Welcome to Geeklog, Anonymous Friday, December 27 2024 @ 11:59 am EST

Geeklog Forums

SpamX and Annoying user


Status: offline

knuff

Forum User
Full Member
Registered: 12/17/04
Posts: 340
Location:Sweden
Hi,

I have this one annoying IP adress that keeps on spamming bmy comments.

He is actually the only one commenting, but nevertheless I was wondering how to get rid of him within Geeklog.

He´s IP is 195.225.176.57 which resolves to ip176-57.netcathost.com
and this guy has been Spamming me since July.

I tried to add his IP adress to SPAMX but this didn´t really work as it seems spamx does not include the IP in its filter criteria.

Since I am not aware of any blocking within GL on IP adress level, will I have to do this in .htaccess, or did I overlook a GL feature.

Suggestions welcome !



Vanrillaer.com - our Family Portal
 Quote

Status: offline

ScurvyDawg

Forum User
Full Member
Registered: 11/06/02
Posts: 523
I saw an addition posted for the SpamX plugin once that allowed banning of IP addreses. Maybe I dreamt it but it should be around somewhere try Tony's site Gplugs.

 Quote

Status: offline

Dirk

Site Admin
Admin
Registered: 01/12/02
Posts: 13073
Location:Stuttgart, Germany
Use this.

Or do what I do: Block them in the .htaccess.

bye, Dirk
 Quote

Peter Leftwich

Anonymous
curious
Great idea regarding the .htaccess (that's an apache file yes?)

Is the format just

deny 195.225.176.57

Curious.
-Peter
Www.Video2Video.Com
Idea Question Can someone help me
 Quote

Peter Leftwich

Anonymous
surprised
PS. Surprised Doh! - that was a mistake this blogging site does not use authimage to make sure someone is a person and not a bot / script. Authimage is that random image creator where the user has to type in a code such as A5PRFT and it is written at weird odd angles.

Just my two cents Tell the webmaster of this site to employ such anti-spammer measures!
-Peter
Www. Video2Video.Com
 Quote

Status: offline

Dirk

Site Admin
Admin
Registered: 01/12/02
Posts: 13073
Location:Stuttgart, Germany
Quote by Peter Leftwich: PS. Surprised Doh! - that was a mistake this blogging site does not use authimage to make sure someone is a person and not a bot / script. Authimage is that random image creator where the user has to type in a code such as A5PRFT and it is written at weird odd angles.

Also known as a CAPTCHA.

Personally, I hate those. First of all, they are blocking blind persons (generally all those with vision problems). They also block people using text browsers. And even with good eyesight, it's often hard to make out the distorted figures ("is that a digit or a letter?"). Plus, spammers have found ways around them (although they have to be really desperate then).

I think the tools we have (Spam-X, Bad Behavior, the Ban plugin, and .htaccess) are doing the job just fine.

bye, Dirk
 Quote

Status: offline

ScurvyDawg

Forum User
Full Member
Registered: 11/06/02
Posts: 523
Quote by Dirk: Use this.

Or do what I do: Block them in the .htaccess.

bye, Dirk



I did a whois on the guys domains and emailed him at his gmail address. He responded saying he would remove my site from his DB Big Celebration
 Quote

Status: offline

knuff

Forum User
Full Member
Registered: 12/17/04
Posts: 340
Location:Sweden
Well, dunno what happened, but it was very effective.

It just removed all 20 comments I had Evil or Very Mad

I know I should back up before trying stuff, but this was kind of spooky.

Anyway, I will follow Dirk´s second advice. Use .htaccess.

Scurvy, if you feel like you may repost your comment and be the first to have a comment on my site Mr. Green


Thanks all for the replies !
Vanrillaer.com - our Family Portal
 Quote

Status: offline

Dirk

Site Admin
Admin
Registered: 01/12/02
Posts: 13073
Location:Stuttgart, Germany
Quote by knuff: Well, dunno what happened, but it was very effective.

It just removed all 20 comments I had

Hmm, did you use the "Mass Delete" option? I think the one that ships with 1.3.11 isn't working properly, but it certainly shouldn't delete all your comments ...

(Note to self: Bundle up the Spam-X version from CVS and release it)

bye, Dirk
 Quote

Status: offline

knuff

Forum User
Full Member
Registered: 12/17/04
Posts: 340
Location:Sweden
Yes I did use the mass delete option.

Story went as follow.

Dropped the two files as instructed.
New option of IP-Ban list showed up.
Added IP

* I knew I had still one left, so I wanted to see if it worked*

Hitted - Mass delete.

Got a parse error on line 41, indicating a missing )

Had a look at the code.


