[mikesz]

With the captcha AND the SPAM question MOD installed, I was STILL getting 4 to 5 bogus registration EVERY day. I finally added a script to my registration form that traps the bogus submissions and NUKES them before they can submit the junk. I have a record of the IP address and other stuff they used so my "badguy blacklist" is dynamic and pretty much up to date. In addition to the IP address, I wrote some filters that check for known badguy foot prints which enables me to determine a bogus registration by other means as well. I have added a honeypot to mix too (it takes out a fair number of them including badbots that ignore robots.txt). Since last November I have completely eliminated the daily flow of badguys from my site. Zero, not one! I have collected almost 10000 IP addresses of attempts to illicitly access my site. The email addresses they use are almost always forged from the data I have been able to collect over that time period.

Since upgrading to 3.7.0 I have not yet turned of MY system to see if the vB system does what it is suppose to do and am not sure if I will, given that I have some thing that absolutely works and like they say, "if it works, don't fix it" ... I may do some testing at some point to see if 3.7.0 catches the badguys but I don't have a priority for it now.

regards, mikesz