OTblank emails what's the purpose

I find checking for multiple (7+) entries in the "TO:" works quite well=20 (see below), but try this for starters (its not, afaik, quite as simple=20 to test for blank TO and SUBJECT fields)...

"mark for deletion" (on process mail) "any of the rules below are satisfied"

The entire header contains undisclosed recipients The entire header contains undisclosed-recipients

To set up one to catch the "multiple" addresses in the TO-CC fields try=20 this... (set them to mark for deletion as above)

The multiple email address detection picks up something like 23% of my=20 spam, closely followed by this little lot (you'll have to sort out the=20 line breaks if you reconstruct it in the filters.txt file :-} )

enabled,"APNIC 2","APNIC 2",8388863,OR,Delete,EntireHeader,containsRE, (-(-)202.,EntireHeader,containsRE,(-(-)203.,EntireHeader,containsRE, (-(-)210.,EntireHeader,containsRE,(-(-)211.,EntireHeader,containsRE, (-(-)218.,EntireHeader,containsRE,(-(-)219.,EntireHeader,containsRE, (-(-)220.,EntireHeader,containsRE,(-(-)221.,EntireHeader,containsRE, (-(-)222.

...which just picks up IP address ranges from the Asia Pacific region=20 and marks them as spam - if you already have contacts there, they should=20 already be in your friends list, or have their domains set as friendly.

Tell you what, i`ll paste a shedload more of my filters below (and=20 apologies to the rest of the group if its seen as spam itself :-})

enabled,"multiple to-cc","multiple=20

enabled,AfriNIC,AfriNIC,16711808,OR,Delete,EntireHeader,containsRE, (-(-)41.

enabled,"APNIC 1","APNIC 1",8388863,OR,Delete,EntireHeader,containsRE, (-(-)58.,EntireHeader,containsRE,(-(-)59.,EntireHeader,containsRE, (-(-)60.,EntireHeader,containsRE,(-(-)61.,EntireHeader,containsRE, (-(-)121.,EntireHeader,containsRE,(-(-)122.,EntireHeader,containsRE, (-(-)123.,EntireHeader,containsRE,(-(-)124.,EntireHeader,containsRE, (-(-)125.,EntireHeader,containsRE,(-(-)126.

enabled,"APNIC 2","APNIC 2",8388863,OR,Delete,EntireHeader,containsRE, (-(-)202.,EntireHeader,containsRE,(-(-)203.,EntireHeader,containsRE, (-(-)210.,EntireHeader,containsRE,(-(-)211.,EntireHeader,containsRE, (-(-)218.,EntireHeader,containsRE,(-(-)219.,EntireHeader,containsRE, (-(-)220.,EntireHeader,containsRE,(-(-)221.,EntireHeader,containsRE, (-(-)222.

enabled,"APNIC regexpr 1","APNIC regexpr=20 1",8388863,OR,Delete,EntireHeader,containsRE,(-(-)168 plus 1-.((208-9)(21 ###",EntireHeader,containsRE,(-(-)196-.(192-9)

enabled,LACNIC,LACNIC,128,OR,Delete,EntireHeader,containsRE,(-(-) 189.,EntireHeader,containsRE,(-(-)190.,EntireHeader,containsRE,(-(-) 200.,EntireHeader,containsRE,(-(-)201.,EntireHeader,containsRE,(-(-) 148.((208-9)(210-9)(220-3))-.,EntireHeader,contains,"###=20

enabled,"drug filters 1","drugs=20 1",16711680,OR,Delete,EntireHeader,contains,phentermine,EntireHeader,con tains,valium,EntireHeader,contains,xanax,EntireHeader,contains,viagra,En tireHeader,contains,privates,EntireHeader,contains,pharmacy,EntireHeader,co ntains,"feel=20 young",EntireHeader,contains,HGH,EntireHeader,contains,"lose=20 weight",EntireHeader,contains,paxil

enabled,"drug filters 2","drugs=20 2",16711680,OR,Delete,EntireHeader,contains,ambien,EntireHeader,contains ,prescription,EntireHeader,contains,diazempam,EntireHeader,contains,adip ex,EntireHeader,contains,trazodone,EntireHeader,contains,"weight=20 loss",EntireHeader,contains,"look younger",EntireHeader,contains,"pain=20 meds",EntireHeader,contains,"herbal super",EntireHeader,contains,"good=20 health boost"