Text Formatted Code


 $ans = 0;
        for($i = 1;$i <= $nrows;$i++) {
            $A = DB_fetchArray($result);
            $val = $A['value'];
            if ($val = $_SERVER['REMOTE_ADDR'])) {
                $ans = 1; // quit on first positive match
                SPAMX_log($LANG_SX00['foundspam'] . $val . $LANG_SX00['foundspam2'] . $_USER['uid'] . $LANG_SX00['foundspam3'] . $_SERVER['REMOTE_ADDR']);
                break;
            }
        }
        return $ans;
    }
 


Tired, and not really a developer, I counted the brackets, and found the double bracket in line 44 very suspicous, as I couldn´t find another opening one.

Text Formatted Code

  if ($val = $_SERVER['REMOTE_ADDR']))

 


I removed that one and thought I give it a try, so it looked like.

Text Formatted Code

  if ($val = $_SERVER['REMOTE_ADDR'])

 


I thought: "Only damage that could happen was that I got another syntax error... ", and was planning to revert here with the question.

But the result was that it deleted all my comments.

As they say, it is all in the brackets Mr. Green

Dirk, on a simular note, I was going through your other website http://spam.tinyweb.net/ , would it be possible to get a good sample .htaccess file for blocking spammers.

Right now, I could use the deny, and the tidbits mentioned earlier like spampop, but just a RL example would be very nice.

Best Regards,
Boris
Vanrillaer.com - our Family Portal
 Quote

Status: offline

Dirk

Site Admin
Admin
Registered: 01/12/02
Posts: 13073
Location:Stuttgart, Germany
Tom has posted an updated version of the Mass Delete module here (direct link).

As for .htaccess, since I have mod_rewrite on anyway, I usually use it for blocking IP addresses as well, although that may be considered overkill.

Here's a straight copy out of the geeklog.net .htaccess (for the background, see More love from Russia):

Text Formatted Code
RewriteEngine On

# he's getting REALLY annoying now ...
RewriteCond %{REMOTE_ADDR} ^217.107.222.75$
RewriteRule .* - [L,F]
 


bye, Dirk
 Quote

Status: offline

rv8

Forum User
Regular Poster
Registered: 10/10/02
Posts: 105
Location:Ottawa, Canada
Quote by knuff: Hi,

I have this one annoying IP adress that keeps on spamming bmy comments.

He is actually the only one commenting, but nevertheless I was wondering how to get rid of him within Geeklog.

You want the Ban plugin. I use to block several spam commenters, plus some referrer spam. It is a useful supplement to SpamX.


Kevin Horton
 Quote

Peter Leftwich

Anonymous
determined
Quote by Dirk:
Quote by Peter Leftwich: PS. Surprised Doh! - that was a mistake this blogging site does not use authimage to make sure someone is a person and not a bot / script. Authimage is that random image creator where the user has to type in a code such as A5PRFT and it is written at weird odd angles.

Also known as a CAPTCHA.

Personally, I hate those. First of all, they are blocking blind persons (generally all those with vision problems). They also block people using text browsers. And even with good eyesight, it's often hard to make out the distorted figures ("is that a digit or a letter?"). Plus, spammers have found ways around them (although they have to be really desperate then).

I think the tools we have (Spam-X, Bad Behavior, the Ban plugin, and .htaccess) are doing the job just fine.

bye, Dirk


Nobody answered my question about the .htaccess deny format. Evil or Very Mad

Re: the captcha project, it is golden / heavenly. The hearing impaired can listen to a WAV audio of the code and type THAT in the box. It's a godsend, trust me! Chest-Slam Celebration I am assuming the way spammers "get around" things like that are the hiring of people to do repetitive interactive entries -- i.e. pay them for it i.e. good for the economy and tax revenue! Hehe.

PS. What are MassDelete and Rewrite??

-Peter Leftwich
http://Www.Video2Video.Com
 Quote

Status: offline

Dirk

Site Admin
Admin
Registered: 01/12/02
Posts: 13073
Location:Stuttgart, Germany
Quote by Peter Leftwich: Nobody answered my question about the .htaccess deny format. Evil or Very Mad

Well, we could read the Apache documentation to you - or you could just look it up yourself ...

bye, Dirk
 Quote

FAHEEM

Anonymous
hopeful
Quote by Dirk:
Quote by Peter Leftwich: Nobody answered my question about the .htaccess deny format. Evil or Very Mad

Well, we could read the Apache documentation to you - or you could just look it up yourself ...

bye, Dirk


Dear Users, I want to ban a whole country, I got their IP Ranges, Looked up all of them, now when I use it to my .htaccess file, it blockes more than I want. I do not know why is this happening. Any one please help Can someone help me
 Quote

All times are EST. The time is now 11:59 am.

  • Normal Topic
  • Sticky Topic
  • Locked Topic
  • New Post
  • Sticky Topic W/ New Post
  • Locked Topic W/ New Post
  •  View Anonymous Posts
  •  Able to post
  •  Filtered HTML Allowed
  •  Censored Content