Temple of The Roguelike Forums

Websites => Temple of the Roguelike => Topic started by: mariodonick on May 20, 2010, 06:58:59 AM

Title: Spam Filter for Forum
Post by: mariodonick on May 20, 2010, 06:58:59 AM
As you might have noticed, the forum is currently spammed with viagra ads and such stuff. Spam is not only an annoyance for the regular users, but can also give the false impression to new users that this forum is half-dead or not taken care off.

So, is there a way to prevent spam bots from signing up to the forums?
Title: Re: Spam Filter for Forum
Post by: getter77 on May 20, 2010, 11:41:10 AM
I think there are currently some measures in place, so I would guess the bots got craftier.
Title: Re: Spam Filter for Forum
Post by: Slash on May 20, 2010, 12:36:05 PM
There's already a spam "filter" which blocks about 10 - 20 new spambots per day, but some are a bit smart and can divert our countermeasures
Title: Re: Spam Filter for Forum
Post by: mariodonick on May 21, 2010, 04:56:31 PM
Quote
but some are a bit smart and can divert our countermeasures

And obviously the smartest one has just filled about _everything_ with spam ...
Title: Re: Spam Filter for Forum
Post by: mariodonick on May 21, 2010, 05:05:48 PM
*bump*
Title: Re: Spam Filter for Forum
Post by: mariodonick on May 21, 2010, 06:57:32 PM
*bump*
Title: Re: Spam Filter for Forum
Post by: Slash on May 21, 2010, 08:15:24 PM
Damn smartbots!! thanks for letting me know... what should we do...
Title: Re: Spam Filter for Forum
Post by: getter77 on May 21, 2010, 08:18:36 PM
Well, I and others surely do pop around here often usually.  So while I have no idea how it works, perhaps impart to me or Mario or somebody regularish the power to BAN/delete posts/all that a spambot does?

Seems like that'd be the way to go outside of even more anti-spam countermeasures at registration, whatever those would be.
Title: Re: Spam Filter for Forum
Post by: Perdurabo on May 21, 2010, 08:49:06 PM
Why don't you just simply set up new users to need approval before posting?
Title: Re: Spam Filter for Forum
Post by: Slash on May 22, 2010, 05:36:21 AM
Why don't you just simply set up new users to need approval before posting?

That's how it used to work before, but people complained about it being too cumbersome (you wanted to post and had to wait more than 8 hours some times. )

Title: Re: Spam Filter for Forum
Post by: mariodonick on May 22, 2010, 07:51:29 AM
First, thanks for deleting all that spam shit.

Second, either give somebody the power to delete spam postings, or to approve new users when you're away.
Title: Re: Spam Filter for Forum
Post by: george on May 22, 2010, 04:31:49 PM
agreed, moderating first posts isn't really that nice for a public forum.
Title: Re: Spam Filter for Forum
Post by: Fenrir on May 22, 2010, 05:03:03 PM
I don't think that promoting some moderators would be a problem, but I think Slash has this fairly well handled. It doesn't happen too often, and Slash usually has it cleaned up in a reasonable length of time.
Title: Re: Spam Filter for Forum
Post by: mariodonick on May 22, 2010, 05:32:44 PM
Quote
agreed, moderating first posts isn't really that nice for a public forum.

It's not about moderating first posts, it's about checking new user registrations before they even can post, as done in not-so-few other forums. While some impatient people perhaps wouldn't like it, other people would get the impression that somebody takes care of the quality of this forum.
Title: Re: Spam Filter for Forum
Post by: Slash on June 27, 2010, 02:12:12 PM
I just added a new spam-divert-countermeasure.

Actually, the first countermeasures implemented on the temple were far too naive: they relied on JS validation, easily overrideable by the experienced spambot.

This time, it's different  8)
Title: Re: Spam Filter for Forum
Post by: K.I.L.E.R on July 07, 2010, 10:36:16 AM
I just added a new spam-divert-countermeasure.

Actually, the first countermeasures implemented on the temple were far too naive: they relied on JS validation, easily overrideable by the experienced spambot.

This time, it's different  8)

You used server side validation? ;)
Title: Re: Spam Filter for Forum
Post by: Darren Grey on January 28, 2011, 01:43:28 PM
Reviving the spam topic, I noticed this user online today:

http://roguetemple.com/forums/index.php?action=profile;u=1507

Looking at the profile it's clearly a spambot.  Looking at the members list of people with zero posts and links in their profiles... there seems to be several hundred of these.  Note that they can access e-mail addresses of forum members, increase server traffic, upset Google analytics of the site, whilst also being a general nuisance on the web by hijacking your site to increase the owners' search rankings.  This isn't a problem to be ignored - the ADOM forums have recently been closed to new members due to several thousand of these sorts of bots signing up.

I don't know what spam protection is currently in place, but none are perfect and there needs to be some regular clean-up operations.  Options:

1. Delete all zero posts accounts older than a month, every month.
2. Manually look through every zero posts account to look for links on their profile, and delete obvious spambots.

1 is easyish, but a bit unfair on lurkers.  Still, all they'd have to do to remain lurkers is make 1 legitimate post.  2 is difficult, but if performed monthly isn't too much of a chore.  I'm sure many forum members would be happy to help flag up these sorts of accounts.
Title: Re: Spam Filter for Forum
Post by: Serial Kicked on January 28, 2011, 05:25:16 PM

There's several solutions to deal with spam bots.

- Using ReCaptcha for user registration is usually enough to get rid of 90% (or more) of the spam bots. Very few pass this kind of protection. Usually only those using 'paid' people in poor countries instead of algorithms are successful here. 

- Black list well known spam related IP ranges.

- Forbid users with less than X post to post links on the board.

- Most forum and website systems have relatively well working anti-spam plugins. I'm using Akismet (http://akismet.com/) myself on some of my websites and so far it has been 100% successful. I'm pretty sure they have a plugin for SMF too.