!!Vandals, this page is regularly backed up, so bother not.


!Leafnode (MK)

 <filters>
 # more mail2news
 ^Path:.*[, ]mail2news
 ^Path:.*[, ]mail2news.*
 ^Path:.*nym.alias.net
 ^Path:.*nymshifter.com
 ^Mail-To-News-Contact:
 ^X-Mail2News-Contact:


 #When K'man doesn't use mail2news gateway these often catch him:
 ^Path:.*kadaitcha.cx
 ^From:.*Kadaitcha Man
 ^Organization:.*news.atacama-andes.cl.*

 #When Bailo used to nymshift one of these killed him:
 ^From: .*jabailo@earthlink\.net
 ^Path:.*262bffca
 ^Path:.*8cd8340b
 ^Path:.*67dffffd
 ^Path:.*28700a2d

 ... so any posts which match the above will be dropped. Additionally,
 it'll drop anything which matches this:

 <config>
 ## To avoid spam, you can select the maximum number of crosspostings
 ## that are allowed in incoming postings. Setting this below 5 is
 ## probably a bad idea. The default is unlimited crossposting.
 maxcrosspost = 5


!Main:

*name=Tim Smith

*name=Erik Funkenbusch

*name=tab

*name=DFS

*name=flatfish

*name=flatfish+++

*email=<linux-sux@lycos.com>

*name=T.G.Reaper

*name=billwg

*name=Jeff…Relf

*name=Clogwog

*name=Larry Qualig

*name=NoNamer

*name=Grug

*name=Snit

*name=Hadron Quark

*name=Oxford

!Questionable (or Roy Culley's perspective):

*name=John Bailo

*name=Martha Adams

*name=John A. Bailo

*name=John A Bailo

*name=Black Dragon

----

!Suspected by Scott W (Sorry I don't have all the names)

*email=stomach.pump@yahoo.com

*email=AuntyDiluvian@gmail.com

*email=otto@keiser.de

*email=compton.plaines_kid@gmail.org

*email=aneelay12@hotmail.com

*email=reginialeisberg@orange.nl

*name=Robert M. Stockmann (as of August 2006)

!If anyone knows the names to go with these email addresses, feel free to change it.

----

!Additional 'suspects'/trolls (July 2006, Roy)

*name=Tom Shelton (seems like an MS apologist, uses Windows betas)

*name=yttrx (vulgar, suspected troll, troublemaker)

*name=Oliver Wong (Mark would argue he is an MS apologist)

*name=Aunty Diluvian

----

Maybe some scorefiles appended..??????? E.g. for KNode:


 <?xml version = '1.0'?>
 <!DOCTYPE Scorefile>
 <Scorefile>
  <Rule expires="never" linkmode="AND" name="Short" >
    <Group name=".*" />
    <Expression expr="20" neg="0" type="SMALLER" header="Lines" />
    <Action value="#ff0000" type="COLOR" />
  </Rule>
  <Rule expires="never" linkmode="AND" name="Roy" >
    <Group name=".*" />
    <Expression expr="schestowitz" neg="0" type="CONTAINS" header="From" />
    <Action value="#ffff00" type="COLOR" />
  </Rule>
  <Rule expires="never" linkmode="AND" name="GG" >
    <Group name=".*" />
    <Expression expr="google" neg="0" type="CONTAINS" header="Message-ID" />
    <Action value="#00ffff" type="COLOR" />
  </Rule>
  <Rule expires="never" linkmode="AND" name="Followup" >
    <Group name=",*" />
    <Expression expr="schestowitz\.com>$" neg="0" type="MATCH" header="References" />
    <Action value="#00ff00" type="COLOR" />
  </Rule>
  <Rule expires="never" linkmode="AND" name="Followup to Followup" >
    <Group name=".*" />
    <Expression expr="schestowitz\.com>.*&lt;" neg="0" type="MATCH" header="References" />
    <Action value="#008000" type="COLOR" />
  </Rule>
  <Rule expires="never" linkmode="AND" name="KNode" >
    <Group name=".*" />
    <Expression expr="knode" neg="0" type="CONTAINS" header="Subject" />
    <Action value="#00ff00" type="COLOR" />
  </Rule>
 </Scorefile>


!!William (leafnode):

Leafnode will work with any newsreader, slrn, knode, Pan etc. Just point them to 'localhost' or 127.0.0.1

Some of my filters are:-

 Filter posts from anonymous remailers (Kadaitchaman etc):
 ^Organization:.*mail2news@dizum.com
 ^Organization:.*mail2news@nym.alias.net
 ^Organization:.*news-abuse@zig-zag.net
 ^Organization:.*Aioe.org NNTP Server

 In case "Organization" header is removed by troll:
 ^Mail-To-News-Contact:.*abuse@dizum.com
 ^X-Complaints-To:.*news-abuse@zig-zag.net

 Googlegroup posters filtered:
 ^Organization:.*http://groups.google.com

 Crossposting to other newsgroups favoured by trolls filtered:
 ^Newsgroups:.*alt\.troll*
 ^Newsgroups:.*alt\.os\.windows-xp*
 ^Newsgroups:.*alt\.homosexual*
 ^Newsgroups:.*alt\.usenet\.kooks*

 Crossposting into other groups, by Relf, Oxford & Bailo:
 ^Newsgroups:.*comp\.sys\.mac\.advocacy*
 ^Newsgroups:.*sci\.physics*
 ^Newsgroups:.*sci\.physics\.relativity*

 Some trolls may nymshift, but forget to change one of their headers.
 They also like to use x-no-archive, so this killfiles them:
 ^X-No-Archive:.*yes

 Can also filter on anything in the 'Path', for example:
 ^Path:.*newsfeed.x-privat.org*
 ^Path:.*xxx.xxx.xxx.xx.MISMATCH*
 ^Path:.*kadaitcha.cx*

 Yahoo & hotmail posters can be filtered:
 ^From:.*([!-@])@yahoo.com
 ^From:.*([!-@])@hotmail.com

 User-Agents can be filtered:
 ^User-Agent:.*Microsoft-Entourage
 ^User-Agent:.*MT-NewsWatcher*

 From filters:
 ^From:.*DFS
 ^From:.*dfs
 ^From:.*Erik Funkenbusch
 ^From:.*([!-@])Jeff…Relf([!-@])<Jeff_Relf@Yahoo.COM>
 ^From:.*T.G.Reaper
 ^From:.*Ana Thema
 ^From:.*tab
 ^From:.*Larry Qualig
 ^From:.*

 John Bailo tends to nymshift sometimes, though he keeps his email address.
 So instead of kf'ing his nyms, I use that.
 ^From:.*jabailo@texeme.com

 NNTP posting hosts can be filtered, for e.g:
 ^NNTP-Posting-Host:.*66.117.136.130
 ^NNTP-Posting-Host:.*128.220.107.61

 References headers can be filtered, e.g:
 ^References:.*@\.googlegroups\.com*
 ^References:.*@bignews2\.bellsouth\.net*
 ^References:.*fsf@geemail\.com*
 ^References:.*news\.sunsite\.dk*
 ^References:.*@aioe\.server\.aioe\.org*

One thought, if people MUST reply to flatfish & his socks, how about
a [k00k] label in the heading? For those not wishing to see any of flatfishes  posts & replies, that could be easily filtered out.

!!Ghost (slrn):

 ---8< >8---
 %BOS

 [comp.os.linux.advocacy]

 Score: -500
 From: AuntyDiluvian@gmail.com

 Score: -500
 From: flatfish@linuxmail.org

 Score: -800
 Xref: alt.os.windows-xp

 Score: -800
 Xref: comp.os.ms-windows.advocacy

 Score: -3200
 Xref: alt.locksmithing

 Score: -3200
 Xref: 24hoursupport.helpdesk

 Score: -3200
 Xref: alt.os.windows-xp

 %EOS
 ---8< >8---