Re: Getting bombed with spam. (Helpers will be rewarded with
There's a several things you can do, I'm not entirely sure of all the possibilities with phpBB, since I use MyBB, but I hear their customizations are a lot more powerful & plausible.
So I would;
- Find a URL Limit script/plugin.
This script should block all users from posting URLs unless they have a specific amount of posts already. Commonly spambots post links, this can help stop them at their tracks.
- Find a PM Limit script/plugin.
Get a PM limit one too, in the event that it's one that spams via PM.
- Get StopForumSpam script/plugin.
This script checks with the StopForumSpam database, if there's a match, the registration would be blocked.
- Registration Security Question.
Of course, you need one of these. But don't make the questions so easy like a yes/no answer. Make it more complex. "What color does blue and yellow make?"
- Run the IP address of the spambot under a WHOIS site, then block it via HTACCESS.
In my experience, I found that spambots commonly use rented servers, VPS, VPNs, Dedicated. So I research out where the IP is coming from.
If the IP belongs to a webhosting or VPN service.
I block the entire range that belongs to that webhosting/VPN service.
- ReCaptcha
Of course you need a Captcha, but I assume all forums do by now.
Normally, under a WHOIS page, it would tell you range that belongs to that server.
For example:
111.222.333.444 is the IP Address.
Range: 111.100.0.0 - 111.222.500.500
I would run a second & third WHOIS to make sure 111.100.0.0 & 111.222.500.500 belongs to that webhosting/VPN.
Because just blocking 111.0.0.0 to 111.500.500.500 for example, would mistakenly block legit users.
Servers are assigned a specific range of IP addresses, sometimes they share similar number sets as legit users.
Here's more info about how to use HTACCESS:
http://www.javascriptkit.com/howto/htaccess5.shtml
The IP addresses need to be in CIDR form, sometimes the WHOIS page would tell you, if it doesn't you can use this page to convert it:
http://ip2cidr.com/
Just enter the IPs, and it'll generate how it should look like.
So in your HTACCESS, it should look something like this: deny from 111.100.0.0/23
And finally, I would block the weird domains they register with.
You have to look for common trends.
I wouldn't allow for any emails that contains .co.cc for example.
Of course you have to keep allowing yahoo, gmail, hotmail, etc
But there are a lot of uncommon ones too that you can block.
I hope all that helps.
It most certainly has helped stop all the spam for me, so far.
Maybe once a year one or two slips in. But mine are doing pretty good since.
