[2] Cell Phone (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"Free .*(Phone|Cellular|Nokia|Motorola)",Subject,containsRE,"(Cell |Cell.?Phone|Cellular) .+(Free|Static|Reception)",Subject,containsRE,boost.+(Cell.?Phone).+Signal,Subject,containsRE,(Cell.?Phone).+Signal.+boost,Subject,contains,"Antenna Amplifier",Subject,containsRE,"Better.+Cell Phone" [enabled],"[2] College Degree (S,B)","[2] College Degree (S,B)",16711680,OR,Blacklist,Delete,Subject,containsRE,"(Earn|University|College|Your|You Qualify).{1,20}(Degree|Diploma)",Body,containsRE,"(Earn|University|College|Your|You Qualify).{1,20}(Degree|Diploma)" [enabled],"[2] Computer (S)","[2] Computer (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"(No More|Rid Of|Stop|Eliminate|Delete|Tired Of) .*(Pop.?Up|Adware|Spyware)",Subject,containsRE,Protect.Your.Computer,Subject,containsRE,Surf.+Fast,Subject,contains,"Screen Saver" [enabled],"[2] Credit Cards (S,B)","[2] Credit Cards (S,B)",16711680,OR,Blacklist,Delete,Subject,containsRE,"(Gold|Platinum|Titanium|Approval|Guaranteed|Unsecured|Credit|No Deposit|Free|Get|Qualify).+(Master ?Card|Visa|(Credit|Gold|platinum).+Card|Approved|Approval)",Subject,containsRE,(Credit|Card).+(Approved|Approval|Accepted),Subject,containsRE,"(Get|New|Approved|Guaranteed|Apply).+ (Credit|Gold|Platinum|Titanium|Visa|MasterCard)",Subject,containsRE,"Accept.+Credit Cards|Merchant Account",Body,containsRE,"Accept.{1,15}Credit Cards|Merchant Account" [enabled],"[2] Dating Service (S,F)","[2] Dating Service (S,F)",16711680,OR,Blacklist,Delete,Subject,containsRE,"(Find Your|Dream|Soul|Sexier).+Mate",Subject,containsRE,"(Are You|Meet Other|Chat With|Local|Contact) .*Single",Subject,containsRE,"True Love|Photos Of Singles|Find Someone Special|Meet Single People",Subject,containsRE,"(Some ?one|Guess Who) Wants To Meet You|Attract .*Instantly",From,contains,Dating,Subject,containsRE,"(Females|Singles|Women|Sexy) .* Your Area" [enabled],"[2] Dating Service (B)","[2] Dating Service (B)",16711680,OR,Blacklist,Delete,Body,containsRE,"(Find Your|Dream|Soul)[\s-]Mate",Body,containsRE,"Quality Relationship",Body,containsRE,"(Are You|Meet Other).{1,15}Single",Body,contains,"Meet A Married Woman" [enabled],"[2] Debt Consolidation (S)","[2] Debt Consolidation (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,(Debt|Bill).+(Payments|Relief|Free|Elimination|Help|Assistance),Subject,containsRE,"(Erase|Slash|Eliminate|Reduce|Cut|Too Much|Get Out Of|Credit Card|Away Your|Consolidate|Freedom From|Take Control|Solutions? To|Without|Clear|Paying) .*(Debt|Bills)",Subject,containsRE,"(In|Got|Overwhelmed|Too (Much|Many)|Wipe Out|Worry.+About|Dissolve|Monthly|More).+(Debt|Bills)",Subject,containsRE,"(Perfect|Rebuild|Get Back|Bad|Clear).+Credit",Subject,containsRE,"Consolidation|(Home (Equity|Loan))|Bill Free|Financial .*(Help|Assistance)",Subject,containsRE,"Back (Taxes|Child Support)",Subject,containsRE,"(Stop Making|Reduce) .*Payments|Lost.+Job",Subject,containsRE,"Tax (Problems\?|Debt)",Subject,containsRE,"(Halt|Stop) Creditor|Get Help.+Today|Your Bills|Owe\?|Past Due\?|Financial Stress|(Bill|Money) Problems| Bill .*Free|Monthly Payments|Your .*Finances",Subject,containsRE,"High.+Interest|Improve.+Credit.+(Instantly|Immediately)|Consolidate .*Loan" [enabled],"[2] Debt Consolidation (B)","[2] Debt Consolidation (B)",16711680,OR,Blacklist,Delete,Body,containsRE,"Have Perfect Credit|Financially Free|Free (Yourself )?From Debt.*$",Body,containsRE,"Debt (Elimination|Consolidation)",Body,containsRE,"Tired of.{1,20}(Bill|Debt)" [enabled],"[2] Free/Win (B)","[2] Free/Win (B)",16711680,OR,Blacklist,Delete,Body,containsRE,"Get.{1,15}Free (Membership|Info)",Body,contains,"Claim Your Complimentary" [enabled],"[2] Health/Beauty (S)","[2] Health/Beauty (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"Feel .*(Healthier|Younger)|Reverse.Aging|Perfect Skin",Subject,containsRE,"(Stop|Quit) Smoking|Stimulate Hair",Subject,containsRE,"Penis.