Spam bot / Spam members

SFrance

Hello,

since few days I have A LOT of spammer (like 1 inscription every 10 minutes and they post 10-200 messages). It's always sex messages with link. We did install FoF Spamblock, FoF Stop Forum Spam, FoF reCAPTCHA, nothing change. Any idea for make my days better ?

We think about put some rules like if the IP it's not from France or country who speak french = can't login. Or, put a rules who say "new member can't post before 24H after registration). But we don't know the files where we can put this rules.

The situation is bad, so if someone can help !

Justoverclock

maybe you can give a chance to my extension
https://discuss.flarum.org/d/27758-flarum-purify-bad-words-filter/25

with this extension u can:

hide words (u can setup words into extension settings)
hide email
use custom regexp to hide what u want 🙂

Kulga

I found this to be effective
https://discuss.flarum.org/d/25055-first-post-approval

I set it to first discussion = 1 and first post = 0

It worked well for me

I was having a big spam problem and had moderators getting upset. I think the people posting spam get paid for simply having a spam discussion successfully be visible, so even taking them down and banning quickly didn't do much.
This completely disrupted that whole system. After a few weeks of a post never getting through, I think they gave up.

Justoverclock

Kulga uh this is definitely better

fakruzaruret

Justoverclock both of them is more better 😃

Atreatis

There are server side options to block incoming spammers towards your website to prevent and fight spam in a general matter. This can be done through an apache module called mod_security this is something you can enable within your web server (Apache) configuration. There are various of additional options that you can apply with mod_security that you can apply to fight these spambots through customizing or adding a module towards your apache configuration.

Within my personal experience this has been a blessing for my own webhosting company since this saves me lots of work and satisfies a lot of my current customers. It costed me about two weeks to get the rules setup properly to fight off the most of these spambots without taking away too much normal traffic because of false positives.

Next to that the most awesome thing you can do with mod_security is that you can tie this with Fail2Ban and add it to a database called recidive so you can have a nice tidy list of abusing IP's which are ruining your day. My advise would be contacting your webhosting provider to enable such security policy through mod_security module.