1 Topic by cy

  • cy
  • Member
  • Offline
  • Registered: 2011-03-13
  • Posts: 12

Topic: Spamprevention does not work

Hi all,

I have updated to 1.3.4 and enabled the bot questions and the captcha. But still some spammers register for the board - all 20 minutes another one. Its done automatically. I am curious. It seems the captcha/question stuff simply does not work and they use another hole in the board.

At least it seems the most spammer do not post b/c I enabled captach on login. Looks like at least this works.

So anybody know about this security bug in punBB? Is it under investigation?

And no, approval extension will not work for me - I would have to approve hundrets of messages each day.

And no, I don't believe its a human spammer - its going on for the same time pattern for several days now.

Please help!

Thanks
Cy

  • From: Ukraine
  • Registered: 2008-10-31
  • Posts: 762

Re: Spamprevention does not work

cy, try http://punbb.informer.com/forums/viewtopic.php?id=23957

3 Reply by cy

  • cy
  • Member
  • Offline
  • Registered: 2011-03-13
  • Posts: 12

Re: Spamprevention does not work

Thanks, I have installed it and give it a try.

Is there a specfic reason why I should disable the Captcha? I mean, its not working, but...

  • From: Ukraine
  • Registered: 2008-10-31
  • Posts: 762

Re: Spamprevention does not work

No, just only becouse its not working. No other reason.
Im want to be shure that`s my extensions blocks spamers, not Captcha.

5 Reply by cy

  • cy
  • Member
  • Offline
  • Registered: 2011-03-13
  • Posts: 12

Re: Spamprevention does not work

OK. I have disabled them for now and will give oyu feedback tomorrow. If there are no new spammers I count it as a success. Anyway, thanks very much guy.

On the captcha thing: I am very curious why there is no activity on this issue from the core crew. I have updated from 1.2.x b/c of this yesterday, and 1.3.x didn't solve it. whats wrong.

Spam prevention is a core feature in every board!

  • From: Ukraine
  • Registered: 2008-10-31
  • Posts: 762

Re: Spamprevention does not work

PunBB moves all features in outside core - in extensions.
Please, check fancy_stop_spam settings - its beta version, i have reported that on some installation not setup default settings - read all messages http://punbb.informer.com/forums/viewtopic.php?id=23957

7 Reply by cy

  • cy
  • Member
  • Offline
  • Registered: 2011-03-13
  • Posts: 12

Re: Spamprevention does not work

I read the whole thread, everything is installed as you suggested (and was so by default)

8 Reply by cy

  • cy
  • Member
  • Offline
  • Registered: 2011-03-13
  • Posts: 12

Re: Spamprevention does not work

I got a new registration 12 minutes after I installed your plugin - seems its not working 100%.
If you want to take a look, its: http://www.mortiis.com/forums

  • From: Ukraine
  • Registered: 2008-10-31
  • Posts: 762

Re: Spamprevention does not work

Ok, turn on all in register section

Register form
   Enable honeypot protection
   Enable timeout protection
   Enable timezone protection (UTC−12:00)

10 Reply by cy

  • cy
  • Member
  • Offline
  • Registered: 2011-03-13
  • Posts: 12

Re: Spamprevention does not work

OK enabled at 18:48

At least the situation has become better. Usually I have got 2 or 3 registrations more.

Will come back if something happens

  • From: Ukraine
  • Registered: 2008-10-31
  • Posts: 762

Re: Spamprevention does not work

On my test forum i have 200 bots per day - and 0 after extensions activated.
Any way - im not planned to be 100% effective - its impossible if u cares about users and wont make register process much harder for it. But i planned block at least 90% bots and make harder to mass flooding other 10% of bots.

12 Reply by cy

  • cy
  • Member
  • Offline
  • Registered: 2011-03-13
  • Posts: 12

Re: Spamprevention does not work

Strange - I got one new.

But i see it has significantly increased my life.