+(Enlargement|Bigger|Size)|Be Longer",Subject,containsRE,"Better Sex|Your Impotenc|Sexual Potency|Male Organ",Subject,containsRE,"Doctor Approved|Pheromones",Subject,containsRE,"Bigger Breast|Enhance Your Size|Size (Matters|Does Matter)",Subject,containsRE,"(Giant|Thick(|er)|Fuller|Big(|ger)|Large(|r)|Enlarge Your) (Pen[i1l]s|Johnson|Dick|Tool|Knob|Manhood|Breasts)" [enabled],"[2] Misc. Ads (S)","[2] Misc. Ads (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"(?-i)GUARANTEED(?i)|[,-] Guaranteed",Subject,containsRE,"Pennies A Day|As Seen On|Act Now|Risk Free|Get.+(Today|Now)!",Subject,containsRE,"(Seized|Unclaimed) (Property|Properties)",Subject,containsRE,"In (Just|Only) (Minutes|Moments)",Subject,containsRE,"^Now Available|Try Our New|We Can Help|No Cost",Subject,containsRE,Call\s\S*\d\d,Subject,containsRE,"Lowest (Price|Rate)|Save (Hundreds|Thousands)",Subject,containsRE,"100% (Safe|Effective|Guaranteed)|Guarantee .*Results|Results Guaranteed|Cut.+ Cost",Subject,containsRE,"No.Obligation|No.Risk|Seen On TV|Limited Time|Join Now|\sNow!|Why Wait" [enabled],"[2] Misc. Ads (B)","[2] Misc. Ads (B)",16711680,OR,Blacklist,Delete,Body,containsRE,"Revealed.{1,10}Pros\W",Body,containsRE,"Money.Back Guarantee|Real Savings On",Body,containsRE,"Dear Homeowner|No Credit Card|To Learn More",Body,containsRE,"Risk.Free Trial",Body,containsRE,"(Special|Limited|Limited Time).{1,25}(Offer|Opportunity)",Body,containsRE,"Get Your Free|Order Now And Get" [enabled],"[2] Money Making 2 (S)","[2] Money Making 2 (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"%.+Money|Money.+%|Money Making",Subject,containsRE,"Advance Your Career|Career Advancement",Subject,containsRE,"Your Own Hours|Work(|ing).+When You Want|Employment Opportunity" [enabled],"[2] Money Making (B)","[2] Money Making (B)",16711680,OR,Blacklist,Delete,Body,contains,"No Experience Necessary",Body,contains,"Per Week!",Body,containsRE,"(Earn(ing|)|Make) Money .{1,15}From Home",Body,contains,"Make Up To $" [enabled],"[2] Pharmacy (S,B)","[2] Pharmacy (S,B)",16711680,OR,Blacklist,Delete,Subject,containsRE,V[i1l]agra|Erectile,Subject,containsRE,"(?-i)HGF|HGH(?-i)|Human Growth",Body,containsRE,Growth.+Hormone|(?-i)HGH|HGF(?i),Subject,containsRE,"Let Our Doctors|Prescribed Online",Body,containsRE,"Online (Prescription|Rx|Drug|Pharmacy)",Subject,containsRE,"Online (Prescription|Rx|Drug|Pharmacy)",Body,containsRE,"Prescription Drugs Online|bestexpressmeds",Subject,containsRE,"Non.?Prescription|Herbal Alternative" [enabled],"[2] Printer/Toner (S)","[2] Printer/Toner (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,"(Ink(jet)?|Printer) Cartridges",Subject,containsRE,(Ink.+toner)|(Toner.+Ink) [enabled],"[2] Spy/Detective (B,S)","[2] Spy/Detective (B,S)",16711680,OR,Blacklist,Delete,Subject,containsRE,(Uncover.+Truth|Find|Investigate).+Anyone,Subject,containsRE,"(Background Investigation|Investigative|Spy|Top Secret) Software",Subject,containsRE,"Detective Software|Private Eye|Spy On (People|Anyone)",Body,containsRE,"Spy On Anyone|Discover.{1,15}Secrets" [enabled],"[2] Weight Loss (S)","[2] Weight Loss (S)",16711680,OR,Blacklist,Delete,Subject,containsRE,We[i1l]ght.Loss,Subject,containsRE,(Lose|Melt).+(LBS|Pounds|We[i1l]ght|Fat),Subject,containsRE,"Dieting|Unwanted (Weight|Pounds)",Subject,containsRE,"Fat Burn(ing|er)|Burn(ing|) Fat",Subject,containsRE,"Get.+Firm Abs" [enabled],"[3] Opt-Out (B)","[3] Opt-Out (B)",33023,OR,Blacklist,Delete,Body,containsRE,"""?Remove""? In the Subject",Body,containsRE,"To Stop Receiving{1,20}Offers|To Unsubscribe",Body,containsRE,"To Be (Removed|Taken off.{1,10}Mailing)",Body,containsRE,"See.{1,10}Unsubscribe Instructions",Body,containsRE,"Click (Here|The Link)",Body,containsRE,"Future Mailings|You Are Receiving",Body,containsRE,"You.{1,10}Opted.{1,10}To Receive{1,10}(Promotions|Offers)" [enabled],"[3] Questionable Link (B)","[3] Questionable Link (B)",33023,OR,Blacklist,Delete,Body,containsRE,http://[1-9],Body,containsRE,"Click.{1,20}To Order",Body,containsRE,http://[\w\.]+@,Body,contains,"href=""http://massivefreehosting.com" [enabled],"[3] Suspicious Origin (F)","[3] Suspicious Origin (F)",33023,OR,Blacklist,Delete,From,containsRE,@(msn\.com|yahoo\.com|hotmail\.com|excite\.com|aol\.com),From,containsRE,you(rmail|rdomain)\.