Forum Moderators: phranque

Message Too Old, No Replies

Countering guestbook spam

How do you do it?

         

johnnie

11:37 pm on Nov 17, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Just some discussion on this phenomenon, which seems to be spreading like wildfire these days. My site's guestbook has been filling up with spam for wuite a while now. To counter it, I have now created a script which auto-adds the IP-address of any user posting a message containing 'not-words' (phentermine, viagra, you know the $#!t) to a banlist. Also, all entries which have a referral different than my site are auto-blocked. There's also a third mechanism in place, which prevents the user from posting a message within 10 seconds of loading the page. The guestbook seems spam-free and the leak seems patched, but my banlist keeps growing due to the numerous attempts still being made. It's just a matter of time before these F-----S start randomly variating their stupid keywords (v!agra, c^iAl¦s and stuff like that). Is it ethical to just auto-block an entire range of IP addresses after a certain amount of abuse? I've given up on abuse@network reports, since I've never received a sensible reply on any one of my complete(IP, timestamp, logentry) reports.

Has anyone considered setting up a global, public (and moderated) database of banned networks (known offenders) for webmasters to utilize?

physics

12:20 am on Nov 18, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I like your 10 second idea, that's a new one to me.
Captchas and email verification are other things to try. The problem with IP databases is that innocent IPs get blocked. There are open proxy databases out there that you can check against though.

rocknbil

8:35 pm on Nov 18, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Your IP idea is a bit of a goose chase, most of these guys/gals are using compromised machines.

If you use a guestbook that requires approval before the entry appears, they'll give up. Basically alter the script to require approval, you review the stuff, and only post it if it's legit.