Any Ideas on Turning off the Spammer?

On Aug 13, 4:01 am, "Kyle Boatright" wrote:
I'm seeing a huge number of spam postings in this group. I'm sure they are
from a bot, but since the address keeps switching, I don't know how to block
the messages in OE.

Suggestions?

I've noticed that a lot of other groups are fullyl moderated. It
wouldn't be a bad idea to nominate 4 or 5 people (maybe from around
the world for 24x7 coverage) to approve posting.

-Robert

Robert M. Gary wrote:
On Aug 13, 4:01 am, "Kyle Boatright" wrote:
I'm seeing a huge number of spam postings in this group. I'm sure
they are from a bot, but since the address keeps switching, I don't
know how to block the messages in OE.

Suggestions?

I've noticed that a lot of other groups are fullyl moderated. It
wouldn't be a bad idea to nominate 4 or 5 people (maybe from around
the world for 24x7 coverage) to approve posting.

-Robert

It's big job and a pain in the butt to both get in place and function under.

On Mon, 13 Aug 2007 09:28:10 -0700, "Robert M. Gary"
wrote in
. com:

I've noticed that a lot of other groups are fullyl moderated. It
wouldn't be a bad idea to nominate 4 or 5 people (maybe from around
the world for 24x7 coverage) to approve posting.

-Robert


Wouldn't it? What criteria would YOU use to reject articles?

On Mon, 13 Aug 2007 14:12:10 +0000, Larry Dighera wrote:

Perhaps filters can be successfully written to exploit these
consistencies.

I had this done at the server level, and it was no big deal. Any message
which met the criteria we'd identified was locally canceled.

There was another header that was common. I don't recall it exactly, but
I think it was "NNTP-Posting-Host" or something like that.

My fear is that newsgroup subscribers who are unable to filter out the
sporge articles may become so frustrated as to discontinue to
participate in newsgroup discussion in the future.

I suspect that this was more at attack on sci.crypt than
rec.aviation.piloting given the numbers involved. But your concern
remains a valid one.

- Andrew

"Robert M. Gary" wrote in
ups.com:

On Aug 13, 4:01 am, "Kyle Boatright" wrote:
I'm seeing a huge number of spam postings in this group. I'm sure
they are from a bot, but since the address keeps switching, I don't
know how to block the messages in OE.

Suggestions?

I've noticed that a lot of other groups are fullyl moderated. It
wouldn't be a bad idea to nominate 4 or 5 people (maybe from around
the world for 24x7 coverage) to approve posting.


You can't moderate this group. It has to be set up as moderated.
It's a really bad idea in any case.


Bertie

"Maxwell" wrote in message
news

"Dudley Henriques" wrote in message
...
18K would indeed indicate a closer look at the situation :-)

How many have you receive here in the past 24 hours? I have seen around a
1000.


I probably got at least 100, but less than 200. Because this group consists
mainly of conversations, they are fairly easy to scroll through, highlight,
and delete. It is mildly irritating, but not a major inconvenience as of
this time--even in OE.

Peter

On Aug 13, 1:05 pm, Larry Dighera wrote:
On Mon, 13 Aug 2007 09:28:10 -0700, "Robert M. Gary"
wrote in
. com:

I've noticed that a lot of other groups are fullyl moderated. It
wouldn't be a bad idea to nominate 4 or 5 people (maybe from around
the world for 24x7 coverage) to approve posting.

-Robert

Wouldn't it? What criteria would YOU use to reject articles?

I know ONE criteria (criterium?) *I* would use g

It would seem that the rec.aviation.piloting newsgroup, like many
other newsgroups, is being targeted for a "sporge" flood. In this
first flood, the articles were injected into Usenet from 13:30 to
11:21 (local), about ten hours. It is unclear to me at this time why
this is occurring, but it may be more than a malicious prank. ...

While I have not yet found a method of filtering out the sporge
articles, I have found some promising leads:

Each article is crossposted to the sci.crypt newsgroup.

The 'Path:' header field always contains:
news.isoc.lu!news.grnet.gr

The 'Subject:' header field always begins with a lower-case letter

Interesting series of observations.

The feature of the cross posted group (sci.script) is the only criteria that
appears to show promise in OE; however, it appears that the group must be
subscribed in order for the criteria to be entered in the Message Rules.

Unfortunately, sci.crypt does not appear to be carried on any server to
which I have known access. Therefore, I am not able to determine
experimentally whether the technique will work.

Fortunately, the "flood" has not reached a level which would mandate much
effort--it is currently only about as irritating as a resident troll.

Peter

On Aug 13, 4:01 am, "Kyle Boatright" wrote:
I'm seeing a huge number of spam postings in this group. I'm sure they are
from a bot, but since the address keeps switching, I don't know how to block
the messages in OE.

Suggestions?

I don't understand what the purpose of the spammer is. How does he
profit by this?

-Robert

Bertie the Bunyip wrote:

You can't moderate this group. It has to be set up as moderated.
It's a really bad idea in any case.


Bertie

I enjoyed my one post ever to a moderated group. I think it was WW2
history or something like that.
Somebody posted a question asking for fuel tank information on the P51.
I answered the post with the information, and received a notice from the
"moderator" telling me that my answer wouldn't be posted as it was
irrelevant.
Never looked again for a moderated newsgroup since that moment.

--
Dudley Henriques
President Emeritus
International Fighter Pilots Fellowship