(net|com|org|cc),From,containsRE,friend@public\.(net|com|org|cc),From,containsRE,"promotions?|bargains?|Screen ?Saver",From,containsRE,Anybody|Anyone|Bulk|Casino|Credit|Everybody|Everyone|Friend|Hotdeals|Nobody|Promo|Savetrees|Winner|User|XX+|Free|AutoQuote,From,containsRE,offers|sav(e|ings)|special|free|hotdeals|wincash,From,containsRE,"Inkjet ?Cartridges",From,containsRE,"Relief From|Concerned|Work At Home",From,containsRE,Suffering|Unwanted|Guaranteed|opt[\._-]?in,From,containsRE,"(.)\1{3,}|(.+_){2,}|([A-Z]+[\.\-_]){3,}" * Many thanks to BillT, Eric P., IkeB, Porter, and everyone else (sorry if I left you out!) who helped shake the bugs out of this version, made suggestions, and provided moral support in general. It is greatly appreciated! ------------------- 2003-05-05 (Monday) ------------------- * Updated the following filters: [enabled],"[2] Adult (S)","[2] Adult (S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"XXX|X.X.X|(Adult|Mature) Content|Adults? Only|No Minors|Uncensored",Subject,containsRE,"(Rough|Hot|Teen).* Adult|Sex|Barely Legal Teen|Wet Teen|Teen (Action|Sweetheart|Orgies)|Bitch|Escorts|(^|\s)Cum($|\s)|C0ck|Lesbian",Subject,containsRE,"Sluts|Fuck|Pussy|Pussies|(Suck|Big|Massive) Cock|Virgin\W|Hard-?core|Cumshot|\WCum\W|Suck My|Lesbo Site|Blow ?Job|Sex Videos|Hot(test)? .*Pics",Subject,containsRE,(?-i)ADULT|COCKS,Subject,containsRE,"(Nude|Naked|Sex) .*Pic|Barely (Legal|Adult)|(Wet|Dripping|Hot) (Teens|Lesbians)",Subject,containsRE,"Adult Links|Sex (Show|Site)|Porn (Movies|Flick)|Married.+But.+Lonely|Hot Moms|Sexy Photo|Wet Sex",Subject,containsRE,"Horny.+(Housewives|Teens)|(Naked|Nude) (Lesbians|Women|Teens|Girls)",Subject,containsRE,Animals.+(Girls|Women)|(Girls|Women).+Animals,Subject,containsRE,"Tight(est)? (Puss(y|ies)|Vaginas?)|Dicks|V[il1]rg[il1]ns" [enabled],"[2] Adult (B)","[2] Adult (B)",16711680,OR,Blacklist,Delete,Bounce,Body,containsRE,"(Hot|Wet) Teen|Barely (Legal|Adult)",Body,containsRE,"(?-i)\WXXX\W(?i)|Site Secrets|Free.+Adult.+Links",Body,containsRE,"\WCum\W|Hot Naked Women|Gang ?Bang|Fucking|Dildos",Body,containsRE,"Phone Sex|Married.+But.+Lonely|Webcam",Body,containsRE,"You .+ \d\d .+To Enter$",Body,containsRE,https?://.*xxx.+$ [enabled],"[2] Credit Cards (S,B)","[2] Credit Cards (S,B)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"(Gold|Platinum|Titanium|Approval|Guaranteed|Unsecured|Credit|No Deposit|Free|Get|Qualify).+(Master ?Card|Visa|(Credit|Gold|platinum).+Card|Approved|Approval)",Subject,containsRE,(Credit|Card).+(Approved|Approval|Accepted),Subject,containsRE,"(Get|New|Approved|Guaranteed|Apply).+ (Credit|Gold|Platinum|Titanium|Visa|MasterCard)",Subject,containsRE,"Accept.+Credit Cards|Merchant Account",Body,containsRE,"Accept.+Credit Cards|Merchant Account" [enabled],"[2] Dating Service (B)","[2] Dating Service (B)",16711680,OR,Blacklist,Delete,Bounce,Body,containsRE,"(Find Your|Dream|Soul).+Mate",Body,containsRE,"Quality Relationships?",Body,containsRE,"(Are You|Meet Other).+Singles?",Body,contains,"Meet A Married Woman" [enabled],"[2] Dating Service (S,F)","[2] Dating Service (S,F)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"(Find Your|Dream|Soul|Sexier).+Mate",Subject,containsRE,"(Are You|Meet Other).+Singles?",Subject,containsRE,"True Love|Photos Of Singles|Find Someone Special|Meet Single People",Subject,containsRE,"(Some ?one|Guess Who) Wants To Meet You|Attract .*Instantly",From,contains,Dating [enabled],"[2] Debt Consolidation (S)","[2] Debt Consolidation (S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,(Debt|Bill).+(Payments|Relief|Free|Elimination|Help|Assistance),Subject,containsRE,"(Erase|Slash|Eliminate|Reduce|Cut|Too Much|Get Out Of|Credit Card|Away Your|Consolidate|Freedom From|Take Control|Solutions? To|Without|Clear|Paying) .*(Debt|Bills)",Subject,containsRE,"(In|Got|Overwhelmed|Too (Much|Many)|Wipe Out|Worry.+About|Dissolve|Monthly|More).+(Debt|Bills)",Subject,containsRE,"(Perfect|Rebuild|Get Back|Bad|Clear).+Credit",Subject,containsRE,"Consolidation|(Home (Equity|Loan))|Bill Free|Financial .