enabled,"drug filters 3","drugs=20 3",16711680,OR,Delete,EntireHeader,contains,pheromones,EntireHeader,cont ains,"breast enlargement",EntireHeader,contains,"prescribed=20 online",EntireHeader,contains,"bigger=20 boobs",EntireHeader,contains,v1agra,EntireHeader,contains,"Free Health=20 Insurance Quotes",EntireHeader,contains,"Enhanced=20 size",EntireHeader,contains,"quit smoking",EntireHeader,contains,"stop=20 smoking",EntireHeader,contains,"1-2 Off All Persc"

enabled,"drug filters 4","drugs=20 4",16711680,OR,Delete,EntireHeader,contains,webrx,EntireHeader,contains, perscription,EntireHeader,contains,medications,EntireHeader,contains,"me dson the web",EntireHeader,contains,"free holy=20 water",EntireHeader,contains,"Lose 10=20 pounds",EntireHeader,contains,"diet=20 patch",EntireHeader,contains,"increase=20 semen",EntireHeader,contains,V.I.A.G.R.A,EntireHeader,contains,"Prescrib ed Online"

enabled,"drug filters 5","drugs=20 5",16711680,OR,Delete,EntireHeader,contains,"your=20 medication",EntireHeader,contains,"new meds=20 available",EntireHeader,contains,vicodin,EntireHeader,contains,dietpatch ,EntireHeader,contains,"chronic fatigue",EntireHeader,contains,"1-2 off=20 persc",EntireHeader,contains,"eat yourself=20 thin",EntireHeader,contains,"sleep=20 guaranteed",EntireHeader,contains,prescrip- tions,EntireHeader,contains,Perscript1on

enabled,"drug filters 6","drugs=20 6",16711680,OR,Delete,EntireHeader,contains,"medication=20 online",EntireHeader,contains,lortab,EntireHeader,contains,hydrocodone,E r,contains,carisoprodol,EntireHeader,contains,via- gra,EntireHeader,contains,Levitra,EntireHeader,contains,viag.ra,EntireHe ader,contains,cialis

enabled,"drug filters 7","drugs=20 7",16711680,OR,Delete,EntireHeader,contains,Sildenafil,EntireHeader,cont ains,V1AGR,EntireHeader,contains,?ISO-8859-1?b? UmU6,EntireHeader,contains,V1AG,EntireHeader,contains,V=E3lium,EntireHeade r,contains,C1AAL1S,EntireHeader,contains,Phamra,EntireHeader,contains,V=E3 ilum,EntireHeader,contains,"Tadalafil ",EntireHeader,contains,"Online=20 Pharma"

enabled,"drug filters 8","drugs=20 8",16711680,OR,Delete,EntireHeader,contains,Phaarrm,EntireHeader,contain s,phramacy,EntireHeader,contains,hoodia,EntireHeader,contains,"Cheap=20 Drugs"

enabled,"digital cable CATV phones 1","comms=20 1",16711680,OR,Delete,Subject,contains,"digital=20 cable",Subject,contains,CATV,Subject,contains,"pay per=20 view",Subject,contains,descrambler,Subject,contains,"FREE PAY=20 PER",Subject,contains,"cell antenna",Subject,contains,"BANNED=20 CD!",Subject,contains,"cell signal",Subject,contains,"antenna=20 boosters",Subject,contains,"free payper"

enabled,"digital cable CATV phones 2","comms=20 2",16711680,OR,Delete,Subject,contains,pay-per- view,Subject,contains,digitalcablefilter,Subject,contains,"free=20 ppv",Subject,contains,"Its legal to own a=20 cable",Subject,contains,DIRECTV,Subject,contains,freepayper,Subject,cont ains,"have cable tv",Subject,contains,"free movie channels"

enabled,morthelper,morthelper,16711680,OR,Hidden,Delete,EntireHeader,c ontains,morthelper,Body,contains,morthelper,Subject,contains,morthelpers

enabled,rolex,rolex,16711680,OR,Hidden,Delete,EntireHeader,contains,.n epel.com,EntireHeader,contains,"Rolex=20 Watch",EntireHeader,contains,Rolex,EntireHeader,contains,"REPLlCA=20 Watch",EntireHeader,contains,Bvlgari,EntireHeader,contains,"Designer=20 Watches"

enabled,"(unknown ","(unknown=20 ",16711680,OR,Delete,EntireHeader,contains,"(unknown "

