Go to main content

Textpattern CMS support forum

You are not logged in. Register | Login | Help

#13 2007-11-28 12:35:06

net-carver
Archived Plugin Author
Registered: 2006-03-08
Posts: 1,648

Re: spam

Colak

Hi, yes, I’ve just updated my .htaccess file using one of those methods. Will clear out my logs now and wait to see what happens over the next few days. Thank you.

Robert

Just wondering if your example was missing an ‘order’ line before the ‘deny from…’ part?


Steve

Offline

#14 2007-11-28 17:14:23

zero
Member
From: Lancashire
Registered: 2004-04-19
Posts: 1,470
Website

Re: spam

I’ve not had any of those on any of my sites, but found this today:
http://akira-lane.linen-bedding.info/akira-lane-pantyhose-free.html

What I really enjoy about spam is when you see them desperately trying to break the comments preview and not succeeding. Very satisfying!


BB6 Band My band
Gud One My blog

Offline

#15 2007-11-29 09:42:13

net-carver
Archived Plugin Author
Registered: 2006-03-08
Posts: 1,648

Re: spam

zero

yes, I’m getting some like that — but there I have loads of others too, usually with hyphenated domain names. I’d really like to get wet’s SetEnvIf examples working instead of, or as well as, using extra mod_rewrite rules (which I gleaned from colak’s post above).

Whilst it’s nice to see failed attempts to spam your comment forms I’d also like to see bandwidth preserved for legit visits. Oooh, and not having to wade through a swamp of disgustingly suggestive referer entries in my logs would be very, very nice too.

Just wondering if there is scope for a referer-spam blocking TxP plugin (if there isn’t one already.)

Last edited by net-carver (2007-11-29 09:42:33)


Steve

Offline

#16 2007-11-29 09:52:23

net-carver
Archived Plugin Author
Registered: 2006-03-08
Posts: 1,648

Re: spam

If anyone’s interested, here’s a huge .htaccess example


Steve

Offline

#17 2007-11-29 09:59:10

colak
Admin
From: Cyprus
Registered: 2004-11-20
Posts: 9,090
Website GitHub Mastodon Twitter

Re: spam

net-carver wrote:

Just wondering if there is scope for a referer-spam blocking TxP plugin (if there isn’t one already.)

I think that there was a request/wish like that before and I seem to remember that it was pulled back because of the complexity (or possibly its impossibility). Checking google with “block referrers with php” returns no results…


Yiannis
——————————
NeMe | hblack.art | EMAP | A Sea change | Toolkit of Care
I do my best editing after I click on the submit button.

Offline

#18 2007-11-29 10:15:13

net-carver
Archived Plugin Author
Registered: 2006-03-08
Posts: 1,648

Re: spam

colak

Here is an example php referer trap. Scroll past the .htaccess rewrite rules to see it.

That code’s meant to go on a custom 403 page to tarpit the referer. Not tried this yet.


Steve

Offline

#19 2007-11-29 12:48:35

zero
Member
From: Lancashire
Registered: 2004-04-19
Posts: 1,470
Website

Re: spam

From my experience, if you ignore it, it will go away.

I’ve found that the higher the Page Rank, the more attempts there are to leave comment spam. When they discover it’s not working, they swamp me with referrer spam. As long as I don’t click on any of those, it goes away in a few days. After that I get infrequent attempts at comment or referrer spam.

I have one PR5 site that I only upgraded to 4.0.5 last week and had a fresh set of attacks but it is declining back to normal levels now – ie under 10 a day.


BB6 Band My band
Gud One My blog

Offline

#20 2007-11-29 13:14:19

net-carver
Archived Plugin Author
Registered: 2006-03-08
Posts: 1,648

Re: spam

zero

Thanks for the feedback. I’ve put some blocks on certain referers now anyway.


Steve

Offline

#21 2007-11-29 15:02:34

colak
Admin
From: Cyprus
Registered: 2004-11-20
Posts: 9,090
Website GitHub Mastodon Twitter

Re: spam

net-carver wrote:

Here is an example php referer trap. Scroll past the .htaccess rewrite rules to see it.

That code’s meant to go on a custom 403 page to tarpit the referer. Not tried this yet.

What the example seems to be doing is that it just slows down the redirection page (403.php). Basically the php is just there for annoyance rather than blocking. Further google search revealed at least one possible php solution.


Yiannis
——————————
NeMe | hblack.art | EMAP | A Sea change | Toolkit of Care
I do my best editing after I click on the submit button.

Offline

#22 2007-11-29 18:16:21

net-carver
Archived Plugin Author
Registered: 2006-03-08
Posts: 1,648

Re: spam

All

I’ve got a first-cut TXP referer checking plugin working on my local setup, just for those folks who don’t like messing with their .htaccess settings. Needs some more work but it’s late here now.

colak wrote:

What the example seems to be doing is that it just slows down the redirection page (403.php)

Yes, that’s right. It’s a “tarpit” — meant to slow the spam referer down (if they bother waiting for the response at all.)

Further google search revealed at least one possible php solution.

Thanks, that looks interesting.


Steve

Offline

#23 2007-11-30 05:47:08

colak
Admin
From: Cyprus
Registered: 2004-11-20
Posts: 9,090
Website GitHub Mastodon Twitter

Re: spam

net-carver wrote:

I’ve got a first-cut TXP referer checking plugin working on my local setup, just for those folks who don’t like messing with their .htaccess settings.

yummy!!!!


Yiannis
——————————
NeMe | hblack.art | EMAP | A Sea change | Toolkit of Care
I do my best editing after I click on the submit button.

Offline

#24 2008-01-02 11:51:38

obeewan
Archived Plugin Author
From: Stockholm, Sweden
Registered: 2004-08-12
Posts: 319
Website

Re: spam

I stumbled across another htaccess list. Probably outdated but …

I would love seing that plugin too!


Plugins: ob1_advanced_search 1.032b, ob1_search_score 1.0, ob1_pagination 2.5, ob1_title 4.1, ob1_modified 2.1

“Let your plans be dark and as impenetratable as night, and when you move, fall like a thunderbolt.”
— Sun Tzu

Offline

Board footer

Powered by FluxBB