  • From: Coalmont, BC, Canada
  • Registered: 2010-04-15
  • Posts: 129

Re: Spamprevention does not work

I've had it on for about 12 hours now and not one single spam yet. That's pretty good! I should have had about 50 unverified users by now. I may even be able to disable the e-mail verification if this is going to be that good. smile

Ole Juul's Website

14 Reply by cy

  • cy
  • Member
  • Offline
  • Registered: 2011-03-13
  • Posts: 12

Re: Spamprevention does not work

I have 14 spam registrations.

It should have been 80 or so. In other words, my situation has increased, but not solved.

I checked out my servers log. The following log file appears to be a spam attempt without success. 

77.70.41.8 - - [14/Mar/2011:00:38:51 -0400] "GET /forums/index.php HTTP/1.0" 200 13867 www.m.c "http://www.m.com/forums/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 4.0) Opera 7.0 [en]" "-"
77.70.41.8 - - [14/Mar/2011:00:38:52 -0400] "GET /forums/register.php HTTP/1.0" 200 6586 m.com "http://m.com/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 4.0) Opera 7.0 [en]" "-"
77.70.41.8 - - [14/Mar/2011:00:38:53 -0400] "POST /forums/register.php HTTP/1.0" 200 6303 m.com "http://m.com/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 4.0) Opera 7.0 [en]" "-"
77.70.41.8 - - [14/Mar/2011:00:38:54 -0400] "POST /forums/register.php HTTP/1.0" 200 6586 m.com "http://m.com/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 4.0) Opera 7.0 [en]" "-"
77.70.41.8 - - [14/Mar/2011:00:38:55 -0400] "POST /forums/register.php HTTP/1.0" 200 6303 m.com "http://m.com/forums/register.php" "Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 4.0) Opera 7.0 [en]" "-"
77.70.41.8 - - [14/Mar/2011:00:38:56 -0400] "GET /forums/login.php HTTP/1.0" 200 7364 m.com "http://m.com/forums/login.php" "Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 4.0) Opera 7.0 [en]" "-"
77.70.41.8 - - [14/Mar/2011:00:38:57 -0400] "POST /forums/login.php HTTP/1.0" 200 7651 m.com "http://m.com/forums/login.php" "Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 4.0) Opera 7.0 [en]" "-"
77.70.41.8 - - [14/Mar/2011:00:38:58 -0400] "GET /forums/index.php HTTP/1.0" 200 13
  • From: Ukraine
  • Registered: 2008-10-31
  • Posts: 762

Re: Spamprevention does not work

cy, you shure that is bots?

Anyway, i working for updating extensions in way adding more checks.

16 Reply by cy

  • cy
  • Member
  • Offline
  • Registered: 2011-03-13
  • Posts: 12

Re: Spamprevention does not work

yes I am sure - sorry to say.
Meanwhile spam bots have learned the new way to enter and do their 20-minute-registration job again.

I hate these fuckers (spammers of course)

  • From: Ukraine
  • Registered: 2008-10-31
  • Posts: 762

Re: Spamprevention does not work

I need to known all data that bot submit in register form.
In my test forum i`m use little modification register.php and logs all activity on register, except passwords and emails.
Its not extensions o part of extensions - just 10 string of code, pasted in php.

18 Reply by cy

  • cy
  • Member
  • Offline
  • Registered: 2011-03-13
  • Posts: 12

Re: Spamprevention does not work

OK, can you paste me the code + location in this forum?
I can install it and will give you feedback with details

Cheers

  • From: Ukraine
  • Registered: 2008-10-31
  • Posts: 762

Re: Spamprevention does not work

I send instructions on email.

20 Reply by cy

  • cy
  • Member
  • Offline
  • Registered: 2011-03-13
  • Posts: 12

Re: Spamprevention does not work

I have installed everything and sent you login data by mail. Thanks so far - lets see what the outcome is.

  • Registered: 2011-04-14
  • Posts: 1

Re: Spamprevention does not work

can you suggest me another spam protector ?

  • From: Ukraine
  • Registered: 2008-10-31
  • Posts: 762

Re: Spamprevention does not work

Use http://punbb.informer.com/forums/viewtopic.php?id=23957
It work very good.