Advertisement:

Author Topic: A Guide to Combating Spam on a Simple Machines Forum  (Read 105744 times)

Offline Rust

  • Jr. Member
  • **
  • Posts: 106
Re: A Guide to Combating Spam on a Simple Machines Forum
« Reply #40 on: December 28, 2012, 07:06:49 PM »
I didn't notice a huge drop in spam after implementing Project Honeypot.  Bad Behavior Mod helped.  Installing a StopForumSpam plugin, however, was decisive in preventing spammers.

Just passing it along, in case it helps someone else out. :)

Offline Bob La Londe

  • Semi-Newbie
  • *
  • Posts: 49
Blocking registration by partial user name
« Reply #41 on: May 22, 2014, 11:47:34 AM »
Blocking registration by partial user name - I like the ability to do that, but I would like to not show exactly why a registration was blocked. 

Lately I have been getting a lot of spam registrations from user names ending in the numeric digits twenty three.  If they immediately get a message saying twenty three is a restricted user name then they will just start using twenty four. 


Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 71,782
    • StoryBB/StoryBB on GitHub
Re: A Guide to Combating Spam on a Simple Machines Forum
« Reply #42 on: May 22, 2014, 11:56:36 AM »
You're giving spam bots way too much intelligence.
Don’t try to tell me that some power can corrupt a person. You haven’t had enough to know what it’s like.

No good deed goes unpunished / No act of charity goes unresented.

Offline Kindred

  • The Mean One
  • Support Specialist
  • SMF Legend
  • *
  • Posts: 58,549
  • Gender: Male
    • Kindred-999 on GitHub
Re: A Guide to Combating Spam on a Simple Machines Forum
« Reply #43 on: May 22, 2014, 12:46:04 PM »
Also... not telling a REAL user why the registration was blocked would just piss people off...

What if I wanted to register on your forum with the name "23-days"
If it just got bumped without telling me WHY, I would leave your forum and assume that it was buggy and was not allowing any registrations
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

Offline firemun

  • Semi-Newbie
  • *
  • Posts: 22
  • Gender: Male
Re: A Guide to Combating Spam on a Simple Machines Forum
« Reply #44 on: June 12, 2014, 10:07:46 PM »
I thought of a fun way to use security questions the other day while also helping to block even more spammers.

We all like our niches right? We also like quizzes! So require 3-X (or something like that) questions to be answered upon registration, first posts and so on and make the theme of the questions not only related to the direct niche of your forum but also in a quiz-like theme. The more questions you have (but don't have too many), the better you will block that bad robots and quizzes might be fun at least to a "majority" of new members signing up.

Just a thought though to ease the registration process... Who knows, maybe the idea can be used to make an advanced security question feature or mod, add some additional security questions options like radio checking, multi-checking, drop downs, etc.

Thoughts on this idea? Good? Bad?

Offline Kindred

  • The Mean One
  • Support Specialist
  • SMF Legend
  • *
  • Posts: 58,549
  • Gender: Male
    • Kindred-999 on GitHub
Re: A Guide to Combating Spam on a Simple Machines Forum
« Reply #45 on: June 12, 2014, 10:11:34 PM »
personally, I think that may be overkill...
(and with checkboes or radio buttons, the spammer could actually have a rnadom chance to choose correctly...)

The new 2.1 multi-answer and multi-language capability would seem to handle most situations...
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 71,782
    • StoryBB/StoryBB on GitHub
Re: A Guide to Combating Spam on a Simple Machines Forum
« Reply #46 on: June 12, 2014, 10:13:08 PM »
Yup, reducing it to a dropdown or radio button means you change it from an arbitrary collection of choices to a few which could be beaten totally at random without significant effort.
Don’t try to tell me that some power can corrupt a person. You haven’t had enough to know what it’s like.

No good deed goes unpunished / No act of charity goes unresented.

Offline firemun

  • Semi-Newbie
  • *
  • Posts: 22
  • Gender: Male
Re: A Guide to Combating Spam on a Simple Machines Forum
« Reply #47 on: June 12, 2014, 10:17:48 PM »
Well I can't argue that!

But how about the general idea of making it like a quiz with just regular fill in the blanks?

My main thing is that I don't want to annoy people trying to join. Most people are not going to think like we do, we know we are trying to prevent spam because its way more annoying but they just think we are trying to make things difficult.

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 71,782
    • StoryBB/StoryBB on GitHub
Re: A Guide to Combating Spam on a Simple Machines Forum
« Reply #48 on: June 12, 2014, 10:19:17 PM »
Go for it - that's one of the ways to outsmart the spam bots.
Don’t try to tell me that some power can corrupt a person. You haven’t had enough to know what it’s like.

No good deed goes unpunished / No act of charity goes unresented.

Offline Mikelund

  • Newbie
  • *
  • Posts: 2
Re: A Guide to Combating Spam on a Simple Machines Forum
« Reply #49 on: June 15, 2014, 05:40:12 PM »
Hi Everyone. I'm a new member with a rude awakening. I got 100 adult-spam posts within 12 hours even though people had to register.

My question, can I assume spam these days is often by real people rather than just bots?

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 71,782
    • StoryBB/StoryBB on GitHub
Re: A Guide to Combating Spam on a Simple Machines Forum
« Reply #50 on: June 15, 2014, 05:42:00 PM »
Not at all. The vast amount of it is by bots.
Don’t try to tell me that some power can corrupt a person. You haven’t had enough to know what it’s like.

No good deed goes unpunished / No act of charity goes unresented.

Offline Mikelund

  • Newbie
  • *
  • Posts: 2
Re: A Guide to Combating Spam on a Simple Machines Forum
« Reply #51 on: June 16, 2014, 03:41:03 AM »
Not at all. The vast amount of it is by bots.
I don't understand how I'm getting lots of spam registrations even with captcha and a question and admin approval.  Are these likely to be human spammers rather than bots?

Offline margarett

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 19,761
  • Gender: Male
Re: A Guide to Combating Spam on a Simple Machines Forum
« Reply #52 on: June 16, 2014, 06:27:37 AM »
Admin approval is the "ultimate" way of preventing bots. If you approve them and then they spam you all over the place, that means that you are not doing your job properly :P
If you choose to have members approved "by hand", you have to be careful enough to manually check their IP and email address in known spammers databases. If you approve without checking, well, then just skip the admin approval and save yourself the hassle ;D

Furthermore:
* Captcha is useless (spammers crack it way easier than humans understand it :P )
* A question: What question are you using?
* As always: check this --> http://wiki.simplemachines.org/smf/Spam_-_my_forum_is_flooded_with_spam,_what_can_I_do
Se forem conduzir, não bebam. Se forem beber... CHAMEM-ME!!!! :D

Quote
Over 90% of all computer problems can be traced back to the interface between the keyboard and the chair

Offline firemun

  • Semi-Newbie
  • *
  • Posts: 22
  • Gender: Male
Re: A Guide to Combating Spam on a Simple Machines Forum
« Reply #53 on: June 16, 2014, 10:16:50 PM »
Not at all. The vast amount of it is by bots.
I don't understand how I'm getting lots of spam registrations even with captcha and a question and admin approval.  Are these likely to be human spammers rather than bots?

Are you using challenging questions at all? Also, where are you promoting your forum at?

Offline 11 phenomenon

  • Newbie
  • *
  • Posts: 6
Re: A Guide to Combating Spam on a Simple Machines Forum
« Reply #54 on: July 13, 2014, 08:13:40 PM »
It seems about the best way to prevent spammers from taking hold would be to provide an option to approve of the first post(s). Other forums do this. Not sure why SMF does  not.

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 71,782
    • StoryBB/StoryBB on GitHub
Re: A Guide to Combating Spam on a Simple Machines Forum
« Reply #55 on: July 13, 2014, 08:14:13 PM »
Actually, it really doesn't work that well. SMF can do it, but in reality it just puts up more barriers to participation and drives people away.
Don’t try to tell me that some power can corrupt a person. You haven’t had enough to know what it’s like.

No good deed goes unpunished / No act of charity goes unresented.

Offline Kindred

  • The Mean One
  • Support Specialist
  • SMF Legend
  • *
  • Posts: 58,549
  • Gender: Male
    • Kindred-999 on GitHub
Re: A Guide to Combating Spam on a Simple Machines Forum
« Reply #56 on: July 13, 2014, 08:20:18 PM »
As stated, you can do that if you want... With a standard installation, even...
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

Offline 11 phenomenon

  • Newbie
  • *
  • Posts: 6
Re: A Guide to Combating Spam on a Simple Machines Forum
« Reply #57 on: July 13, 2014, 08:52:42 PM »
As stated, you can do that if you want... With a standard installation, even...

How would this be done? It seems that it would be preferable to make a person wait for the first post than to make them wait while someone pours through ip addresses to see if they are a spammer. Generally it would take longer to approve the registration than the post.

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 71,782
    • StoryBB/StoryBB on GitHub
Re: A Guide to Combating Spam on a Simple Machines Forum
« Reply #58 on: July 13, 2014, 08:54:05 PM »
You can configure post approval with permissions in 2.0, and have been able to do so for years.

As far as IP lookups go, it's not like Stop Forum Spam etc. can't be automated (because they can), necessitating not having to do manual lookups. And of course, good Q&A at the door has a knack of keeping them at bay anyway.
Don’t try to tell me that some power can corrupt a person. You haven’t had enough to know what it’s like.

No good deed goes unpunished / No act of charity goes unresented.

Offline projectnaija

  • Semi-Newbie
  • *
  • Posts: 55
Re: A Guide to Combating Spam on a Simple Machines Forum
« Reply #59 on: October 21, 2014, 01:23:43 AM »
enabling verification image and question can help. I wrote a small guide on how I fixed mine here