*(Help|Assistance)",Subject,containsRE,"Back (Taxes|Child Support)",Subject,containsRE,"(Stop Making|Reduce) .*Payments|Lost.+Job",Subject,containsRE,"Tax (Problems\?|Debt)",Subject,containsRE,"Halt Creditor|Get Help.+Today|Your Bills|Owe\?|Past Due\?|Financial Stress|(Bill|Money) Problems| Bill .*Free|Monthly Payments|Your .*Finances",Subject,containsRE,"High.+Interest|Improve.+Credit.+(Instantly|Immediately)|Consolidate .*Loan" [enabled],"[2] Debt Consolidation (B)","[2] Debt Consolidation (B)",16711680,OR,Blacklist,Delete,Bounce,Body,containsRE,"Have Perfect Credit|Financially Free|Free (Yourself )?From Debt.*$",Body,containsRE,"Debt (Elimination|Consolidation)",Body,containsRE,"Tired of .*(Bill|Debt)" [enabled],"[2] Free/Win 1 (S)","[2] Free/Win 1 (S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"(Award Confirmation|Sweepstakes Entry)",Subject,containsRE,Claim.+(Money|Your),Subject,containsRE,(Free|Win).+(\$|Access|Cash|Gifts?|Vacations?|Cruise|Pass(es|)|Unlimited|Tickets?|Coupons?|Certificates?|DVDs?|CDs?|Software),Subject,containsRE,"(Yours|You|Get|CDs|Try It|Shop For).+Free",Subject,containsRE,(?-i)FREE,Subject,containsRE,"Free .*(Delivery|Domain Registration|Hosting|Help|Porn|Quote|Shipping|Sample|Trial|Secrets|Consultation)",Subject,containsRE,"Win An? |Complimentary" [enabled],"[2] Health/Beauty (S)","[2] Health/Beauty (S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"Feel .*(Healthier|Younger)|Reverse.Aging|Perfect Skin",Subject,containsRE,"(Stop|Quit) Smoking|Stimulate Hair",Subject,containsRE,"Penis.+(Enlargement|Bigger|Size)|Be Longer",Subject,containsRE,"Better Sex|Bigger Penis|Your Impotenc|Sexual Potency|Male Organ",Subject,containsRE,"Doctor Approved|Pheromones",Subject,containsRE,"Bigger Breast|Enhance Your Size|Size (Matters|Does Matter)",Subject,containsRE,"(Thick(|er)|Fuller|Big(|ger)|Large(|r)) Penis" [enabled],"[2] Health/Beauty (B)","[2] Health/Beauty (B)",16711680,OR,Blacklist,Delete,Bounce,Body,containsRE,"Your Penis",Body,containsRE,"(Penile|Penis|Organ) Enlargement",Body,containsRE,"Large(|r) Penis" [enabled],"[2] Misc. Ads (S)","[2] Misc. Ads (S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,(?-i)GUARANTEED,Subject,containsRE,"Pennies A Day|As Seen On|Act Now|Risk Free|Get.+(Today|Now)!",Subject,containsRE,"(Seized|Unclaimed) (Property|Properties)",Subject,containsRE,"In (Just|Only) (Minutes|Moments)",Subject,containsRE,"^Now Available|Try Our New|We Can Help|No Cost",Subject,containsRE,Call\s\S*\d\d,Subject,containsRE,"Lowest (Price|Rate)|Save (Hundreds|Thousands)",Subject,containsRE,"100% (Safe|Effective|Guaranteed)|Guarantee .*Results|Results Guaranteed|Cut.+ Cost",Subject,containsRE,"No.Obligation|Seen On TV|Limited Time|Join Now|\sNow!|Why Wait" [enabled],"[2] Misc. Ads (B)","[2] Misc. Ads (B)",16711680,OR,Blacklist,Delete,Bounce,Body,containsRE,Revealed.+Pros\W,Body,containsRE,"Money.Back Guarantee|Real Savings On",Body,contains,"Dear Homeowner",Body,contains,"No Credit Card",Body,contains,"To Learn More",Body,containsRE,"Risk.Free Trial",Body,containsRE,"(A|This) (Special|Limited|Limited Time) Offer",Body,containsRE,"Get Your Free|Order Now And Get" [enabled],"[2] Money Making 2 (S)","[2] Money Making 2 (S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,%.+Money|Money.+%,Subject,containsRE,"Advance Your Career|Career Advancement",Subject,containsRE,"Your Own Hours|Work(|ing).+When You Want|Employment Opportunity" [enabled],"[2] Pharmacy (S,B)","[2] Pharmacy (S,B)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,Viagra|Erectile,Subject,containsRE,"(?-i)HGF|HGH(?-i)|Human Growth",Body,containsRE,Growth.+Hormone|(?-i)HGH|HGF(?i),Subject,containsRE,"Let Our Doctors|Prescribed Online",Body,containsRE,"Online (Prescription|Rx|Drug|Pharmacy)",Subject,containsRE,"Online (Prescription|Rx|Drug|Pharmacy)",Body,containsRE,"Prescription Drugs Online|bestexpressmeds",Subject,containsRE,"Non.?Prescription|Herbal Alternative" [enabled],"[3] Base 64 Encoded (B)","[3] Base 64 Encoded (B)",33023,OR,Blacklist,Delete,Bounce,Body,contains,"Content-Transfer-Encoding: base64",EntireHeader,contains,"Content-Transfer-Encoding: base64" [enabled],"[3] Questionable Link (B)","[3] Questionable Link (B)",33023,OR,Blacklist,Delete,Bounce,Body,containsRE,http://[1-9],Body,containsRE,"Click.