vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 4.x Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=245)
-   -   Anti-Spam Options - Spambot Stopper - Prevent Spambots from Registering (https://vborg.vbsupport.ru/showthread.php?t=294633)

Bow Walker 03-31-2013 01:39 AM

Installed this mod on my site and am very impressed at the results.

Went from 20 (or more) spammers per day down to zero - and yet authentic member applications are still getting through! Love it

neya 04-06-2013 08:22 AM

I already IP Banned entire of china to prevent spam but russian, german, polish spam bots were still getting through and as i have no intention of IP Banning those countries as they have A large amount of legitimate users this was the perfect solution. The delay is set to 20 Seconds and I have added a message to notify legitimate members that they must stay on the page for over 20 seconds if they wish to register (as it is to fight spam bots), and so far it's taken care of the bots wonderfully, as well as letting the legitimate ones through.

Overall, this is absolutely fantastic and has been a great help, props.

datoneer 04-07-2013 11:29 PM

Doesn't work for me. I don't receive any 'no permission page'...tried 25,30 and 60 sec

kh99 04-08-2013 01:37 PM

Quote:

Originally Posted by datoneer (Post 2414997)
Doesn't work for me. I don't receive any 'no permission page'...tried 25,30 and 60 sec

I can't think of why that would happen. Make sure "Enable Spambot Stopper" is set to Yes in the options. If it still doesn't work, maybe there's a conflict with another mod. Do you have any other mods installed that have to do with registration? Do you have a custom registration page or anything like that?

datoneer 04-08-2013 02:40 PM

Yes it is set to yes. I have dbtech advanced registration but still doesn't work if i disable that mod

Ba'al 04-08-2013 06:27 PM

Please specify how to add thread ID so i can have it post in a thread, is it a specific number or the thread url.Thanx

Can you show me an example.

Edit: I got it working.............Thanx

Bluemax712 04-08-2013 07:36 PM

Quote:

Originally Posted by apsrfvb4 (Post 2410721)
I was able to get it working by changing this setting for Spam-O-Matic: AutoModeration URL count
-changed it from the default of 0 to a 1 (or anything higher)

if above is set to 0 the Glowhost log says: "Post put under moderation based on Auto-Moderation URL count"

but can't explain why spam-o-matic is not ignoring this since the Spambot Stopper poster id=1 :confused:

Hi kh99,
Just wondering if you ever had a chance to look at this problem
or if you were able to duplicate it?

The above fix works (setting Automoderation count to 1)
but ofc this lets the spammers post that first URL without moderation

Would like to reenable posting the Registrations to a thread again
but having Spam-O-Matic:AutoModeration URL count set to 0 is of more importance

Thanks

Edit: this was the orignal post
https://vborg.vbsupport.ru/showpost....&postcount=129

kh99 04-08-2013 08:20 PM

To be honest I didn't understand that you still had a problem with that. Sorry it's been so long but I'm having trouble getting back to this. In fact, there's an issue with facebook registration that I said I'd try to fix immediately and that was over a week ago. But I'll try to look at that and your problem tomorrow.

Bluemax712 04-08-2013 09:22 PM

Quote:

Originally Posted by kh99 (Post 2415200)
To be honest I didn't understand that you still had a problem with that. Sorry it's been so long but I'm having trouble getting back to this. In fact, there's an issue with facebook registration that I said I'd try to fix immediately and that was over a week ago. But I'll try to look at that and your problem tomorrow.

Yes - that's why reposted it
figured my problem did look like it was solved from my original response.

