John Robi wrote: ↑
Sat Apr 20, 2019 7:57 am
spammers programs insert only 8 to 14 characters in the message body
Certainly hasn't been my experience here either, for what it's worth. You couldn't even fit the URL a spammer wants you to follow within 20 characters; let alone the brief to lengthy description they include trying to entice you to click on that link.
We finally implemented the ContactAdmin extension here this week, after a review of the phpBB error log showed the amount of Contact Us spam was more than twice what we assumed. Our email service provider's SMTP server had simply been rejecting more than half of the "successful" spam attempts, and the error log was filled with SMTP error traces of the server reporting "Message rejected for spam or virus content"
So, "great" that our mail provider had been preventing us from ever seeing these messages, but "not so great" that so much of the "email being sent by phpBB is flagged as spam." For that reason, in addition to now having ContactAdmin put up the reCAPTCHA v2 challenge, I also set it to post the contact messages into a forum, rather than via SMTP. So that even if/when they do get through, to our SMTP server it won't look like phpBB or our hosting account is the generator and sender of the spam these idiots are trying to send.