Simple Machines > News and Updates
Simple Machines Forums attacks
Dejv:
--- Quote from: george54 on June 01, 2011, 08:13:49 PM ---I tried these two simple approaches to stop unwanted spam on my site:
* robots.txt-> disallow
* disabled landing page registration. Seems to have worked for the hour. (now over 24 hours, looking good)
Have banned bad IPs in the past, but the bad actors are always getting new IPs.
--- End quote ---
Hi,
did it help? I think the main problem is the registration. How to change the registration url to something else?
Thanks a lot!
Liv42dayOK:
So many people expect so much from automated programs these days. They think they are always going to do everything for them, without fail or error so they never have to think about lifting a finger and applying one ounce of their own efforts to do anything.
In the over 2 years I've been using SMF, I've hand NO spammers get through. None. And, all I've ever used is the smf program... as it is. First and foremost, I don't auto-approve ANY registrations. I will take the time review them. Along with that, I added custom registration fields. Bots will invariably enter the same info into some or all of them (usually, it's their source e-mail) so they stand out like a sore thumb and then, I add them to the ban list.
So long as computer generated methods of confounding bots are used, I don't know if they ever will or even can be foolproof. For every security measure created, a way around it is found. The one thing bots can't be programmed to do is to figure out answers to questions which require human reasoning when the bot programmer has no idea what the human answer is because they have no idea what the question is going to be.
IMO - Bottom line is, if you value a spam-free forum, take the time to review your registrations manually. I realize this requires effort on your part but, a 100% track record and a community which has enjoyed years of spam-free use of the forum and site is well worth it... to me, at least.
Dejv:
Well I had NO spammers and almost no bans for 5 years ... but in only the last few weeks I made a few hundred bans, not only to the not-approved profiles but also to some new registrations.
Thanks, I will have a look in the custom registration fields. ... I guess this is not in the 1.1.14 core
Kindred:
2.0 is much better ;)
青山 素子:
--- Quote from: ThePharaoh on July 10, 2011, 07:21:16 PM ---IMO - Bottom line is, if you value a spam-free forum, take the time to review your registrations manually. I realize this requires effort on your part but, a 100% track record and a community which has enjoyed years of spam-free use of the forum and site is well worth it... to me, at least.
--- End quote ---
Indeed. It's important to exercise some effort to monitor the forum. However, adding automated measures will help reduce the effort needed and even eliminate the most obvious spam bots so you can focus on the more devious accounts.
However, as you say, you'll never get a 100% elimination rate (not without a lot of false-positives) on automation alone. If it can be coded, it can be coded around.
Navigation
[0] Message Index
[#] Next page
[*] Previous page
Go to full version