Thanks much!

kh99 04-09-2013 09:52 PM

Quote:

Originally Posted by apsrfvb4 (Post 2410721)
I was able to get it working by changing this setting for Spam-O-Matic: AutoModeration URL count
-changed it from the default of 0 to a 1 (or anything higher)

if above is set to 0 the Glowhost log says: "Post put under moderation based on Auto-Moderation URL count"

but can't explain why spam-o-matic is not ignoring this since the Spambot Stopper poster id=1 :confused:

Edit again: I believe the problem is in the spam-o-matic product, and that is should not apply the rules if the post 'is_automated' is set at all. As it is, it only skips the rules if 'is_auotmated' is set to 'rss', but I see places in the vbulletin code that just set it to true. This probably doesn't cause a problem normally because it's rare for one of those situations to occur when the current user has fewer than 6 posts (or isn't an admin or mod). I've sent a PM to the spam-o-matic author, so hopefully we'll get it worked out one way or another.

Anyway, if you want to try a temporary fix, you could try going to Plugins & Products > Plugin Manager, and find the section "Product: Spambot Stopper", and edit the "Post to Thread" plugin. Find this line:
Code:

      $dm->set_info('is_automated', 'sbs');

and change 'sbs' to 'rss'.

Bluemax712 04-10-2013 12:14 AM

Quote:

Originally Posted by kh99 (Post 2415401)
Edit again: I believe the problem is in the spam-o-matic product, and that is should not apply the rules if the post 'is_automated' is set at all. As it is, it only skips the rules if 'is_auotmated' is set to 'rss', but I see places in the vbulletin code that just set it to true. This probably doesn't cause a problem normally because it's rare for one of those situations to occur when the current user has fewer than 6 posts (or isn't an admin or mod). I've sent a PM to the spam-o-matic author, so hopefully we'll get it worked out one way or another.

Anyway, if you want to try a temporary fix, you could try going to Plugins & Products > Plugin Manager, and find the section "Product: Spambot Stopper", and edit the "Post to Thread" plugin. Find this line:
Code:

      $dm->set_info('is_automated', 'sbs');

and change 'sbs' to 'rss'.

So I made the temporary fix changing above from 'sbs' to 'rss'
then Re-enabled posting notices to the thread..

Now have to wait for a new RSS post
will update as soon as one arrives
-Unfortunately this may not happen for at least another day or so.


Thanks for looking into this!

kh99 04-10-2013 12:52 AM

Oh, I thought you said it was working. But I'm not sure I understand - it shouldn't have any affect on any RSS feeds, if that's what you mean.

Bluemax712 04-10-2013 01:01 AM

Quote:

Originally Posted by kh99 (Post 2415436)
Oh, I thought you said it was working. But I'm not sure I understand - it shouldn't have any affect on any RSS feeds, if that's what you mean.

Yea sorry about that ,my initial reaction of success of temp fix - which I deleted - was concerning only having new Rejection posts added to a thread - but this always worked.

The problem of having RSS posts flagged for Moderation is still waiting to see if it has been fixed. Won't know until the RSS finds another post to add

Does this make sense?

On second thought- I'm getting my forum problems mixed up - I think you did fix it with the temp change.
Sorry about the confusion. lol

kh99 04-10-2013 01:17 AM

It's OK, and you can test whatever you want of course. But I would have been really surprised if this mod was causing problems with an RSS feed. :)

Bluemax712 04-10-2013 01:20 AM

Quote:

Originally Posted by kh99 (Post 2415440)
It's OK, and you can test whatever you want of course. But I would have been really surprised if this mod was causing problems with an RSS feed. :)

Thanks can you re-explain how the fix worked though - in really basic terms :)

kh99 04-10-2013 01:39 AM

Quote:

Originally Posted by apsrfvb4 (Post 2415441)
Thanks can you re-explain how the fix worked though - in really basic terms :)

Yeah, I realize what I posted didn't make a lot of sense except to someone familiar with the vbulletin code. I really posted that because I was going to point the spam-o-matic author there, then I ended up repeating it in a PM.

Anyway, when looking at some code to make sure I was explaining it right, I now think it might not be a good idea to make that change. It looks like if you do that, the vbulletin code tries to update the current user's info to reflect that notification, which it shouldn't be doing.

