The battle with the spam bots
Posted: Mon Dec 04, 2006 10:19 pm
Since Micah granted me administrator access a couple of days ago. I have taken the following steps:
- Banned a bunch of IP addresses used by spammers. This is a stopgap and imperfect measure, but seems to have temporarily slowed the tide to a trickle.
- Turned on the stock phpBB CAPTCHA for registration. It is not used for posts (only for new user registration), and a sophisticated spambot can eat it up in seconds, but it's better than nothing and took me seconds to activate. There is a better CAPTCHA mod which I will get installed within a day or two.
- Turned on authentication for new users. This means that when someone registers, they will have to click a link in an email before they can post even once.
- Upgrade the phpBB to the latest version (we're only two minor version numbers behind; Micah already updated it a few months back)
- Install better CAPTCHA
- Install simple mod that will change some hidden variables in the registration forms to make life a tiny bit more difficult for spambots
- Install mod that will break bunnies links (not just filter the naughty words, but actually change the links)
- Install mod that will allow for more aggressive spambot detection and prevention. This mod will take a little more time to install; the above mods will be a couple minutes each, but this one will take like a half hour.
- Install mod to allow admins to delete users who have not posted. The reason for this is that bunnies bots usually either don't post (and just want a link in their user profile) or only post once, and that post is deleted... so almost any user with 0 posts is going to be a spambot. This mod helps to clear that out.
- Install mods to log the IP used when registering. This will allow us to be even more aggressive when banning IP addresses.
- Fix the things that need attention on JohnWSchlitt.com before Sue fires me.