How do you fight spam?

[juanete]

Hi all.

In my forum I'm getting a lot of spam from an online store

I block users and delete their comments, but it creates another account and again comments day after day.

Also sends emails to registered users from the application Nabble.

I left some comments without deleting (http://foro.ubuntu-guia.com/Spam-enviado-a-la-papelera-td4030742.html), So that you can see them

I've also tried using the "Report Inappropriate Content - spam".

My question is how does the tool Nabble antispam application?

Is there any way to add words to the antispam tool that detects when publishing post and do not let the post?

thanks

Sorry for my English is not very good

[GregChapman]

You say nothing about the permission you grant your users.

Forums work on trust. By default on a Nabble forum "Anyone" may post. That's an open door and will allow spammers in.

Most administrators will only allow "Registered" users to post. Becoming registered cannot be stopped but does put off many spammers as you will be able to trace them.

The next level of protection is to allow only "Members" to post. You have to grant individuals that status. It is not automatic.

Read about this at my post here:
http://support.nabble.com/Moderating-free-forum-td6873076.html#a6873871

[juanete]

Hi, thanks for answering

I know how to manage permissions

The forum has subforums different and depending on what they are for anyone, registred, members, ...

But this is not the case. The Spamer never write anonymously. He always register with an email and write the same 4 or 5 times on different topics

We see the topics and blocked his account and he can no longer write. But he creates another account with another email and again do the same.

We've had other times of spammers and blocking the accounts have been tired.

But this is becoming a nightmare. Write with 2 accounts in minutes. Write 4 or 5 times the same message per account. What makes 2 or more times a day. Every day of the week

Being registered also sends spam to other registered users by applying for emailing Nabble

He uses a different url each batch of reviews (I think random letters and numbers), but all are redirected to the same Web

The grammar of comments makes no sense and seems also written randomly

Nabble, do not have any anti-spam tool?

Can not i do something so that at least not repeat the same message 5 times in different post in a few minutes?

Can i remove the option to send e-mails to registered users and leave it alone for the group of administrators?

thanks

Sorry for my English is not very good

[Mencey Melgar]

Hola Juanete, con lo de Anti-spam tool no puedo ayudarte, pero si con lo de enviar un email(te comento que si lo ocultas para todos los grupos excepto el de administrador, no te servira de mucho puesto que el administrador puede ver el email sin tener que usar el "send an email"). De todas formas, si quieres cambiarlo como dices, aqui te dejo como hacerlo:
Busca el macro profile_header. Ahi podras ver esta parte:

<n.if.local_user.is_banned>
                        <then>
                            <n.local_user.banned_label/>
                        </then>
                        <else>
                            <n.local_user.registration_label/>
                            <n.local_user.list_current_groups/>
                            <n.if.not.local_user.is_deactivated>
                                <then.local_user.send_email_to_user_link/>
                            </n.if.not.local_user.is_deactivated>
                        </else>
                    </n.if.local_user.is_banned>

Cambialo y tendria que aparecer asi:

<n.if.visitor.is_site_admin>
                        <then>
                            <n.if.local_user.is_banned>
                        <then>
                            <n.local_user.banned_label/>
                        </then>
                        <else>
                            <n.local_user.registration_label/>
                            <n.local_user.list_current_groups/>
                            <n.if.not.local_user.is_deactivated>
                                <then.local_user.send_email_to_user_link/>
                            </n.if.not.local_user.is_deactivated>
                        </else>
                    </n.if.local_user.is_banned>
                        </then>
                        <else>
<n.if.local_user.is_banned>
                        <then>
                            <n.local_user.banned_label/>
                        </then>
                        <else>
                            <n.local_user.registration_label/>
                            <n.local_user.list_current_groups/>
                        </else>
                    </n.if.local_user.is_banned>
                        </else>
                    </n.if.visitor.is_site_admin>

La linea de <n.if.visitor.is_site_admin> y </n.if.visitor.is_site_admin> puedes cambiarla para permitir a un determinado grupo enviar el correo:
en vez de este <n.if.visitor.is_site_admin> ponlo asi:

<n.if.visitor.is_in_group group='aqui escribes tu grupo'>

aqui iria el resto y tendrias que cerrarlo con:

</n.if.visitor.is_in_group>

Saludos :3

[GregChapman]

Hi Juanette,

juanete wrote

The forum has subforums different and depending on what they are for anyone, registred, members, ...

But this is not the case. The Spamer never write anonymously. He always register with an email and write the same 4 or 5 times on different topics

Start a membership system.

Set permissions so that only "Members" may post. Only accept people as members who appear genuine contributors to your forum.

If necessary, create a "newcomers" or "general" area where people are have to post useful content several times, before you grant them "Member" status and allow them to post in the specialist sub-forums - where your visitors know all the really worthwhile content is. Make sure only the most useful/helpful posters become members.

Fundamentally forums work on trust - users must gain your trust from good contributions before they go to the next level and get more privileges. A forum is not like mail list where anyone can join but the owner can remove any message before it gets distributed. This is the same for any forum. It is not a "Nabble" problem.

We see the topics and blocked his account and he can no longer write. But he creates another account with another email and again do the same.

We've had other times of spammers and blocking the accounts have been tired.

As Nabble tells you blocking is inefficient.

The method of control on a forum is not to let anyone in (You only talk of registration, That is automatic and you are have no control). You must institute "Members".

Nabble, do not have any anti-spam tool?

Yes! Only allow "Members" to post. Only give that status to those who you trust. It is the same with any forum. If you want to control individual posts start a mail list and stop using a forum.

[Pedro]

I guess you have already deleted this spam. Please, let me see it if it happen again.

[juanete]

Hola Louk, gracias por el dato. Lo pondré en práctica.
Edito: ¿cómo lo haría para varios grupos?. He probado con:

<n.if.visitor.is_in_group group='Administrators, Members'>

Pero no funciona (se oculta a todos). Saludos

Hi GregChapman, I understand what the group members. It is a choice I leave as a last resort. Let me explain:
The Forum is to help users of GNU / Linux and Free Software
Users write queries basically. I have a subforum as presentation book. I could do that alone might write there and then add them to the group members, but with only one comment appearing, the spammer could fool me.
In addition, there also he could write your Spam in presentation book.

Hi Pedro, I have not deleted the messages from these two days. The posts have moved to a subforum called "Papelera (Bin)". You can see them in:
http://foro.ubuntu-guia.com/Spam-enviado-a-la-papelera-td4030742.html
As you can see today has written 14 messages to an account and 3 messages with another account. a lot
Forum users are complaining that they are getting a lot of spam from the forum in your emails:
http://foro.ubuntu-guia.com/Spam-enviado-a-la-papelera-td4030742.html
I'ma get suggesting Look to disable the option "send an email". Let's see if at least stop sending emails.
A question Peter, is there any way to detect that a message has been repeated in another post and not allow its publication?. At least that will have to modify their messages and entertain rather than copying and pasting to post.

Thank you all for answering

[juanete]

Hi Pedro,

I think the spammer uses a robot or bot and decrypts the captcha.

I've been thinking and I think we could try to add in the registration page, a section similar to the following:

-----------------------------------------------------------------------------

Are you human?:

No

Yes

--------------------------------------------------------------------------

Code:

	<table>
		<tr>
			<td>Are you human?:<td>
			<td>
				No <input type="checkbox" name="human" value="no-human" checked="checked" />
			</td>
			<td>
				Yes <input type="checkbox" name="human" value="yes-human" />
			</td>
		</tr>
	</table>

Leaving the box checked by default "No"

And make that:

- If the value of human = no-human, then open an error page
- If the value of human = yes-human, then proceed with registration

I do not know if I have explained well with my English

This would hinder the robot or bot

I know that the macro is "registration_fields"

But I do not know how with Naml.

Please can you tell me how?, thanks

[Pedro]

Did you try the group/permissions solution?

[juanete]

Hi, Pedro, I have not tried yet

The forum has 2115 registered users and add them to the group members have a lot of work and takes time.