So I won't bother explaining it (I'm not sure I can do a good job anyway), but I also think it might be a good idea to change that line back to 'sbs' and wait until I hear from the spam-o-matic author.

Bluemax712 04-10-2013 01:50 AM

Quote:

Originally Posted by kh99 (Post 2415443)
Yeah, I realize what I posted didn't make a lot of sense except to someone familiar with the vbulletin code. I really posted that because I was going to point the spam-o-matic author there, then I ended up repeating it in a PM.

Anyway, when looking at some code to make sure I was explaining it right, I now think it might not be a good idea to make that change. It looks like if you do that, the vbulletin code tries to update the current user's info to reflect that notification, which it shouldn't be doing.

So I won't bother explaining it (I'm not sure I can do a good job anyway), but I also think it might be a good idea to change that line back to 'sbs' and wait until I hear from the spam-o-matic author.

ok will change it back to " sbs" - whatever that means - which is what I was hoping you would explain :)

I did notice another problem though not sure if related
I received emails of both "Registration Rejected" and "Registration Successfull"
but the thread only show the "Rejected" ones - not the "Successful" ones

PS: I have had the built-in Vbulletin email notify of "Successful Registrations" disabled
since it duplicates the Emails from your Mod

kh99 04-10-2013 02:02 AM

Quote:

Originally Posted by apsrfvb4 (Post 2415446)
ok will change it back to " sbs" - whatever that means - which is what I was hoping you would explain :)

Well, 'sbs' is just a string that I made up that stands for Spambot Stopper. It's hard to explain (at least for me, without going on for paragraphs), but the only way for spam-o-matic to not moderate those posts would be to set that value to 'rss', because it checks for that value. But the vbulletin code also checks for the value 'rss' because it has a special way of handling posts that come from the rss feed poster. But I don't think we want the notifications to be handled that same way (edit: or maybe we do - I'll have to study it more when I get a chance). So we're stuck unless there's a change to the spam-o-matic mod (I hope that makes some sense).


Quote:

I did notice another problem though not sure if related
I received emails of both "Registration Rejected" and "Registration Successfull"
but the thread only show the "Rejected" ones - not the "Successful" ones

PS: I have had the built-in Vbulletin email notify of "Successful Registrations" disabled
since it duplicates the Emails from your Mod

Sorry to say, it's been so long now that I don't remember, but I think we decided that the posts don't use the time limits the way the emails do, so I think right now you only ever get posts for failures. That fix is going to have to wait for the next update.

Bluemax712 04-10-2013 02:10 AM

Quote:

Originally Posted by kh99 (Post 2415447)
Well, 'sbs' is just a string that I made up that stands for Spambot Stopper. It's hard to explain (at least for me, without going on for paragraphs), but the only way for spam-o-matic to not moderate those posts would be to set that value to 'rss', because it checks for that value. But the vbulletin code also checks for the value 'rss' because it has a special way of handling posts that come from the rss feed poster. But I don't think we want the notifications to be handled that same way (edit: or maybe we do - I'll have to study it more when I get a chance). So we're stuck unless there's a change to the spam-o-matic mod (I hope that makes some sense).





Sorry to say, it's been so long now that I don't remember, but I think we decided that the posts don't use the time limits the way the emails do, so I think right now you only ever get posts for failures. That fix is going to have to wait for the next update.

ok- set it all back to email notify only vs. thread notices until further updates

Thanks

PS...have 987 Rejection notices since installed @month ago
and no new real users affected :)

Bluemax712 05-20-2013 10:03 PM

One bad thing about having the notices sent via email vs. a thread

This Mod stopped so many over the weekend that my server was listed by google
as a suspected bulk-email-spammer so I've had to disable them

I hope this is part of the upcoming Spam-O-Matic bugfix update
so I can get back to posting the notices in a thread.

rhody401 05-21-2013 10:37 AM

I have them going to a thread on our forum, and find that to be the best way. It's a thread within a private sub forum, which only moderators can see. It works fine that way.

motorhaven 05-21-2013 11:56 AM

Quote:

Originally Posted by apsrfvb4 (Post 2423260)
One bad thing about having the notices sent via email vs. a thread

This Mod stopped so many over the weekend that my server was listed by google
as a suspected bulk-email-spammer so I've had to disable them

I hope this is part of the upcoming Spam-O-Matic bugfix update
so I can get back to posting the notices in a thread.

Why aren't you using you're server to send mail directly to you, instead of having it relay them through a third party?

Bluemax712 05-21-2013 02:20 PM

Quote:

Originally Posted by motorhaven (Post 2423320)
Why aren't you using you're server to send mail directly to you, instead of having it relay them through a third party?


yes - I think you mean have them sent to an email account on the server itself?
That would work fine - but accessing the server's webmail system is horribly slow.
So was having them sent to a gmail account which worked great - up until this weekend.

Bluemax712 05-21-2013 02:30 PM

Quote:

Originally Posted by rhody401 (Post 2423313)
I have them going to a thread on our forum, and find that to be the best way. It's a thread within a private sub forum, which only moderators can see. It works fine that way.

Posting to a thread worked fine for me too but then some weird bug popped up where RSS posts were being sent to moderation. Kevin found out what the bug was (something to do with SOM) talked with their authors who supposedly will be putting out a fix for it.

Just wondering though - do you also have RSS feeds being posted to a thread yourself
(without them being sent to moderation)?

motorhaven 05-21-2013 03:03 PM

Quote:

Originally Posted by apsrfvb4 (Post 2423346)
yes - I think you mean have them sent to an email account on the server itself?
That would work fine - but accessing the server's webmail system is horribly slow.
So was having them sent to a gmail account which worked great - up until this weekend.

I'm referring to using a POP3 or imap account on the server, and fetching it via Thunderbird, Outlook or whatever email client you choose.

Bluemax712 05-21-2013 03:27 PM

Quote:

Originally Posted by motorhaven (Post 2423359)
I'm referring to using a POP3 or imap account on the server, and fetching it via Thunderbird, Outlook or whatever email client you choose.

the google webmail was just more convenient - access from anymachine with a browser

kh99 05-22-2013 11:50 AM

Unfortunately the way it stands right now the notifications are useful for making sure you've got it set up right, but it's probably a better idea to have them turned off most of the time (no matter if your using email or thread posting), because there's nothing limiting them. What is really needed is an option to log the attempts and send notifications in batches, and/or to limit the attempts from a given ip.

My current situation is such that I'm not planning on any vb modification work in the near future, but I'm kind of tempted now to make some time for this.

Bluemax712 05-22-2013 08:28 PM

Quote:

Originally Posted by kh99 (Post 2423522)
Unfortunately the way it stands right now the notifications are useful for making sure you've got it set up right, but it's probably a better idea to have them turned off most of the time (no matter if your using email or thread posting), because there's nothing limiting them. What is really needed is an option to log the attempts and send notifications in batches, and/or to limit the attempts from a given ip.

My current situation is such that I'm not planning on any vb modification work in the near future, but I'm kind of tempted now to make some time for this.

Or maybe you can send them to a log file like spam-o-matic does where you can view it in the ACP ?

kh99 05-22-2013 08:53 PM

Quote:

Originally Posted by apsrfvb4 (Post 2423597)
Or maybe you can send them to a log file like spam-o-matic does where you can view it in the ACP ?

Oh...yeah, that's a great idea. I don't know why I didn't think of that. I guess it's because I'm not too familiar with the vb logging stuff. Anyway, I actually already have a version that does logging, it just needs to be finished up and tested. If I can change it to use the vb logging, that might speed things up.

Bluemax712 05-22-2013 10:38 PM

cool - thanks for your time adding even more to this mod!
I'll be able to do some Beta testing too if you want :)

Bluemax712 05-31-2013 06:31 PM

Any ideas on how to "automatically" block an IP - if it just repeatedly hammers the login page?
ie: 100's of times per min

Occasionally get ones which don't get past this mod
but they do cause MySql server to complain about too many connections being used up.

