Split from spam topic [*Read The First Post*]

This is an archive of the phpBB 2.0.x support forum. Support for phpBB2 has now ended.
Forum rules
Following phpBB2's EoL, this forum is now archived for reference purposes only.
Please see the following announcement for more information: viewtopic.php?f=14&t=1385785
User avatar
ric323
Former Team Member
Posts: 22909
Joined: Tue Feb 06, 2007 12:33 am
Location: Melbourne, Australia
Name: Ric
Contact:

Re: Preventing SPAM - Bots and Humans

Post by ric323 »

Techie-Micheal wrote:
alvo wrote:but keeping in place a second ineffective measure for the reason isn't a very reasonable thing to do
Take note of what I said about changing it ;)
Which is equivalent to saying "turn off the standard Visual Confirmation, and install a better one". The OP just asked if it was sensible to turn off the standard VC.
The Knowledge Base contains solutions to many common problems!
How to fix "Doesn't have a default value" and "Incorrect string value: xxx for column 'post_text' " errors.
How to do a clean re-install of the latest phpBB3 version.
Problems with permissions? Read phpBB3 Permissions

User avatar
Techie-Micheal
Security Consultant
Posts: 19511
Joined: Sun Oct 14, 2001 12:11 am
Location: In your servers

Re: Preventing SPAM - Bots and Humans

Post by Techie-Micheal »

No, he asked if he should disable visual confirmation, which I took to mean not use one at all.
im unsure whether i should disable the visual Confirmation
Proven Offensive Security Expertise. OSCP - GXPN

mike_koval92
Registered User
Posts: 4
Joined: Tue Jun 12, 2007 3:24 pm

Re: Preventing SPAM - Bots and Humans

Post by mike_koval92 »

I have installed a few of the mods to no avail...still get porn posts like its my job, so the only thing that ever works is admin approval

User avatar
Jim_UK
Former Team Member
Posts: 18478
Joined: Tue Oct 12, 2004 5:36 pm
Location: Darwen N.West UK

Re: Preventing SPAM - Bots and Humans

Post by Jim_UK »

mike_koval92 wrote:I have installed a few of the mods to no avail...still get porn posts like its my job, so the only thing that ever works is admin approval
I take it then that the posts are humans as stopping the bots is a 5 minute job. My experience is that the vast majority are bots - in fact I have only had one spammer register and post in the last 12 months and not a single bot get through. I have installed the VIP mod on 5 boards and none have had a single bot get through in over 6 months. Have you installed that particular mod?

Jim
The truth is out there.
Unfortunately they will not let you anywhere near it!

mike_koval92
Registered User
Posts: 4
Joined: Tue Jun 12, 2007 3:24 pm

Re: Preventing SPAM - Bots and Humans

Post by mike_koval92 »

I don't think that i have installed the vip mod. what does it do? does it make the bot "think" to answer a question? cause i tried the textual confirm and that worked for about a minute

User avatar
Marshalrusty
Project Manager
Project Manager
Posts: 29253
Joined: Mon Nov 22, 2004 10:45 pm
Location: New York City
Name: Yuriy Rusko
Contact:

Re: Preventing SPAM - Bots and Humans

Post by Marshalrusty »

mike_koval92 wrote:I don't think that i have installed the vip mod. what does it do? does it make the bot "think" to answer a question? cause i tried the textual confirm and that worked for about a minute
You can find the RAC MOD (an updated version of the VIP MOD) here: http://www.phpbb.com/community/viewtopi ... 6&t=552845

It allows you to set a code that users will need to enter to register. You can place this code anywhere on your site and tell users where to find it on the registration page. If bots learn the code, just change it.

As for your lack of success with the textual confirmation MOD, did you take the time to configure it or did you just use all default settings/questions?
Have comments/praise/complaints/suggestions? Please feel free to PM me.

Need private help? Hire me for all your phpBB and web development needs

jalaln
Registered User
Posts: 1076
Joined: Tue Jul 05, 2005 5:05 am

Re: Preventing SPAM - Bots and Humans [*Read the first post!*]

Post by jalaln »

Hello everyone,

I have created a MOD that blocks the registration from timezone GMT-12 that is used by almost all spambots.

I've been using this MOD for 5 days and never even had one spambot :). Before, spambots were increasing and posting.

Check it out :arrow: http://www.phpbb.com/community/viewtopi ... 6&t=555959.
No more spambots for phpBB2 and phpBB3.

User avatar
Marshalrusty
Project Manager
Project Manager
Posts: 29253
Joined: Mon Nov 22, 2004 10:45 pm
Location: New York City
Name: Yuriy Rusko
Contact:

Re: Preventing SPAM - Bots and Humans [*Read the first post!*]

Post by Marshalrusty »

I just checked my various honeypots and by far not all spam bots use GMT -12. In fact, quite a few seem to randomly select a value for this setting

The MOD, therefore, will not work as well as some of the other choices available.
Have comments/praise/complaints/suggestions? Please feel free to PM me.

Need private help? Hire me for all your phpBB and web development needs

User avatar
TheInquistor
Registered User
Posts: 304
Joined: Tue Jun 19, 2007 11:36 pm

Re: Preventing SPAM - Bots and Humans [*Read the first post!*]

Post by TheInquistor »

WoW...56 pages...im sorry but i really dont have time to read through all off the posts. Much of it doesnt make sense to me either :oops:

But...I am an admin on our forums we use for a rpg that we play. As of lately, we are getting slammed by bots. Most of them make the accounts but never activate them. I am the one who checks all accounts and banns the email domains. But alot still get thru and i swear the ones that get through are porn-bots. Please relize that we have an age limit, but that limit is 13 years old...and porn is not something i want found on our boards. I am on these boards at lease 12-18 hours a day. I drive a truck and its eaasy to monitor it. but still. when you create an accopunt you must agree that you are over 13 to join and that alone should make those know there are underage people on our boards.

I look at the Visual Code thingy and think that anyone can get thru it. But the one i had to read when i registered here was MUCH better. How can i maybe get a better code thingy?

we put a random question on our boards that is on their twice and the options for the answer are backwards the second time. and they still get thru.

I am really looking for some help and a point to where to slam the door on them. Perhaps the VIP code from the first page could work since the forums are set to a server for the Neverwinter Nights server we play. But i am not the best person on forums. Actually this is my first forum and i became an admin and am still woking to learn everything.

Please, any help would be accepted
[noob]ME[/noob]

User avatar
ric323
Former Team Member
Posts: 22909
Joined: Tue Feb 06, 2007 12:33 am
Location: Melbourne, Australia
Name: Ric
Contact:

Re: Preventing SPAM - Bots and Humans [*Read the first post!*]

Post by ric323 »

TheInquistor wrote:WoW...56 pages...im sorry but i really dont have time to read through all off the posts. Much of it doesnt make sense to me either :oops:
As the title says "Preventing SPAM - Bots and Humans [*Read the first post!*]"
Most of what you need to read is in the very first post.
but still. when you create an accopunt you must agree that you are over 13 to join and that alone should make those know there are underage people on our boards.
These things are being posted by automated programs, they don't even see your agreement text.
I look at the Visual Code thingy and think that anyone can get thru it. But the one i had to read when i registered here was MUCH better. How can i maybe get a better code thingy?
That is the whole point of the first post, it tells you about the better options.
we put a random question on our boards that is on their twice and the options for the answer are backwards the second time. and they still get thru.
How did you do this? If it is required, it should top spambots dead. That is what the "Textual Confirmation", "Security Question" and "RAC" mods do, and they are usually 100% successful at stopping bots.
I am really looking for some help and a point to where to slam the door on them. Perhaps the VIP code from the first page could work since the forums are set to a server for the Neverwinter Nights server we play. But i am not the best person on forums. Actually this is my first forum and i became an admin and am still woking to learn everything.
The "VIP code" mod has now evolved into the "RAC" mod. It is still #22 in that list, and is very easy to install.
The Knowledge Base contains solutions to many common problems!
How to fix "Doesn't have a default value" and "Incorrect string value: xxx for column 'post_text' " errors.
How to do a clean re-install of the latest phpBB3 version.
Problems with permissions? Read phpBB3 Permissions

User avatar
TheInquistor
Registered User
Posts: 304
Joined: Tue Jun 19, 2007 11:36 pm

Re: Preventing SPAM - Bots and Humans [*Read the first post!*]

Post by TheInquistor »

the question varies but here is an idea

Monks hve to be......Lawful . Neutral . Chaotic . Stupid
Stupid . Chaotic . Neutral . Lawful

now you have to pick the same right answer on both lines. But still i delete 5-10 account a day with a weblink in the account profile to a porn page

i will bring in my senior admin tho to check the MOD you suggested
[noob]ME[/noob]

User avatar
ric323
Former Team Member
Posts: 22909
Joined: Tue Feb 06, 2007 12:33 am
Location: Melbourne, Australia
Name: Ric
Contact:

Re: Preventing SPAM - Bots and Humans [*Read the first post!*]

Post by ric323 »

TheInquistor wrote:the question varies but here is an idea

Monks hve to be......Lawful . Neutral . Chaotic . Stupid
Stupid . Chaotic . Neutral . Lawful
...
I was asking how you have added this question to the registration procedure.
The bots skip the registration agreement page, and go straight to the profile page to fetch the Visual confirmation image, then post the results directly to your forum.
The mods which work stop this by adding a required field which the bots don't supply.
You could use the "Textual Confirmation" mod to ask exactly these questions, although it would randomly ask one or the other.
The Knowledge Base contains solutions to many common problems!
How to fix "Doesn't have a default value" and "Incorrect string value: xxx for column 'post_text' " errors.
How to do a clean re-install of the latest phpBB3 version.
Problems with permissions? Read phpBB3 Permissions

User avatar
Marshalrusty
Project Manager
Project Manager
Posts: 29253
Joined: Mon Nov 22, 2004 10:45 pm
Location: New York City
Name: Yuriy Rusko
Contact:

Re: Split from spam topic [*Read The First Post*]

Post by Marshalrusty »

This is a split from the first version of "Preventing SPAM - Bots and Humans". Please see the new version of the topic here: http://www.phpbb.com/community/viewtopi ... 1&t=427852
Have comments/praise/complaints/suggestions? Please feel free to PM me.

Need private help? Hire me for all your phpBB and web development needs

Locked

Return to “2.0.x Support Forum”