We will do it gradually. For if ever we were needed. Surely someday will be really necessary, since the forum is growing more and more. So gradually we will get the job done

But I do not like the idea of doing this. Let me explain:

Above all, I like having the open forum. I am a big fan of freedom and do that goes against my principles. I do not like the idea of ​​restricting freedom of expression. Although it involves more work for me

I prefer to look for alternatives and if I do not find alternatives, I will have to keep holding the spammer.

thanks for answering

[GregChapman]

juanete wrote

Hi, Pedro, I have not tried yet

The forum has 2115 registered users and add them to the group members have a lot of work and takes time.
...
Above all, I like having the open forum. I am a big fan of freedom and do that goes against my principles. I do not like the idea of ​​restricting freedom of expression. Although it involves more work for me

It seems that you do not understand the basic principles of a forum and how it differs from a mail list.

In a mail list anyone can subscribe - even with a false address, so they receive nothing but can post. That is why you need a method of moderating individual posts sent to the list. As list owner you can then delete any individual message.

However, with a forum everything is done on trust. If you cannot trust your users (and it seems you can't) you must implement a membership system. Registration does nothing to protect your users as it is an automated system which the evil can abuse.

While Nabble promotes itself as offering mail list facilities, in reality it is still fundamentally based on forum principles- with the additional facility of allowing users to post messages via email. With a forum, once you grant someone permission to post you cannot stop them posting anything they want.

You need to warn your users that because of abuse by certain users you now need to implement a membership system and users now require specific permission to post, registration in itself is not enough. Then, as each non-member tries to post they will have to request permission, you can then grant or remove membership, but you still can't stop people posting anything they want while a Member. All you can do is stop them posting in future, by withdrawing membership.

[juanete]

I understand that the forums are based on trust.

Other forums have anti-spam tools. As an example, there PhpBB mods to combat spam (censorship of words, ...).

I just wanted to know if I could do something more in Nabble.

I understand that the only way is to add registered users to the group members.

Thanks for everything

[mywaytoo]

I have recently been getting spam.

My members have to register and be approved by me before they can post on the forum. But this is still of concern if they are listed on the forum because other members may decide to email them, or I may forget that they are spammers and email them myself. So I ban them ASAP and, of course they come back in a similarly recognisable persona.

I check and enter their details on the website stopforumspam ... whether it does any good whatsoever I do not know, but I feel better anyway !

On that forum they do discuss methods of stopping spam, but I can't follow it. Perhaps Nabble could help ???

[Mencey Melgar]

Hey!

What do you want is allow the send email feature only for your members group? I explained to juanete 9 posts above how to do this, but it's in spanish :p. I can traduce it for you if you want

[mywaytoo]

No, that's not enough because it means that other people, including me, can still send them emails thereby exposing more email addresses to them.

[Mencey Melgar]

Then what do you want? disable this button?

[mywaytoo]

NABBLE... spotforumspam.com need the IP address of spammers in order to enter them on their database...

Is there any way that you can supply them to us ? Perhaps not for every forum ID, but for specific requests ?

[jsmoraes]

About your code Louk, I used few  lines to do it. And, as in my forum Administrators are in Members group, I didn't need of lines to n.if.vistor.is_site_admin.
note:
It is necessary to be in Members group in my forum. The spammers, as registered, have only rights to see, alike anonymous

                   <n.if.local_user.is_banned>
                        <then>
                            <n.local_user.banned_label/>
                        </then>
                        <else>
                            <n.local_user.registration_label/>
                            <n.local_user.list_current_groups/>

                            <n.if.visitor.is_site_admin>
                                  <then.local_user.send_email_to_user_link/>
                            </n.if.visitor.is_site_admin>
                            <n.if.visitor.is_in_group group='Members'>
                                <then.local_user.send_email_to_user_link/>
                            </n.if.visitor.is_in_group>

                        </else>
                    </n.if.local_user.is_banned>

It is possible use these lines, too:

    <n.if>
        <condition.either>
            <condition1.visitor.is_site_admin/>
            <condition2.visitor.is_in_group group='Members'/>
        </condition.either>
        <then.local_user.send_email_to_user_link/>
    </n.if>