Notices

Preventing/Banning Spammers

 
Thread Tools
 
Search this Thread
 
Rate Thread
 
Old 04-24-2007, 09:06 PM
  #1  
Rotary Powered Decepticon
Thread Starter
 
BlueFrenzy's Avatar
 
Join Date: Aug 2004
Location: Calgary, AB
Posts: 1,618
Likes: 0
Received 1 Like on 1 Post
Preventing/Banning Spammers

I've noticed recently a huge influx of spammers selling viagra, tampons, etc on our forum. I was thinking of ways to limit this:

1) Make it more difficult to register (ie instead of just verification email ... have them physically put in verification codes when typing in their pertinent info, etc)

2) Allow new members to post only in a "Newbie forum" to introduce themselves and say hi, THEN after a grace period (1 week) allow them to post in other sections

3) Likely these spammers are a handful of people who are registrying under different names ... ban the IP addresses that they are coming from

4) Impliment an instant BAN for posting spam

I realize this would be more work for the administrators and mods but would definitely make our forum much cleaner. Also, I know that this might scare away newbies but those that are really interested/motivated will go through the trouble.
BlueFrenzy is offline  
Old 04-24-2007, 09:07 PM
  #2  
Future Rotary User
 
lone_wolf025's Avatar
 
Join Date: Oct 2006
Location: Chicago, IL
Posts: 567
Likes: 0
Received 0 Likes on 0 Posts
I agree with everything except the 1 week grace period.
lone_wolf025 is offline  
Old 04-24-2007, 09:09 PM
  #3  
Rotary Powered Decepticon
Thread Starter
 
BlueFrenzy's Avatar
 
Join Date: Aug 2004
Location: Calgary, AB
Posts: 1,618
Likes: 0
Received 1 Like on 1 Post
^^ Ha ha ... I was being mean with the grace period. I figure, if I was a spammer, I would not have the patience to wait a week just to spam ... I'd just go to the rsx club and spam there instead of waiting.
BlueFrenzy is offline  
Old 04-24-2007, 09:17 PM
  #4  
⎝⏠⏝⏠⎠
 
mysql101's Avatar
 
Join Date: Apr 2004
Location: USA
Posts: 8,625
Received 5 Likes on 4 Posts
theres a number of ways to defeat the spammers.

1. scan newly seen ip addresses for open proxies. Prevent posts if a user is sporting them.

2. put a timer on posts. you keep track of when the user hit 'post reply' till the reply is sent. If you prevent posts issued within 5 - 10 secs, it will stop almost all automated spam posts since they are generated directly to the submit post op, and don't go through the reply page first.

3. limit newly created users (less than a week) from being able to submit new threads without first having an admin validate and approve the thread. so new users can make them, but they are hidden till approved.

I do all three of those on searchirc.com and haven't gotten any spam in a long time. Of course it's still POSSIBLE, but the chances of it happening is close to nil and regular users aren't adversely effected.
mysql101 is offline  
Old 04-24-2007, 09:41 PM
  #5  
jersey fresh
 
dillsrotary's Avatar
 
Join Date: Dec 2005
Location: Boston, MA
Posts: 3,688
Likes: 0
Received 0 Likes on 0 Posts
can I interest you in an ipod for $40??
dillsrotary is offline  
Old 04-24-2007, 11:13 PM
  #6  
destination anywhere..
 
early 30's crisis's Avatar
 
Join Date: Jan 2007
Location: Calgary, Alberta
Posts: 487
Likes: 0
Received 0 Likes on 0 Posts
Damn, i missed the tampon thread? All I ever see is the viagra ones

Great ideas guys, I do have to admit it is annoying as hell to have spam on here.. being a newbie myself I would go through this stuff to join, I was quite surprised that I didnt have to do much to get a userid and log in.
early 30's crisis is offline  
Old 04-24-2007, 11:21 PM
  #7  
Registered
 
rotarygod's Avatar
 
Join Date: Apr 2003
Location: Houston
Posts: 9,134
Likes: 0
Received 22 Likes on 21 Posts
Originally Posted by BlueFrenzy
I've noticed recently a huge influx of spammers selling viagra, tampons, etc on our forum. I was thinking of ways to limit this:

1) Make it more difficult to register (ie instead of just verification email ... have them physically put in verification codes when typing in their pertinent info, etc)
This is an idea that we've talked about. I think it's a good one.

