Outlook Express has a limited filter or "killfile" capacity for newsgroups: only the "From" and "Subject" headers can be filtered. That can be a problem with trolls who constantly change their user IDs or email addresses; it can be even more of a problem when a troll steals the user IDs of legitimate non-troll subscribers. For that reason, it's a good idea to examine the headers of a suspected troll message. To be sure that you see the full headers of newsgroup messages in Outlook Express, press Alt-F (file) to reveal the File menu:

Press R (pRoperties) to reveal the basic information about a message:

Then click Details to provide you with the full headers of the message:

In summary, the full headers of any message in Outlook Express can be obtained with the following shortcuts:

Even when a troll constantly changes user IDs or email addresses, certain characteristics within the headers will usually remain consistent. The header most likely to remain the same (largely because the troll is limited in its ability to change it) will be the troll's IP address, which can usually be found under the header "NNTP-Posting-Host." The common characteristics of some of MFW's known trolls may be found in my personal troll list. With a little practice, you will easily be able to identify the common characteristics in the headers of trolls who constantly change user IDs and email addresses.

Once you have identified a troll post, the keystroke shortcuts for filtering or "killfiling" the troll are relatively simple. Open the "Message" menu simply by pressing Alt-M (message):

Then press S (block Sender) to filter or "killfile" the sender of that message. You will then be presented with a confirmation dialog box notifying you that the author of that message has been blocked and asking you if want to purge that author's messages from those already downloaded:

Until you are certain that the email address is being used only by the troll and not by any legitimate contributor, you should press N and leave any remaining messages under that email address. However, if you are certain that this email address is used only by the troll, simply press Y or Enter to purge all messages by that author from the messages you have downloaded. A confirmation dialog box will appear, advising you that all messages under that email address have been deleted:

Press Enter to return to remaining messages.

Some trolls will boast, "I can change my IDs faster than you can killfile them!" I don't think so. Once one becomes practiced at recognizing the consistent characteristics of messages by known trolls (e.g., an unchanging IP address) and determining that the email address in the "From" header doesn't belong to any legitimate user, the current email address of any troll, and all the troll's existing messages, can be filtered in Outlook Express with the following shortcuts:

Personally, I believe that this simple method of filtering or "killfiling" trolls by email address is the most effective. Why? A troll can choose to forge any common name, like "Bob." If you filter the name "Bob," anyone who posts under that name will also be filtered or "killfiled." However, most trolls are smart enough not to forge a legitimate email address. Internet Service Providers (ISPs) risk extensive legal liability for tolerating users who forge legitimate email addresses. Even ISPs that are excessively tolerant of Usenet trolls will instantly expel a user who is caught forging legitimate email addresses.

The exception to this rule is the troll who wants to get around everyone's filters or "killfiles," but who wants to be sure that everyone knows who he or she is. That type of troll will regularly alter his or her fake email address, leaving the user ID unchanged. In order to specifically filter the user ID under the "From" header, it is best to create a filter "rule." Open the "Message" menu simply by pressing Alt-M (message):

Then press E (crEate rule) to create a rule for filtering the sender of that message. You will then be presented with a dialog box that allows you to set the parameters of that rule:

Under Section 1, check "Where the From line contains people." Under Section 2, check "Delete it." And under Section 4, you can leave the rule name as the default name or insert the troll's name. Finally, click on the link in Section 3, which will take you to a dialog box that will allow you to enter the troll's user ID: