[nhawk]

Originally Posted by tambo

So it does.

Marked as installed. Very neat and very impressive. Thankyou for releasing it.

I'm experimenting with a few registration restriction mods as a means of limiting the incessant spamming from some wannabe revolutionaries on our site (using alt accounts of course... wouldn't want to sully their real identity).

Essentially, I'm wanting to block people from using a proxy at the point of registration (not bothered if they use a proxy to browse or post thereafter), so that they can't maintain their complete anonymity. I know that's an almost impossible task and fraught with difficulty.

I've managed to limit some tor hostnames (in less than an hour) using your mod and that's working well and slowed the problem, but most web proxies don't seem to have an identifiable hostname.

Any advice on how your mod can be used to tackle these, from your experience? Or if I should be looking at another solution to plug that gap, like LordOfWAR_PC's "Registration CIDR/IP" mod?

I've thought about using some port scanning mods as well, but they don't seem surgical enough.

I can't go into too much detail as it would reveal the info to spammers, etc.

But, this does take some work on your end. You'll need to look up the IP owner for those that don't show a hostname. Make note of the NETNAME of the owner. (IE: DARL-TELECOM)

To do this I always start with ARIN and go from there...
ARIN - https://www.arin.net/
RIPE - https://apps.db.ripe.net/search/query.html
ASIA - http://wq.apnic.net/apnic-bin/whois.pl
LATIN AMERICA - http://lacnic.net/cgi-bin/lacnic/whois?lg=EN

There are a couple of others like AFRINIC and Japan, but I don't use those very often.

Then enable Do Whois in the mod and add the netname to hostnames that are banned.

Also keep in mind that no registration should ever come from a 'dedicated server' ip address (such as a 'rackcentre' address). That's a dead giveaway that it's a proxy.