Re: Filters and Spam

From: Michael Gray (labrat@onr.com)
Date: Tue, 10 Jun 1997 16:08:48 -0500

On Tue, 10 Jun 1997 14:46:13 +0200,
tc@login.dknet.dk (Thomas Christensen) wrote this about Filters and Spam:
>I'm to do a small anti-spam filter by only accepting email sent to my
>new email address (tc@tc.dk - which gets redirected to my tc@login.dknet.dk
>address).
>
>So what I want is a filter that deletes (or moves) all email that dosent
>contain tc@tc.dk in the to: line. This gives me two/three problems:
>
>How to do a "Not" filter. How to do it if I get another email address -
>I will get yet another redirected email address (tc@magna.dk) real soon
>now. So what I want is a "(NOT tc@tc.dk) OR (NOT tc@magna.dk) in to: -> Null"
>filter.
>
>And how to ensure that my mailinglist filters are done before this filter.
>
>(I get all my spam at the address in the from line and all my personal
>email to the address in the reply-to line - good thing that people
>writing spam programs are alot stupier than people writing email readers
>are :-)

I don't know a way to do a not filter, but I've got a lot of
yes-filters. Basically what you need is to set up a bunch of filters
for each mailing list. Once you've got all your mailing lists
filtered, create filters for your addresses at tc@tc.dk and
tc.magna.dk pointing to personal.mail or whatever sort of like this :

rule name xtc
Search In: To
Search for: tc@tc.dk
Action: move to personal.mail

Create a similar rule named ytc except search for tc@magnus.dk. These
two filters move non-mailing list mail to your personal.mail folder.
Remember that filters are accessed alphabetically. Then create a last
rule named zzz like so:

rule name zzz
Search In: from
Search for: @
Action: delete

Since you've moved what you want to the proper area, what's left is
tossed out. I toss mine to junk which has a 1 day expire time - long
enough for me to see if there's something I may have missed like new
mailing list addresses, but not so long as to clog up my newsbase TOO
long.

-- 
======= Remove the 5 digit spamkiller from address before replying ==========
: LabRat 'at' onr 'dot' com          : Just because you're paranoid doesn't :
:                                    : mean they're not out to get you      :
=============================================================================