Path: news.nzbot.com!not-for-mail
From: Percy Dovetonsils <muriel@cigar.com.invalid>
Organization: NairobiTrio
Newsgroups: alt.binaries.beatles
Date: Tue, 21 Nov 2017 15:06:36 -0500
Message-ID: <5a14873d$0$5767$b1db1813$5890f3ee@news.astraweb.com>
References: <2017112111391566299-email@domain.com>
User-Agent: cigar.1
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1; format=flowed
Content-Transfer-Encoding: 8bit
Subject: Re: for Unison users [~ of 5] " yEnc
Lines: 18
NNTP-Posting-Host: 0c5a356e.news.astraweb.com
X-Trace: DXC=5Ao^8VnKSSi]`e1HJ8=:?`L?0kYOcDh@j3dIAnEJKFc`^fPd>Vd55HhLLVN4GjC]ldAgK:4?mmojlZL8^KFR<MokCkn21lX=?9bBgc;d6oHc\a
X-Received-Bytes: 1477
X-Received-Body-CRC: 3136889154
Xref: news.nzbot.com alt.binaries.beatles:4124
On 2017-11-21 13:39:15 -0500, Worker said:
> On 2017-11-21 16:00:44 +0000, Percy Dovetonsils said:
>
>> Looking to find these
>
>
> Wouldn't this also filter out anything that legitimately uses rars and pars?
I'm glad you asked because I went back and noticed an error in my Rar filter.
It should be set to "if ALL of the following" as in the par filter. Not
"if any".
And no, it shouldn't because--(and here's the secret)-- if you check
the spammer's posts they have a quotation mark after rar and par.
Legit posts don't seem to have it.
So the quotation mark in the rule should filter the spam out but leave
legit posts alone.
|
|