+To Order",Body,containsRE,http://[\w\.]+@ [enabled],"[3] Suspicious Origin (F,H,R)","[3] Suspicious Origin (F,H,R)",33023,OR,Blacklist,Delete,Bounce,From,containsRE,msn.com|yahoo.com|hotmail.com|excite.com|aol..com,From,containsRE,you(rmail.*|rdomain)\.(net|com|org|cc),EntireHeader,containsRE,friend@public\.(net|com|org|cc),ReturnPath,containsRE,"promotions?|bargains?|Screen ?Saver",From,containsRE,^(Anybody|Anyone|Bulk|Casino|Credit|Everybody|Everyone|Friend|Hotdeals|Nobody|Promo|Savetrees|Winner|User|XX+|Free|AutoQuote),From,containsRE,(offers|sav(e|ings)|special|free|hotdeals|wincash).*@,From,containsRE,"Inkjet ?Cartridges",From,containsRE,"Relief From|Concerned|Work At Home",From,containsRE,"(.)\1{3,}" [enabled],"[3] Suspicious Routing* (H)","[3] Suspicious Routing (H)",33023,OR,Blacklist,Delete,Bounce,EntireHeader,containsRE,(?m)^Received:.+(\.ru|\.cz|\.ro|\.md|\.fi|\.dk|\.vu|\.kr|\.no|\.br|\.jp|\.tw|\.cn|\.nl|\.co|\.in|\.se|\.ac|\.it|\.fr|\.tr|\.be|\.at|\.za|\.es)[^\.\w] * Renamed & updated the following filter: [enabled],"[2] Satellite/Cable TV (S)","[2] Satellite/Cable TV (S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,(DirecTV|DishNet),Subject,containsRE,Free.+(Installation|Satellite),Subject,containsRE,"(TV|System|Digital) .+Installed",Subject,containsRE,"(Digital|Cable) Descramble|Descramble (Digital|Cable)" * Updated the "Hints" section slightly. ---------------------- 2003-03-22 (Saturday) ---------------------- * Updated the following filters: [enabled],"[2] Adult (S)","[2] Adult (S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"XXX|X.X.X|(Adult|Mature) Content|Adults? Only|No Minors|Uncensored",Subject,containsRE,"(Rough|Hot|Teen).+Sex|Barely Legal Teen|Wet Teen|Teen (Action|Sweetheart|Orgies)|Bitch|Escorts|(^|\s)Cum($|\s)",Subject,containsRE,"Sluts|Fuck|Pussy|Pussies|(Suck|Big|Massive) Cock|Virgin\W|Hard-?core|Cumshot|\WCum\W|Suck My|Lesbo Site|Blow ?Job|Sex Videos|Hot(test)? .*Pics",Subject,containsRE,(?-i)ADULT,Subject,containsRE,"(Nude|Sex) Pic|Barely (Legal|Adult)|(Wet|Dripping|Hot) (Teens|Lesbians)",Subject,containsRE,"Adult Links|Sex (Show|Site)|Porn MoviesMarried.+But.+Lonely|Hot Moms|Sexy Photo|Wet Sex",Subject,containsRE,"Horny.+(Housewives|Teens)|(Naked|Nude) (Lesbians|Women|Teens|Girls)",Subject,containsRE,Animals.+(Girls|Women)|(Girls|Women).+Animals,Subject,containsRE,"Tight(est)? (Puss(y|ies)|Vaginas?)|Dicks" [enabled],"[2] Adult (B)","[2] Adult (B)",16711680,OR,Blacklist,Delete,Bounce,Body,containsRE,"(Hot|Wet) Teen|Barely (Legal|Adult)",Body,containsRE,"(?-i)\WXXX\W(?i)|Site Secrets|Free.+Adult.+Links",Body,containsRE,"\WCum\W|Hot Naked Women|Gang ?Bang|Fucking|Dildos",Body,containsRE,"Phone Sex|Married.+But.+Lonely",Body,containsRE,"You .+ \d\d .+To Enter",Body,containsRE,https?://.*xxx.+$ [enabled],"[2] Cell Phone (S)","[2] Cell Phone (S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"Free.+ (Cell.?Phone|Phone|Cellular|Nokia|Motorola)",Subject,containsRE,"(Cell |Cell.?Phone|Cellular) .+(Free|Static|Reception)",Subject,containsRE,boost.+(Cell.?Phone).+Signal,Subject,containsRE,(Cell.?Phone).+Signal.+boost,Subject,contains,"Anenna Amplifier",Subject,containsRE,"Better.+Cell Phone" [enabled],"[2] Debt Consolidation (S)","[2] Debt Consolidation (S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"Debt.+(Payments|Relief|Paying Bills|Free)",Subject,containsRE,"(Erase|Slash|Eliminate|Reduce|Cut|Too Much|Get Out Of|Credit Card|Away Your|Consolidate|Freedom From|Take Control|Solutions? To|Without|Clear) .*(Debt|Bills)",Subject,containsRE,"(In|Got|Overwhelmed|Too (Much|Many)|Wipe Out|Worry.+About|Dissolve|Monthly|More).+(Debt|Bills)",Subject,containsRE,"(Perfect|Rebuild|Get Back|Bad|Clear).+Credit",Subject,containsRE,"Consolidation|(Home (Equity|Loan))|Bill Free",Subject,containsRE,"Back (Taxes|Child Support)",Subject,containsRE,"(Stop Making|Reduce) .*Payments|Lost.+Job",Subject,containsRE,"Tax (Problems\?|Debt)",Subject,containsRE,"Halt Creditor|Get Help.+Today|Your Bills|Owe\?|Past Due\?|Financial Stress|Bill Problems| Bill.*Free|Monthly Payments",Subject,containsRE,High.+Interest|Improve.+Credit.+(Instantly|Immediately) [enabled],"[2] Debt Consolidation (B)","[2] Debt Consolidation (B)",16711680,OR,Blacklist,Delete,Bounce,Body,containsRE,"Have Perfect Credit|Financially Free|Free (Yourself )?From Debt.*$",Body,contains,"Debt Consolidation",Body,containsRE,"Tired of.+Bill" [enabled],"[2] Discounts (S)","[2] Discounts (S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"(\d%|\$\d) .*(Off|Discount|Bonus|Intro|Financing|Reduce|Reduction|Less)",Subject,containsRE,"Hurry!|Pay Later|On Sale Today",Subject,containsRE,"Save .*(%|\$|Big|Huge|On Your)",Subject,containsRE,"(Discount|Cheap).+(Air ?Fare|Ticket|Vacation|Notice)",Subject,containsRE,((Unbelievable|Fantastic).+Price)|(Supplies.+Limited),Subject,containsRE,"Get Up To|Paying Too Much|For Just \$",Subject,containsRE,"Shop.+Save|Net Deals|Hot .* Deal" [enabled],"[2] Free/Win 2 (S)","[2] Free/Win 2 (S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,You.+(Won|Win|Winners?),Subject,containsRE,"^Win A.+",Subject,contains,"Government Grant",Subject,containsRE,"(Free Business Cards|Business Cards Free)",Subject,containsRE,"Become A Winner|Get (Your|A) Free" [enabled],"[2] Free/Win (B)","[2] Free/Win (B)",16711680,OR,Blacklist,Delete,Bounce,Body,containsRE,"Get .*Free (Membership|Info)",Body,contains,"Claim Your Complimentary" [enabled],"[2] Health/Beauty (S)","[2] Health/Beauty (S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"Feel.+Younger|Reverse.Aging|Perfect Skin",Subject,containsRE,"(Stop|Quit) Smoking|Stimulate Hair",Subject,containsRE,"Penis.+(Enlargement|Bigger|Size)|Be Longer",Subject,containsRE,"Better Sex|Bigger Penis|Your Impotenc|Sexual Potency",Subject,contains,"Doctor Approved",Subject,containsRE,"Bigger Breast|Enhance Your Size" [enabled],"[2] Health/Beauty (B)","[2] Health/Beauty (B)",16711680,OR,Blacklist,Delete,Bounce,Body,containsRE,"Enlarg(e|ing) Your Penis",Body,containsRE,"(Penile|Penis|Organ) Enlargement",Body,containsRE,"Large(|r) Penis" [enabled],"[2] Insurance/Healthcare (S,B)","[2] Insurance/Healthcare (S,B)",16711680,OR,Blacklist,Delete,Bounce,Subject,contains,"Rates Reduced",Subject,contains,"Life Insurance",Subject,containsRE,"(Affordable|Reasonable) .*(Health ?care|Dental)",Body,contains,"Life Insurance" [enabled],"[2] Loans/Refinance (S)","[2] Loans/Refinance (S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,Refinance|Mortgage,Subject,containsRE,"(Homeowner|Get Your) .*Loan",Subject,containsRE,"((Sell or Buy)|(Buy or Sell)).+Home",Subject,containsRE,"Lowest.+Rates|Lower Your .+Payment",Subject,containsRE,(No|Low).Cost.+(Loan|Application),Subject,containsRE,"Pre.?Approved|Perfect Credit|You(r|'re)\W+Approved",Subject,containsRE,"Need Credit\?" [enabled],"[2] Money Making 1 (S)","[2] Money Making 1 (S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"((Work(ing|) (From|At))|Money At) .*Home",Subject,containsRE,"Learn How To Make|Get Paid (To|For)|Make A Fortune|Build Your Wealth",Subject,containsRE,"(\$|Bonus|Free).+(\$|Bonus|Free|Paid|Hour|Real Estate)",Subject,containsRE,"(Residual|Guaranteed|Serious|Earn|Mak(e|ing)|Extra|Long Term).+(\$|Money|Income)",Subject,contains,Cash,Subject,containsRE,"Business Owners|Increase Sales|Advertise.+Business",Subject,containsRE,"Be.+Your Own Boss",Subject,containsRE,"(Excellent|Wonderful|Money Making|Investment).+Opportunity",Subject,containsRE,"(Home.Based|Your Own).+Business",Subject,containsRE,"We Will Train|At Home Rep|Side Business" [enabled],"[2] Weight Loss (S)","[2] Weight Loss (S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,Weight.Loss,Subject,containsRE,(Lose|Melt).+(LBS|Pounds|Weight|Fat),Subject,containsRE,"Dieting|Unwanted (Weight|Pounds)",Subject,containsRE,"(Fat Burning|Burn(ing|) Fat)",Subject,containsRE,"Get.+Firm Abs" * Updated the wilcard addresses in the blacklist (see that section of this file.) ---------------------- 2003-02-12 (Wednesday) ---------------------- * I've asked that the folks at MailWasher take a look at some of the things that can make it difficult for filters to locate spam. Namely, if a message is Base 64 encoded, has HTML tags or comments in the middle of words, or contains "escaped" characters, the filters will fail to find the words, as they are dealing with the raw data. MailWasher already decodes these types of messages, as you can see from the Preview window (not the "View Complete Header" window). Perhaps there is a way to access this decoded, cleaned up text with the filters. We'll see what they come up with! * Added more wildcard addresses to the blacklist. Those ove 90 days old that were not used have been deleted. * Altered the following filters: [enabled],"[2] Adult (S)","[2] Adult (S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"XXX|X.X.X|(Adult|Mature) Content|Adults? Only|No Minors|Uncensored",Subject,containsRE,"(Rough|Hot|Teen).+Sex|Barely Legal Teen|Wet Teen|Teen (Action|Sweetheart|Orgies)|Bitch|Escorts",Subject,containsRE,"Sluts|Fuck|Pussy|Suck Cock|Virgin\W|Hard-?core|Cumshot|\WCum\W",Subject,containsRE,(?-i)ADULT,Subject,containsRE,"(Nude|Sex) Pic|Barely (Legal|Adult)",Subject,containsRE,"Adult Links|Sex Shows|Porn MoviesMarried.+But.+Lonely|Hot Moms|Sex Site",Subject,containsRE,"Horny.+(Housewives|Teens)|Naked Lesbians",Subject,containsRE,Animals.+(Girls|Women)|(Girls|Women).+Animals [enabled],"[2] Adult (B)","[2] Adult (B)",16711680,OR,Blacklist,Delete,Bounce,Body,containsRE,"(Hot|Wet) Teen|Barely (Legal|Adult)",Body,containsRE,"(?-i)\WXXX\W(?i)|Site Secrets|Free.+Adult.+Links",Body,containsRE,"\WCum\W|Hot Naked Women",Body,containsRE,"Phone Sex|Married.+But.+Lonely",Body,containsRE,"You .+ \d\d .+To Enter",Body,containsRE,https?://.*xxx.+$ [enabled],"[2] Debt Consolidation (S)","[2] Debt Consolidation (S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"Debt.+(Payments|Relief|Paying Bills|Free)",Subject,containsRE,"(Erase|Slash|Eliminate|Reduce|Cut|Too Much|Get Out Of|Credit Card|Away Your|Consolidate|Freedom From|Take Control|Solutions? To|Without) .*(Debt|Bills)",Subject,containsRE,"(In|Got|Overwhelmed|Too (Much|Many)|Wipe Out|Worry.+About|Dissolve|Monthly|More).+(Debt|Bills)",Subject,containsRE,"(Perfect|Rebuild|Get Back|Bad|Clear).+Credit",Subject,containsRE,"Consolidation|(Home (Equity|Loan))",Subject,containsRE,"Back (Taxes|Child Support)",Subject,containsRE,"(Stop Making|Reduce) .*Payments|Lost.+Job",Subject,containsRE,"Tax (Problems\?|Debt)",Subject,containsRE,"Halt Creditor|Get Help.+Today|Your Bills|Owe\?|Past Due\?|Financial Stress|Bill Problems| Bill.*Free",Subject,containsRE,High.+Interest|Improve.+Credit.+(Instantly|Immediately) [enabled],"[2] Discounts (S)","[2] Discounts (S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"(\d%|\$\d) .*(Off|Discount|Bonus|Intro|Financing|Reduce|Reduction|Less)",Subject,containsRE,"Hurry!|Pay Later|On Sale Today",Subject,containsRE,Save.+(%|\$|Big|Huge),Subject,containsRE,"(Discount|Cheap).+(Air ?Fare|Ticket|Vacation|Notice)",Subject,containsRE,((Unbelievable|Fantastic).+Price)|(Supplies.+Limited),Subject,containsRE,"Get Up To|Paying Too Much|For Just \$",Subject,containsRE,Shop.+Save [enabled],"[2] Health/Beauty (B)","[2] Health/Beauty (B)",16711680,OR,Blacklist,Delete,Bounce,Body,containsRE,"Enlarg(e|ing) Your Penis",Body,containsRE,"(Penile|Penis|Organ) Enlargement" [enabled],"[2] Misc. Ads (S)","[2] Misc. Ads (S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,(?-i)GUARANTEED,Subject,containsRE,"Pennies A Day|As Seen On|Act Now|Risk Free|Get.+(Today|Now)!",Subject,containsRE,"(Seized|Unclaimed) (Property|Properties)",Subject,containsRE,"In (Just|Only) (Minutes|Moments)",Subject,containsRE,"^Now Available|Try Our New|We Can Help|No Cost",Subject,containsRE,Call\s\S*\d\d,Subject,containsRE,"Lowest (Price|Rate)|Save (Hundreds|Thousands)",Subject,containsRE,"100% (Safe|Effective|Guaranteed)|Cut.+ Cost",Subject,containsRE,"No.Obligation|Seen On TV|Limited Time|Join Now|\sNow!|Why Wait" [enabled],"[2] Money Making (B)","[2] Money Making (B)",16711680,OR,Blacklist,Delete,Bounce,Body,contains,"No Experience Necessary",Body,contains,"Per Week!",Body,containsRE,"(Earn(ing|)|Make) Money .+From Home",Body,contains,"Make Up To $" [enabled],"[2] Satellite TV (S)","[2] Satellite TV (S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,(DirecTV|DishNet),Subject,containsRE,Free.+(Installation|Satellite),Subject,containsRE,"(TV|System|Digital) .+Installed",Subject,containsRE,Digital.+Descramble|Descramble.+Digital [enabled],"[3] Suspicious Origin (F,H,R)","[3] Suspicious Origin (F,H,R)",33023,OR,Blacklist,Delete,Bounce,From,containsRE,msn.com|yahoo.com|hotmail.com|excite.com|aol..com,From,containsRE,you(rmail.*|rdomain)\.(net|com|org|cc),EntireHeader,containsRE,friend@public\.(net|com|org|cc),ReturnPath,containsRE,"promotions?|bargains?|Screen ?Saver",From,containsRE,^(Anybody|Anyone|Bulk|Casino|Credit|Everybody|Everyone|Friend|Hotdeals|Nobody|Promo|Savetrees|Winner|User|XX+|Free),From,containsRE,(offers|sav(e|ings)|special|free|hotdeals|wincash).*@,From,containsRE,"Inkjet ?Cartridges",From,containsRE,"Relief From|Concerned",From,containsRE,"(.)\1{3,}" * Note: I'll probably rename the "Sattelite TV" filter to "Satellite/Cable" in the future, to make it a little more generic. ------------------- 2003-01-20 (Monday) ------------------- * Added more wildcard addresses to the blacklist. In particular, those using addresses like "amy@dsfgk2elkr.aol.com" * Altered the following filters: [enabled],"[1] Extended Blacklist (F)","[1] Extended Blacklist (F)",255,OR,Blacklist,Delete,Bounce,From,containsRE,[a-z]+\d\d\d\d[a-z]\d\d@,From,containsRE,[a-z]\d\d\d\d[a-z]\d\d\d\d@,From,containsRE,"([a-z]+_){2,}\d+@yahoo\.com" [enabled],"[2] Adult (S)","[2] Adult (S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,"XXX|X.X.X|(Adult|Mature) Content|Adults? Only|No Minors|Uncensored",Subject,containsRE,"(Rough|Hot|Teen).+Sex|Barely Legal Teen|Wet Teen|Teen (Action|Sweetheart|Orgies)|Bitch",Subject,containsRE,"Sluts|Fuck|Pussy|Suck Cock|Virgin\W|Hard-?core|Cumshot|\WCum\W",Subject,containsRE,(?-i)ADULT,Subject,containsRE,"(Nude|Sex) Pic|Barely (Legal|Adult)",Subject,containsRE,"Adult Links|Sex Shows|Porn MoviesMarried.+But.+Lonely|Hot Moms",Subject,containsRE,Horny.+(Housewives|Teens),Subject,containsRE,Animals.+(Girls|Women)|(Girls|Women).+Animals [enabled],"[2] Loans/Refinance (S)","[2] Loans/Refinance (S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,Refinance|Mortgage,Subject,containsRE,Homeowner.+Loan,Subject,containsRE,"((Sell or Buy)|(Buy or Sell)).+Home",Subject,containsRE,Lowest.+Rates,Subject,containsRE,(No|Low).Cost.+(Loan|Application),Subject,containsRE,"Pre.?Approved|Perfect Credit|You(r|'re) Approved",Subject,contains,"Need Credit?" [enabled],"[2] Misc. Ads (S)","[2] Misc. Ads (S)",16711680,OR,Blacklist,Delete,Bounce,Subject,containsRE,(?-i)GUARANTEED,Subject,containsRE,"Pennies A Day|As Seen On|Act Now|Risk Free|Get.+(Today|Now)!",Subject,containsRE,"(Seized|Unclaimed) (Property|Properties)",Subject,containsRE,"In (Just|Only) (Minutes|Moments)",Subject,containsRE,"^Now Available|Try Our New|We Can Help|No Cost",Subject,containsRE,Call\s\S*\d\d,Subject,containsRE,"Lowest (Price|Rate)|Save (Hundreds|Thousands)",Subject,containsRE,"100% (Safe|Effective|Guaranteed)|Cut.+ Cost",Subject,containsRE,"No.Obligation|Seen On TV|Limited Time|Join Now" [enabled],"[3] Base 64 Encoded (B)","[3] Base 64 Encoded (B)",33023,OR,Blacklist,Delete,Bounce,Body,contains,"Content-Transfer-Encoding: base64" [enabled],"[3] Suspicious Origin (F,H,R)","[3] Suspicious Origin (F,H,R)",33023,OR,Blacklist,Delete,Bounce,From,containsRE,msn.com|yahoo.com|hotmail.com|excite.com|aol..com,From,containsRE,you(rmail.*|rdomain)\.(net|com|org|cc),EntireHeader,containsRE,friend@public\.(net|com|org|cc),ReturnPath,containsRE,"promotions?|bargains?|Screen ?Saver",From,containsRE,^(Anybody|Anyone|Bulk|Casino|Credit|Everybody|Everyone|Friend|Hotdeals|Nobody|Promo|Savetrees|Winner|User|XX+),From,containsRE,(offers|sav(e|ings)|special|free|hotdeals|wincash).*@,From,containsRE,"Inkjet ?Cartridges",From,containsRE,"Relief From|Concerned",From,containsRE,"(.)\1{3,}"