PS : I realize can block them afterwards through .htaccess - but looking for an automated way
Thanks

ForceHSS 05-31-2013 07:09 PM

Quote:

Originally Posted by apsrfvb4 (Post 2425110)
Any ideas on how to "automatically" block an IP - if it just repeatedly hammers the login page?
ie: 100's of times per min

Occasionally get ones which don't get past this mod
but they do cause MySql server to complain about too many connections being used up.

PS : I realize can block them afterwards through .htaccess - but looking for an automated way
Thanks

you could add this and add his user agent
https://vborg.vbsupport.ru/showthread.php?t=268208

Bluemax712 05-31-2013 07:26 PM

Quote:

Originally Posted by ForceHSS (Post 2425120)
you could add this and add his user agent
https://vborg.vbsupport.ru/showthread.php?t=268208

Thanks ForceHSS

I was also just checking out this thread: Pre Firewall : Anti-DDos With Sytem Block
https://vborg.vbsupport.ru/showthrea...highlight=DDOS

This sounds interesting - if only I had root access :(
http://systembash.com/content/how-to...h-mod_evasive/

kh99 05-31-2013 07:47 PM

To be honest I don't know offhand what mod you could use for that. In theory it would be pretty easy to write code to check for a given ip failing a certain number of times and banning it, but since I haven't done it I'm not sure how well it would work in practice. Actually now that I think about it, I believe Lionel (a member who posted early on in this thread) said that he just bans any ip that fails the time check even once. I don't remember if he's adding it to the existing vb ip ban list or doing his own check.

Bluemax712 05-31-2013 07:56 PM

Quote:

Originally Posted by kh99
I believe Lionel (a member who posted early on in this thread) said that he just bans any ip that fails the time check even once. I don't remember if he's adding it to the existing vb ip ban list or doing his own check.

lol - that's a lil' too harsh for me - it's just the out-of-control ones I'm looking to block from repeatedly banging on the door

ps- I'll be moving my server to a VPS soon - then maybe I'll try adding that Apache mod_evasive module - it sounds awesome

vbresults 06-11-2013 04:46 PM

Quote:

Originally Posted by apsrfvb4 (Post 2425129)
lol - that's a lil' too harsh for me - it's just the out-of-control ones I'm looking to block from repeatedly banging on the door

ps- I'll be moving my server to a VPS soon - then maybe I'll try adding that Apache mod_evasive module - it sounds awesome

mod_evasive is known to cause problems in vB.

Bluemax712 06-11-2013 04:55 PM

Quote:

Originally Posted by vbresults (Post 2427419)
mod_evasive is known to cause problems in vB.

Thanks for the warning - unfortunately I didn't end up getting the VPS either :(

vbresults 06-13-2013 04:47 PM

Quote:

Originally Posted by apsrfvb4 (Post 2427420)
Thanks for the warning - unfortunately I didn't end up getting the VPS either :(

Sure; how come?

Bluemax712 06-13-2013 07:19 PM

Quote:

Originally Posted by vbresults (Post 2427915)
Sure; how come?

sadly my tree de dinero died

Dave234 06-18-2013 02:17 AM

Hello,
I would like to install this, but how do I do it? I downloaded the zip file, and I see the XML file called "product-kh99_spambot_stopper_1.1.1", but where do I drag that to?

In my filezilla, after I connect to my website, I see a folder with a "/", then beneath that is "admincp". Do I drag it to the "admincp" folder?

Please help me, as I am a complete novice to this stuff. I have a feeling it is the "admincp" folder...

I don't want to do anything until I'm sure, though, as I'm scared to mess anything up and I don't know how to back the thing up.


All times are GMT. The time now is 06:03 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01579 seconds
  • Memory Usage 1,867KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (2)bbcode_code_printable
  • (26)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (40)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete