Ya know what? I just got an idea for an enhancement to this mod. It'd take a bit of a colaborative community effort, but man, think of how many of the spammers we could stop!!
Ok, here's the idea. Since spammers like to all come from identical IP blocks and from tons of free mail accounts, why not setup a database of known spammers homes. Say for example, someone comes from gawab.com (that's been a favorite for spammers on my site) and spams your site. You of course ban him and then submit his info (IP and email address) to the master list. After xx number of reported incidents, the user is automatically added to the master list. Then when someone signs up from, or tries to post from said IP, they're immediately stonewalled. More than xx number of IP's from a given IP block (likely a /24 or something similar so that the bans don't become too sweeping) and that whole /24 is banned. For those who have no idea what a /24 is, that's a block of 256 ip's and usually has 255.255.255.0 as the subnet. We could also ban by /26 (128 ip's) to be slightly less sweeping.
Domain's would stay on the list for up to 30 days, then be removed automatically if nobody tried to signup with that domain name in their email. The script could report that an attempt was made to post or signup from said domain and add a counter of sorts to that entry. More than xx number of attempts (post ban) from that domain over a given period of time would keep the domain on the ban list until the number of attempts dropped below a given number.
IP's would be banned for 3-6 months since spammers are less likely to migrated between IP blocks like they are between domains, assuming that the target machine or IP block they're posting from is not a machine or series of machines that have been comprimised for the purpose of just this kinda spamming, or even proxy spamming.
Now obviously the idea is a bit on the rough side, but I thought I'd throw it out there and see what you guys thought of it. From there we could work out the details. By making this a colaborative effort, we could really put a huge dent in the spammer signups and postings.
On a side note however, given what I've seen in PHPbb3, this mod will be moot since member lists are no longer public, so anyone with a PHPbb3 forum won't have spammers signing up with link spam simply because it won't be possible for them to use the board to spam anymore. (two cheers to the dev team for thinking of this! woot!)
- Bringing Linux to the World