I'm using 2.0.15. I use CleanTalk to control spammers, been using it for over a year. Thought it was working pretty well.
Got an E-Mail this morning from my ISP (BlueHost)...
QuoteWe are contacting you today because we have disabled your outbound email services temporarily. The reason for this is because you've got a forum that spammers were subscribing to to get messages sent out. They used a spam trap email address that actually resulted in our mail server getting blacklisted.
We need you to add protection to it so it isn't being exploited in the future. You will need to contact us and let us know this has been resolved for us to restore your email services.
For protection, we ask that you require an account to subscribe to topic notifications if you haven't already. We also ask that you add protection to your sign-up page so that spammers cannot automate it. You can do this by using a captcha or something similar to that.
To activate your account, please visit our BlueHost account reactivation center. Use the link below:
I'm not getting any spam in my forums. The only thing I can imagine, is that a spammer could use someone else's E-Mail address to sign-up for my forum, causing that person to receive an E-Mail to confirm their address. And if that someone used a honey pot, then that would be something.
But I don't understand why a spammer would do this, as it would seem they'd not be getting THEIR message through.
I've contacted Bluehost to see if they have a copy of anything that was supposedly sent via my SMF installation. But it is a holiday in the U.S., so maybe I won't get a quick response or any at all.
Any tips on where I should be looking?
Ugh, I'm probably an idiot. Just going through permissions it looks like "Send topic to friend" was enabled for "Regular Members" (my largest base).
So they could enter whatever E-Mail address they want, and add their own content?
I would disable that for guests as well.
But, it could also be sure a person that signed up that didn't get caught by cleantalk. Or an old user whose domain expired and was then reregistered as a spamtrap.
I also suggest either of these mods
https://custom.simplemachines.org/mods/index.php?mod=1519
https://custom.simplemachines.org/mods/index.php?mod=1547
I would also ask for as much detail as you can from your host on the listing.
Quote from: vbgamer45 on July 04, 2019, 04:06:16 PM
I would disable that for guests as well.
But, it could also be sure a person that signed up that didn't get caught by cleantalk. Or an old user whose domain expired and was then reregistered as a spamtrap.
I also suggest either of these mods
https://custom.simplemachines.org/mods/index.php?mod=1519
https://custom.simplemachines.org/mods/index.php?mod=1547
I would also ask for as much detail as you can from your host on the listing.
Got it, thank you for your help!
A follow-up Q: Is it possible to change a setting somewhere or add a mod that gives me a better idea of E-Mails being sent?
My forum isn't as big as most of the ones you guys are running, if I see more than a few E-Mails going out a day, I can be very suspicious I've screwed something up somewhere.
You can setup a mail log in php.ini to see what is sent
Oh crap.
I sent an E-Mail to an outside address, it was delivered. I went back and looked at the E-Mail, and it is a scam.
The link to click on to reactivate contains "bluehost.com" as a subdomain of another domain.
Sorry.
I've still implemented the suggested changes.
Also if you used that link, change your hosting passwords
Quote from: Kindred on July 04, 2019, 08:10:08 PM
Also if you used that link, change your hosting passwords
Thankfully I didn't.