*** then I have some you might want to check carefully, as I include=20 blocks for AT&T and Verizon - the regexpr entries I have tried to make=20 "readable" by including a plain text line with what each regexpr does -=20 note that i`ve got a "disabled" line to help clarify sections

disabled,"ISP regexpr","ISP=20

enabled,"AT&T regexpr","AT&T=20 regexpr",16711680,OR,Delete,EntireHeader,containsRE,(-(-)12.,EntireHeader,contains,"### (12.love ###"

enabled,"BT Broadband regexpr","BT Broadband=20 regexpr",16711680,OR,Delete,EntireHeader,containsRE,(-(-)86-.((128- (86.191. ###"

enabled,"BELLSOUTH regexpr","BELLSOUTH=20 regexpr",16711680,OR,Delete,EntireHeader,containsRE,(-(-)68-.((208- (68.223. ###",EntireHeader,containsRE,(-(-)68-.(152-9)

enabled,"BEYONDTHENETWORK regexpr","BEYONDTHENETWORK=20 regexpr",16711680,OR,Delete,EntireHeader,containsRE,(-(-)63-.((216-

enabled,"CHARTER regexpr","CHARTER=20 regexpr",16711680,OR,Delete,EntireHeader,containsRE,(-(-)24-.((176- ###",EntireHeader,containsRE,(-(-)68-.((184-9)(190-1))

enabled,"COMCAST regexpr","COMCAST=20 regexpr",16711680,OR,Delete,EntireHeader,containsRE,(-(-)71-.((224-

enabled,"QWEST regexpr","QWEST=20 regexpr",16711680,OR,Delete,EntireHeader,containsRE,(-(-)71-.((208- (71.223. ###"

enabled,"SHAW CABLE regexpr","SHAW CABLE=20 regexpr",16711680,OR,Delete,EntireHeader,containsRE,(-(-)24-.((64-9) ###",EntireHeader,containsRE,(-(-)68-.((144-9)(150-1))

enabled,"VERIZON regexpr","VERIZON=20 regexpr",16711680,OR,Delete,EntireHeader,containsRE,(-(-)71-.((96-9) (71.127 ###"

disabled,"Country regexpr","Country=20

enabled,"AFRICA regexpr","AFRICA=20 regexpr",16711680,OR,Delete,EntireHeader,containsRE,(-(-)196-.(23-6)

enabled,"EUROPE regexpr 1","EUROPE regexpr=20 1",16711680,OR,Delete,EntireHeader,containsRE,(-(-)82-.(72-9) ###",EntireHeader,containsRE,(-(-)84-.((24-9)(30-11)) ###",EntireHeader,containsRE,(-(-)84-.(80-7) ###",EntireHeader,containsRE,(-(-)84-.(0-4) ###",EntireHeader,containsRE,(-(-)88-.(136-9)

enabled,"EUROPE regexpr 2","EUROPE regexpr=20 2",16711680,OR,Delete,EntireHeader,containsRE,(-(-)84-.((96-9)(10 ###",EntireHeader,containsRE,(-(-)85-.(240-7)

enabled,"FRANCE regexpr","FRANCE=20 regexpr",16711680,OR,Delete,EntireHeader,containsRE,(-(-)82-.((224- ###",EntireHeader,containsRE,(-(-)86-.((64-9)(70-9))

enabled,"GERMANY regexpr","GERMANY=20 regexpr",16711680,OR,Delete,EntireHeader,containsRE,(-(-)80-.((128- ###",EntireHeader,containsRE,(-(-)84-.(72-5) ###",EntireHeader,containsRE,(-(-)84-.((56-9)(60-3)) ###",EntireHeader,containsRE,(-(-)84-.((136-9)(14-80-9)(190- 1))-.,EntireHeader,contains,"### (84.136. - (84.191. ###"

enabled,"ITALY regexpr","ITALY=20 regexpr",16711680,OR,Delete,EntireHeader,containsRE,(-(-)88-.((32-9) ###",EntireHeader,containsRE,(-(-)83-.(152-9) ###",EntireHeader,containsRE,(-(-)84-.(220-3)