Originally Posted by BlueFrenzy
2) Allow new members to post only in a "Newbie forum" to introduce themselves and say hi, THEN after a grace period (1 week) allow them to post in other sections
We have discussed an idea similar to this and decided not to do it. There are many people that are truly interested in the RX-8 and the rotary who have questions or comments they'd like to get across and don't want to wait a week to do it.

Originally Posted by BlueFrenzy
3) Likely these spammers are a handful of people who are registrying under different names ... ban the IP addresses that they are coming from
We already do this. There are just millions of them.

Originally Posted by BlueFrenzy
4) Impliment an instant BAN for posting spam
When already do this too.

Originally Posted by BlueFrenzy
I realize this would be more work for the administrators and mods but would definitely make our forum much cleaner. Also, I know that this might scare away newbies but those that are really interested/motivated will go through the trouble.
Spammers are a royal pain in the ***. Many of them come out at night or on weekends when we aren't around as much to deal with them. They are also getting more creative. It's obvious that some of them are actually people from the way they are doing this. I've seen someone ask a question about the car but covertly have a link to their site in the post. These are harder to catch as the titles look fairly innocent. The newest trick is to ask mindless repetitive questions about the car and then never respond to the threads. While these appear innocent they like to add a link to their website in their signature which they display. These are borderline as they are technically real questions so I can't ban them just for this. The one time I do it'll be a person who was honestly asking a question who just happened to not understand the rules. I just delete their ability to have a signature and that takes care of them.

Most of the spam threads appear in the RX-8 discussion section as it's the first one down. They almost always have the information icon posted next to them. It's a dead giveaway. These are very easy to catch and most of them only post once and then go away. It's the spam that is posted by an actual person that is harder to keep up with as they'll usually go to 4 or 5 different sections. Many times I'm fast enough to ban them while they are typing their next one. Sometimes they come right back. Only an admin can ban an IP address. Not even a supermod can and there are only a couple of them and they aren't always online. All we can really do until they get around to it is to keep banning names. We do need to deal with this problem more. Believe me, it sucks trying to deal with it all and I take care of alot of it.
rotarygod is offline  
Old 04-24-2007, 11:25 PM
  #8  
I zoom therefore I am.
 
laythor's Avatar
 
Join Date: Mar 2007
Location: San Jose, CA
Posts: 4,919
Received 12 Likes on 11 Posts
rotarygod, let me be the first to say I think you're doing an excellent job. I read a lot of different forums during down time at work.

Most are littered with spam that stays in place for hours/days. These are some of the cleanest forums around and I know the work you must put into keeping it that way.

Keep up the great work!!
laythor is offline  
Old 04-24-2007, 11:33 PM
  #9  
Not banned
 
dontfeedthenerd's Avatar
 
Join Date: Mar 2007
Location: Fremont, CA
Posts: 40
Likes: 0
Received 0 Likes on 0 Posts
Naw, guys one of the problems is you guys use vBulletin.
It's popular software, so they can just send in php queries to make posts.

I don't think it's worth it to switch software, but the only real defense against spamming is to have more active mods on.
dontfeedthenerd is offline  
Old 04-25-2007, 12:48 AM
  #10  
⎝⏠⏝⏠⎠
 
mysql101's Avatar
 
Join Date: Apr 2004
Location: USA
Posts: 8,625
Received 5 Likes on 4 Posts
Originally Posted by dontfeedthenerd
It's popular software, so they can just send in php queries to make posts.
Spammers are subject to the same pages we are. But as I said, they can submit direct to the "postreply" op instead of going through the "newreply" op first. Thus my suggestion about a timer count from "newreply" op would completely eliminate anyone posting directly to the server.
mysql101 is offline  
Old 04-25-2007, 01:10 AM
  #11  
Future Rotary User
 
lone_wolf025's Avatar
 
Join Date: Oct 2006
Location: Chicago, IL
Posts: 567
Likes: 0
Received 0 Likes on 0 Posts
I don't suppose there is an option to limit the amount of accounts per IP addy?
lone_wolf025 is offline  
Old 04-25-2007, 04:32 AM
  #12  
Rotary Powered Decepticon
Thread Starter
 
BlueFrenzy's Avatar
 
Join Date: Aug 2004
Location: Calgary, AB
Posts: 1,618
Likes: 0
Received 1 Like on 1 Post
Thanks for the input RotaryGod ... I know you guys do a great job in cleaning it up and I'm sure we all commend you guys. I like some of those other ideas that mysql101 suggested.

