[ALPHA] phpBB3 Block disposable / temporary / trash email

[itzekocke]

Modification Name: Block disposable email
Author: Gerold Setz

Modification Description: This MOD helps to prevent userbase contamination by fake / on-time / disposable email addresses. It uses the webservice at http://www.block-disposable-email.com/ which detects currently > 1.200 trashmail-providers. It is ment as an addition to known captcha services and dns-blacklists. It helps especially to ensure that you can reach your subscribers not only in the first 15 minutes after registration.
Modification Version: 0.0.2

Features: Feature List will follow.

Demo URL: http://www.setz.at/bb/ucp.php?mode=register To run a test you can use the email addresses with the domain "@block.setz.at" (BLOCK response) and "@ok.setz.at" (OK response) or any other dea domains.

Modification Download: Download Version 0.0.3, 2011-04-11

[TrumpX]

phpBB3 gives you the ability to maintain a local blacklist.
What would be the advantage in using a third party blacklist ?

It is also a big privacy issue:
Because you are passing over private data (email adress) to a third party without approval of the user.
(which is also illegal in various countries, e.g. germany)

I don't know if it is you who owns block-disposable-email.com
But the owner could collect all email data and sell them and/or use the email data to send spam
This is a big issue

Thats why I would never use a third party service such like block-disposable-email.com or stopforumspam.com


However if you still want to make a mod you will find useful tools here:
http://www.phpbb.com/mods/modx-tools/creator/
http://www.phpbb.com/mods/umil/create.php
http://www.phpbb.com/mods/mpv/

[Ashley.S.]

this sounds very interesting & incredibly useful, I'll be watching

[DoYouSpeakWak]

Use this with caution. Many databases like this allow users to add domains to be blocked. Some add them just because they dont like the owners or something else.

Just checked with hushmail.com that does not provide disposable email accounts, they were blocked. There may be others.

[bonelifer]

Use this with caution. Many databases like this allow users to add domains to be blocked. Some add them just because they dont like the owners or something else.

Just checked with hushmail.com that does not provide disposable email accounts, they were blocked. There may be others.

From: http://www.hushmail.com/services/hushmail/features/ from the paid accounts:

Unlimited email aliases

Using @nym.hush.com addresses

[itzekocke]

this sounds very interesting & incredibly useful, I'll be watching

Ashley,

I would appreciate any help in MODding. My local PHP code for PHPbb is ready, but I have to develop the MODX. Do you have any spare time?

Gerold

[Ashley.S.]

this sounds very interesting & incredibly useful, I'll be watching

Ashley,

I would appreciate any help in MODding. My local PHP code for PHPbb is ready, but I have to develop the MODX. Do you have any spare time?

Gerold

Nope, Sorry

[itzekocke]

Hi TrumpX,
thanks for your response and questions.

phpBB3 gives you the ability to maintain a local blacklist.
What would be the advantage in using a third party blacklist ?

It is everytime up to date. As most of the professional dea-providers have new domains almost every week it is hard to maintain a local list. That's why I thought It could be useful to have a central database anyone can use. any of course, there are some scripts help finding new dea services.

It is also a big privacy issue:
Because you are passing over private data (email adress) to a third party without approval of the user.
(which is also illegal in various countries, e.g. germany)

Exactly. My service is able to check email addresses as well as domain names. So nobody needs to submit email addresses.

I don't know if it is you who owns block-disposable-email.com
But the owner could collect all email data and sell them and/or use the email data to send spam
This is a big issue

Oh, yes. I provide the service but I do not want to collect and sell email addresses. There would be easier ways to do that than providing a service and developing mods ...

Thats why I would never use a third party service such like block-disposable-email.com or stopforumspam.com

Maybe my answers will revise your opinion -not in general, only for the discussed service.

Best regards,
Gerold

[itzekocke]

Hi,
and thanks for your contribution.

Use this with caution. Many databases like this allow users to add domains to be blocked. Some add them just because they dont like the owners or something else.

I try hard to block only domains that really provides dea services. You are right: some of the services are simply blocking eg *.ru. I don't do it this way.

Mistakes may happen. But I run several processes to limit the number of false positives as well as detecting most of dea domains.

Submissions of users are rechecked manually.

Gerold

[DoYouSpeakWak]

Use this with caution. Many databases like this allow users to add domains to be blocked. Some add them just because they dont like the owners or something else.

Just checked with hushmail.com that does not provide disposable email accounts, they were blocked. There may be others.

From: http://www.hushmail.com/services/hushmail/features/ from the paid accounts:

Unlimited email aliases

Using @nym.hush.com addresses

Sorry, i dont use the paid service. If the author of the site checks every site manually like you did there is no problem. Otherwise any domain can be blacklisted. Didnt find any info on this on the site.

[itzekocke]

Hi,

thanks for the hint.

If the author of the site checks every site manually like you did there is no problem. Didnt find any info on this on the site.

Maybe it is a good idea to describe some basic processes how domains are getting flagged as BLOCK/OK on the website. Will be described here soon: http://www.block-disposable-email.com/faq.php

Gerold

[DoYouSpeakWak]

Hi,

thanks for the hint.

If the author of the site checks every site manually like you did there is no problem. Didnt find any info on this on the site.

Maybe it is a good idea to describe some basic processes how domains are getting flagged as BLOCK/OK on the website. Will be described here soon: http://www.block-disposable-email.com/faq.php

Gerold

Great to hear your involved here.

Also if nym.hush.com is the only domain used for trashmails the rest of them like hushmail.com could be allowed. alot of work if all domains have to be processed like this, thats also why some of these block services block too much. Good to hear there is hope for this service.

[itzekocke]

Also if nym.hush.com is the only domain used for trashmails the rest of them like hushmail.com could be allowed. alot of work if all domains have to be processed like this, thats also why some of these block services block too much. Good to hear there is hope for this service.

I recently created an account at hushmail. It took about 10 seconds - so the website sems to be useful to create disposable emails from my point of view. Additionally they propose email addresses like [email protected] to be even faster in generating mails ...

That's why I block hushmail.com as well as their subdomains.

But I agree with you: It is not a good idea to block too many domain names. I run several processes to check the services automatically.

And everyone is welcome to propose changes as well for blocking as unblocking domains here: http://www.block-disposable-email.com/tester.php

I think the project and the quality will grow as more and more users getting involved. It's not a job for a single person - but I am able to provide the platform.

Gerold

[DoYouSpeakWak]

disposable email vs fast signup. Its gonna be a hard call to make, should a site be on there just because they offer a fast and painless signup process.

Imo disposable should only be sites that advertise with it and/or have a control panel that delibretly helps the user make many email adresses fast and more at the time, incl account freeze after x time, one time usage etc.

[itzekocke]

Hurray,

the first version is ready to test. Would be nice if some of you would try it and give some feedback.

See the post on top for the download link.

Gerold