|
|
My Nabble is set up as a Membership list. Members have to be approved and are in the "Members" group. Only Members have access to anything - viewing, posting, and replying.
I had been running successfully without any SPAM for well over 2 years. Most of my members interact with Nabble via email. I thought having the various email addresses that must be used to post to the forum via email pretty much keeps SPAM out. However back in late November, the spammers apparently changed their tactic and I started getting SPAM emails. Not a lot, about once every 2-3 weeks. When it happens, we usually get 8-10 messages at once. They're all sent at the exact same time. They're sent from a valid members email address with a link to a php file. They're all replies to old email messages from the forum.
It initially appeared that the spammer has access to the members email. So I would contact the member, let them know their email account has been compromised and ask them to change their email password. This seemed to work for the first member. But I have a second member who this has not worked for. She has changed her email password after each occurrence - and yet we still keep getting SPAM coming from her (it's now happened 4 times from this same user).
At this point I've asked her to set up a new email account and that I won't grant her access again until she does. While this may solve the problem for this user, it won't solve the problem in the future from other members (those who may have clicked on the link from this member and are now compromised themselves).
Any suggestions on how to solve this in the future?
Is there any way to moderate a particular email address when I have a user like this one that appears to have a repeated problem? Or a way to disallow a particular email address to post via email?
Is there any way to automatically "Lock" a topic after a certain amount of time (say 15 day) so that replies can't be made to it? The posts being replied to are usually old, not new topics. I've manually locked the topics that were used to reply to today but looking back, they are not always the same topics that were replied to on the other attacks.
Ideas/Suggestions?
Thanks,
Coleen
|
Locked