enabled,"POLAND regexpr","POLAND=20 regexpr",16711680,OR,Delete,EntireHeader,containsRE,(-(-)83-.((0-9) (83.31. ###",EntireHeader,containsRE,(-(-)80-.((48-9)(50-5))

enabled,"SPAIN regexpr","SPAIN=20 regexpr",16711680,OR,Delete,EntireHeader,containsRE,(-(-)85-.((48-9) ###",EntireHeader,containsRE,(-(-)88-.((0-9)(10-9)(20-9)(30- ###",EntireHeader,containsRE,(-(-)83-.((36-9)(4-50-9)(60-

enabled,"TURKEY regexpr 1","TURKEY regexpr=20 1",16711680,OR,Delete,EntireHeader,containsRE,(-(-)85-.((96-9)(10

enabled,nigeria,nigeria,16711680,OR,Delete,EntireHeader,contains, (83.229.22.,EntireHeader,contains,(83.229.23.

enabled,"portugal 1","portugal=20 1",16711680,OR,Delete,EntireHeader,contains, (81.84,EntireHeader,contains,(213.22.

*** then on to the rest of my "generalised" filters

enabled,"general filters 1","general=20 1",16711680,OR,Delete,Subject,contains,"coral=20 calcium",Subject,contains,"pain medication",Subject,contains,"100%=20 guaranteed to=20 work",Subject,contains,pharmaceuticals,Subject,contains,"seek of=20 spam",Subject,contains,"pain relief",Subject,contains,"stop=20 smoking",Subject,contains,"your confidence",Subject,contains,"size=20 really does",Subject,contains,"golf wedge"

enabled,"general filters 2","general=20 2",16711680,OR,Delete,Subject,contains,"partnership=20 required",Subject,contains,"turn $25",Subject,contains,"I chose=20 life",Subject,contains,"want it bigger",Subject,contains,"want it=20 huge",Subject,contains,"boosts multiple orgasms",Subject,contains,"can=20 enjoy the benefits of",Subject,contains,"local=20 quickbooks",Subject,contains,"debt consolidation",Subject,contains,"$$=20 opportunity"

enabled,"general filters 3","general=20 3",16711680,OR,Delete,Subject,contains,"hot=20 videos",Subject,contains,"too fat to go",Subject,contains,"does your=20 printer need ink",Subject,contains,"I choose life=20 instead",EntireHeader,contains,adsl.proxad.net,Subject,contains,"pink=20 engagement",Subject,contains,"survivor=20 style",Subject,contains,"schoolgirls=20 naked",Subject,contains,SUBJECT=3DRe:,Subject,contains,"cheap cigarettes"

enabled,"general filters 4","general=20 4",16711680,OR,Delete,Subject,contains,"smoking=20 is",Subject,contains,"the best program=20 for",Subject,contains,vvisa,Subject,contains,"no=20 ccredit",Subject,contains,"bulk friendly",Subject,contains,"serious cash=20 from home",Subject,contains,"glbutt toy",Subject,contains,"internet=20 based business",Subject,contains,"hot lovey=20 movies",Subject,contains,"loveual performance"

enabled,"general filters 5","general=20 5",16711680,OR,Delete,Subject,contains,"Vacation on us=20 ",Subject,contains,"enlarge your size",Subject,contains,"Suite Corel=20 Wordperfect",Subject,contains,"satisfy your=20 woman",Subject,contains,"weight ruined my",Subject,contains,"lose those=20 inches",Subject,contains,"increased libido",Subject,contains,"prevent=20 impotence",Subject,contains,"Tired of being=20 overweight",Subject,contains,"Lose pounds Today"

enabled,"general filters 6","general=20 6",16711680,OR,Delete,Subject,contains,"Hot=20 Amateurs",Subject,contains,"Privacy buttured",Subject,contains,"Mother=20 Nature takes it off",Subject,contains,"burn fat all=20 day",Subject,contains,"enhances orgasms",Subject,contains,"expand the=20 rod",Subject,contains,"glbutt vibrators",EntireHeader,contains,"Microsoft=20 Corporation Technical",EntireHeader,contains,"BArely=20 Legal",Subject,contains,Rolex