Spammers are the worst! There was a documentary I saw on spam and apparently they caught a fellow who's day job was to spam spam spam ... the part that got me is when the fellow said to the police "I'm doing my job. I'm doing nothing wrong". Hey, I wonder if some of those commercials you see on "making money from home with your computer" are actually recruiting spammers????
BlueFrenzy is offline  
Old 04-25-2007, 04:21 PM
  #13  
Registered
 
ken-x8's Avatar
 
Join Date: Aug 2006
Location: Northern Virginia
Posts: 5,027
Likes: 0
Received 5 Likes on 5 Posts
Originally Posted by BlueFrenzy
Hey, I wonder if some of those commercials you see on "making money from home with your computer" are actually recruiting spammers????
Not quite recruiting spammers. More like selling "how to spam" kits that are just as good a deal as the meds and other crap the spammers try to sell. Look at how much of the spam is inept - clearly sent by a sucker who bought a kit.

Speaking of the "I'm doing my job" attitude...remember the immigration lawyers who invented spam? I don't think they won any of their lawsuits against the ISP's who cancelled their account. They did, however, write a book telling how to spam and whining about how they had been picked on.

Ken
ken-x8 is offline  
Old 04-25-2007, 04:23 PM
  #14  
⎝⏠⏝⏠⎠
 
mysql101's Avatar
 
Join Date: Apr 2004
Location: USA
Posts: 8,625
Received 5 Likes on 4 Posts
Originally Posted by lone_wolf025
I don't suppose there is an option to limit the amount of accounts per IP addy?
doesn't matter - they don't post that frequently anyway. They just need one post per ip and they will have millions of possible ips they can use. So even if you limit 1 post per ip, the problem will remain.
mysql101 is offline  
Old 04-25-2007, 04:31 PM
  #15  
Administrator
iTrader: (7)
 
Jedi54's Avatar
 
Join Date: Mar 2004
Location: The Dark Side
Posts: 22,394
Received 2,630 Likes on 1,880 Posts
don't worry boys, I'll just start using my Jedi Powers to PWN all the spammer!








(aka continuing to click the "report" button on their posts)
Jedi54 is offline  
Old 04-25-2007, 05:26 PM
  #16  
Metatron
iTrader: (1)
 
StealthTL's Avatar
 
Join Date: Mar 2003
Location: A Pacific Island.
Posts: 7,280
Received 173 Likes on 130 Posts
Cool Links....

The problem isn't really the spammer, it's the payload, the payoff, the "Link".

....a spam post without it's link is just useless, like a missile without it's warhead - it's a dud.

You just don't find spam without links; what's the point?

So just remove the ability to have a link in a post for the first week/ten posts/whatever.

S
StealthTL is offline  
Old 04-25-2007, 05:32 PM
  #17  
⎝⏠⏝⏠⎠
 
mysql101's Avatar
 
Join Date: Apr 2004
Location: USA
Posts: 8,625
Received 5 Likes on 4 Posts
Originally Posted by StealthTL
The problem isn't really the spammer, it's the payload, the payoff, the "Link".

....a spam post without it's link is just useless, like a missile without it's warhead - it's a dud.

You just don't find spam without links; what's the point?

So just remove the ability to have a link in a post for the first week/ten posts/whatever.

S
Actually, spam is frequently sent without links. For pump and dump stocks, they just need a few people to buy some crappy low volume stock to make a profile. No link needed.

Email spam is also frequently sent without links, or with random text, like shakespeare quotes. We don't know the reason for this, but it's assumed they do this to retrain spam filters on a mass scale.


On a forum... it doesn't always need users to click and buy, the links can help give anchor text for a site to raise pagerank. But yeah, this reminds me that I also prevent anything containing http or www from being posted by new registered users. That'll help a lot too.
mysql101 is offline  
Old 04-25-2007, 05:34 PM
  #18  
⎝⏠⏝⏠⎠
 
mysql101's Avatar
 
Join Date: Apr 2004
Location: USA
Posts: 8,625
Received 5 Likes on 4 Posts
oh.. this thread reminds me... another kind of scum:

mysql101 is offline  
Old 04-25-2007, 05:36 PM
  #19  
map
Registered
 
map's Avatar
 
Join Date: Jul 2004
Location: los angeles, ca
Posts: 463
Likes: 0
Received 0 Likes on 0 Posts
I'm on another forum that put in a 10 post count minimum to start new threads. It killed 95% of the spam, and keeps new users from making dumb threads without searching first.
map is offline  
 



You have already rated this thread Rating: Thread Rating: 0 votes,  average.


All times are GMT -5. The time now is 02:24 PM.