Beefy Boxes and Bandwidth Generously Provided by pair Networks
There's more than one way to do things
 
PerlMonks  

Re: Stopping spam AHHHHH!!!!!

by atcroft (Abbot)
on Jun 10, 2015 at 18:28 UTC ( [id://1129911]=note: print w/replies, xml ) Need Help??


in reply to Stopping spam AHHHHH!!!!!

I agree with the earlier comment that it is an arms-race. Forum spam is in many ways similar to email spam, so the first things I thought of were something along the lines of SpamAssassin, or a Bayesian or other type of filter. Depending on the forum software, there may already be tools to do something similar. However, I would not discount the lower-hanging fruit:

  • Is there a pattern in usernames that are making these posts?
  • Is there a particular block/range of IP addresses they are posted from?
  • Does the forum software have the ability to block certain strings, and if so, are there other string literals that appear in multiple of the posts that can be filtered on? (Understanding that this may only serve as a temporary barrier.)
  • Are there other commonalities in the posts (user-agent, etc.) that can be examined for patterns to the postings?
  • Is there some form of approval system required for posting in certain areas, or for posters of a certain age/post count that could be enabled? (Understanding that major changes in a forum may spark protests among some users unless handled tactfully.)

Also, have you looked for other resources (generic or specific to your forum software), such as http://www.stopforumspam.com/?

Hope that helps, and good luck.

Update: 2015-06-10
Added note regarding blocking of fixed strings.

Update: 2015-06-10
Added link to additional resources.

Replies are listed 'Best First'.
Re^2: Stopping spam AHHHHH!!!!!
by james28909 (Deacon) on Jun 10, 2015 at 18:48 UTC
    1. Is there a pattern in usernames that are making these posts? 2. Is there a particular block/range of IP addresses they are posted f +rom? 3. Does the forum software have the ability to block certain strings, +and if so, are there other string literals that appear in multiple of + the posts that can be filtered on? (Understanding that this may only + serve as a temporary barrier.) 4. Are there other commonalities in the posts (user-agent, etc.) that +can be examined for patterns to the postings? 5. Is there some form of approval system required for posting in certa +in areas, or for posters of a certain age/post count that could be en +abled? (Understanding that major changes in a forum may spark protest +s among some users unless handled tactfully.)
    1. no, it is different each time, but post is always almost the same, only names of cities change and format of telephone number
    2. nope, they use a proxy.
    3. yes sir, the forum does indeed have software, but this is the only type that gets around it, and always has a telephone number (7 or more), and is from new users.
    4. as mentioned earlier, the telephone number is always 7 or more digits, they contain city names, but they change per post.
    5. well new users cant post links, so i dont see why it would be so bad if it wouldnt allow new users to post strings with 7 or more digits in title or post.
      2. Is there a particular block/range of IP addresses they are posted from?
      2. nope, they use a proxy.

      Who is "they"? All users, some users, or just the spammers? A single proxy or several?

      Alexander

      --
      Today I will gladly share my knowledge and experience, for there are no sweeter words than "I told you so". ;-)
        "they" being the one whom post the spam... :

        EDIT: i would go on a limb to say they would use whatever resources that they could to post 2 or 3 messages

Log In?
Username:
Password:

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: note [id://1129911]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this?Last hourOther CB clients
Other Users?
Others pondering the Monastery: (5)
As of 2024-04-19 23:22 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    No recent polls found