enabled,"general filters 7","general=20 7",16711680,OR,Delete,Subject,contains,"College=20 Degree",Subject,contains,"Detectives use this",Subject,contains,"f***ing=20 Farm Animals",EntireHeader,contains,"Microsoft=20 Consumer",Subject,contains,"Increase Your=20 length",Subject,contains,"LOWER HIGH MORTGAGE=20 PAYMENTS",Subject,contains,"Take Control Of Your=20 Life",Subject,contains,CARTR1DGES,Subject,contains,"Great product For=20 RV",Subject,contains,"See this update from M$"

enabled,"general filters 8","general=20 8",16711680,OR,Delete,Subject,contains,"love=20 sites",Subject,contains,"enhanced pleasure for=20 you",Subject,contains,"Satisfy your lover",Subject,contains,"Did you=20 lose my MSN",Subject,contains,"f*** Movies",Subject,contains,"ENLARGE=20 YOUR P",EntireHeader,contains,"make easy=20 $$",Subject,contains,"UNIVERSITY=20 DIPLOMA",Subject,contains,adv:adlt,Subject,contains,"price of gasoline"

enabled,"general filters 9","general=20 9",16711680,OR,Delete,Subject,contains,"gas=20 mileage",Subject,contains,"27% on gas",Subject,contains,"better than=20 vegas",Subject,contains,"Auto Warranty=20 Quote",Subject,contains,pen1s,Subject,contains,RNDUCCHAR2- 8,Subject,contains,"Dangerous Privacy Breach",Subject,contains,"Severe=20 Privacy Breach",Subject,contains,"Size does=20 matter",Subject,contains,"Tobacco Offer"

enabled,"general filters 10","general=20 10",16711680,OR,Delete,Subject,contains,"Your own ebay=20 business",Subject,contains,"Banks Compete for",Subject,contains,"Virus=20 Detected but not Cleaned",Subject,contains,"Extreme Content=20 Violation",EntireHeader,contains,%RND,Subject,contains,"Virus Scan=20 Unavailable",Subject,contains,Downl0ad,Subject,contains,"creamy=20 facials",Subject,contains,C0REL,EntireHeader,contains,#RND

enabled,"general filters 11","general=20 11",16711680,OR,Delete,EntireHeader,contains,"honda handle"

enabled,"money finance 1","finance=20 1",16711680,OR,Delete,Subject,contains,"student=20 loan",Subject,contains,"your debt",Subject,contains,"get your gold=20 visa",Subject,contains,"home loan status",Subject,contains,"your=20 refinance",Subject,contains,"best refinance",Subject,contains,"avoid=20 bankruptcy",Subject,contains,"bad credit",Subject,contains,"lowest rates=20 in years",Subject,contains,"free mortgage rate reduction"

enabled,"money finance 2","finance=20 2",16711680,OR,Delete,Subject,contains,"no credit=20 check",Subject,contains,"debt free to",Subject,contains,"return on your=20 money",Subject,contains,"Get Up To 10 quotes",Subject,contains,"make=20 lenders compete",Subject,contains,"work from home",Subject,contains,"--- mortgage rates are",Subject,contains,"---interest rates=20 are",Subject,contains,"affordable health=20 insurance",Subject,contains,"instant term life"

enabled,"money finance 3","finance=20 3",16711680,OR,Delete,Subject,contains,"debt=20 freedom",Subject,contains,"pls very urgent",Subject,contains,"Save On=20 Your Mortgage Quickly",Subject,contains,"---Interest=20 rates",Subject,contains,"Get A Better Rate On Your=20 Mortgage",Subject,contains,"Stock Alert",Subject,contains,"Get A Better=20 Rate On Thier Mortgage",Subject,contains,"INTERNET=20 PROFITS",Subject,contains,~refinance,From,contains,"Mortgage Lenders"

enabled,"money finance 4","finance=20 4",16711680,OR,Delete,From,contains,"best=20 rates",Subject,contains,"Hundreds of=20 lenders",Subject,contains,M0RTGAGE,Subject,contains,REFINANCENOW,Subjec t,contains,"a day working at home",Subject,contains,"How To=20 Refinance",Subject,contains,"tired of being in=20 debt",Subject,contains,"Your Mortgage Today",Subject,contains,"OUR NEW=20 STOCK PICK",Subject,contains,"Free Quotes All Day Long"

enabled,"money finance 5","finance=20 5",16711680,OR,Delete,Subject,contains,"Partnership=20 Required",Subject,contains,"Free Quotes All Day=20 Long",Subject,contains,"Watch this Stock",Subject,contains,"ATTN=20 Investors",Subject,contains,"penny stock",Subject,contains,"credit=20 repair",Subject,contains,st0ck,Subject,contains,"selected for a low=20 rate",Subject,contains,Micro-cap,Subject,contains,0pportunity

enabled,"bank phish","bank=20 phish",16711680,OR,Delete,Subject,contains,"Barclays IBank"

enabled,"ebay phish","ebay=20 name=3D"",Body,contains,ebay.com

** I check for specific spam to domains I own in a few filters I won`t=20 list here

enabled,"weird characters","weird=20 chars",16711680,OR,Delete,Subject,contains,=EE,Subject,contains,=E0,Subject= , contains,=C9

enabled,"body text & www block 1","body text & www block=20 1",16711680,OR,Delete,Body,contains,www.meeting-- ground.com,Body,contains,"Pheromone=20 Formula",Body,contains,www.netsavinz.biz,Body,contains,www.matter- jump.com,Body,contains,www.ebookzsave.biz,Body,contains,S0FTABS,Body,con tains,"Get a capable=20 html",Body,contains,bestpills.info,Body,contains,aboutweightloss.net,Bod y,contains,loaddialect.com

enabled,"body text & www block 2","body text & www block=20 2",16711680,OR,Delete,Body,contains,.neata.com,Body,contains,"Prescripti on=20 medications",Body,contains,.info-?,Body,contains,hottylaugh.com,Body,con tains,"money=20 judgments",Body,contains,.regcmp.com,Body,contains,"daughter in=20 pain",Body,contains,"son in pain",Body,contains,"wife in=20 pain",Body,contains,www.a1info.net

enabled,"body text & www block 3","body text & www block=20 3",16711680,OR,Delete,Body,contains,"Wrist Watches",Body,contains,mort- gages.com,Body,contains,Sma,Body,contains,st0ck,Body,contains,pre- approved,Body,contains,H0USEWlFE,Body,contains,rxwholesale.info,Body,con tains,W1ND0WS,Body,contains,Gobal,Body,contains,0rgasm

enabled,"body text & www block 4","body text & www block=20 4",16711680,OR,Delete,Body,contains,dat1ng,Body,contains,erectile,Body,c ontains,"Be your own=20 boss",Body,contains,.fightpyco.net,Body,contains,foat,Body,contains,Sym bo,Body,contains,otcbb,Body,contains,(OTC,Body,contains,"Watch This=20 Stock",Body,contains,www.znetmail.biz

enabled,"body text & www block 5","body text & www block=20 5",16711680,OR,Delete,Body,contains,"zeta=20 trade",Body,contains,RusDeluxe,Body,contains,"trusted Online=20 Pharmacy",Body,contains,phramacy,Body,contains,Oi,Body,contains,www.bro adcastadvertise.net,Body,contains,www.broadcastadvertising.org,Body,cont ains,Internationa,Body,contains,cialis,Body,contains,viagara

enabled,"body text & www block 6","body text & www block=20 6",16711680,OR,Delete,Body,contains,"email your web site=20 to",Body,contains,"+ opt-in email",Body,contains,"CHARITY=20 CONTACT:",Body,contains,optinemail,Body,contains,broadcastemailservices, Body,contains,nonprofit-charity,Body,contains,"nonprofit=20 Contact",Body,contains,"=1B$B",Body,contains,Ph=C1rm,Body,contains,"male=20 enhancement"

enabled,"body text & www block 7","body text & www block=20 7",16711680,OR,Delete,Body,contains,"gold and mineral"

*** then I do a check for email addressed to specific domains I own,=20 then...

enabled,"Mail sent to "Undisclosed recipients" (ie not specifically=20 me)",undisclosed,16711680,OR,Delete,EntireHeader,contains,"undisclosed=20 recipients",EntireHeader,contains,undisclosed-

*** then finish with a filter to delete email not sent specifically to=20 email addresses I use (doctored to keep it slightly anonymous for here,=20 and shortened by quite a few :-})

enabled,"mail not to me","not to=20 m,EntireHeader,doesn'tContain,wibble2