[Trac] We're getting spammed!

The Trac ticket system seems to be getting spammed on a regular basis at the moment, here are *four* of my old tickets that just got hit today: https://svn.boost.org/trac/boost/ticket/3632 https://svn.boost.org/trac/boost/ticket/1648#comment:4 https://svn.boost.org/trac/boost/ticket/2445#comment:2 https://svn.boost.org/trac/boost/ticket/3425#comment:2 Is there anything we can do to prevent this? John.

On Tue, 11 May 2010, John Maddock wrote:
The Trac ticket system seems to be getting spammed on a regular basis at the moment, here are *four* of my old tickets that just got hit today:
https://svn.boost.org/trac/boost/ticket/3632 https://svn.boost.org/trac/boost/ticket/1648#comment:4 https://svn.boost.org/trac/boost/ticket/2445#comment:2 https://svn.boost.org/trac/boost/ticket/3425#comment:2
Is there anything we can do to prevent this?
Dong Inn and I installed the filter from http://trac.edgewall.org/wiki/SpamFilter (without Akismet or Captcha support). One of the moderators should add relevant regular expressions to https://svn.boost.org/trac/boost/wiki/BadContent then make it read-only; I seeded it with the list from Trac's own BadContent page. I added a bunch of junk comments for testing; apparently those can't be removed until we update Trac so they'll have to stay for now. -- Jeremiah Willcock

On 5/11/2010 1:31 PM, Jeremiah Willcock wrote:
On Tue, 11 May 2010, John Maddock wrote:
The Trac ticket system seems to be getting spammed on a regular basis at the moment, here are *four* of my old tickets that just got hit today:
https://svn.boost.org/trac/boost/ticket/3632 https://svn.boost.org/trac/boost/ticket/1648#comment:4 https://svn.boost.org/trac/boost/ticket/2445#comment:2 https://svn.boost.org/trac/boost/ticket/3425#comment:2
Is there anything we can do to prevent this?
Dong Inn and I installed the filter from http://trac.edgewall.org/wiki/SpamFilter (without Akismet or Captcha support). One of the moderators should add relevant regular expressions to https://svn.boost.org/trac/boost/wiki/BadContent then make it read-only; I seeded it with the list from Trac's own BadContent page. I added a bunch of junk comments for testing; apparently those can't be removed until we update Trac so they'll have to stay for now.
Thank you for reinstalling that filter, although I don't know why it and many other modules got removed. But from the previous setup, the only thing that really worked to some extent was the Akismet lookup. Once upon a time we also used to have the "Delete" module so we could go in and manually cleanup SPAM that made it through. -- -- Grafik - Don't Assume Anything -- Redshift Software, Inc. - http://redshift-software.com -- rrivera/acm.org (msn) - grafik/redshift-software.com -- 102708583/icq - grafikrobot/aim,yahoo,skype,efnet,gmail

On Tue, 11 May 2010, Rene Rivera wrote:
On 5/11/2010 1:31 PM, Jeremiah Willcock wrote:
On Tue, 11 May 2010, John Maddock wrote:
The Trac ticket system seems to be getting spammed on a regular basis at the moment, here are *four* of my old tickets that just got hit today:
https://svn.boost.org/trac/boost/ticket/3632 https://svn.boost.org/trac/boost/ticket/1648#comment:4 https://svn.boost.org/trac/boost/ticket/2445#comment:2 https://svn.boost.org/trac/boost/ticket/3425#comment:2
Is there anything we can do to prevent this?
Dong Inn and I installed the filter from http://trac.edgewall.org/wiki/SpamFilter (without Akismet or Captcha support). One of the moderators should add relevant regular expressions to https://svn.boost.org/trac/boost/wiki/BadContent then make it read-only; I seeded it with the list from Trac's own BadContent page. I added a bunch of junk comments for testing; apparently those can't be removed until we update Trac so they'll have to stay for now.
Thank you for reinstalling that filter, although I don't know why it and many other modules got removed. But from the previous setup, the only thing that really worked to some extent was the Akismet lookup. Once upon a time we also used to have the "Delete" module so we could go in and manually cleanup SPAM that made it through.
We did a lot of updates to the Trac site last week for performance. If the API key on the admin page is valid, Akismet might actually be working; I hadn't realized you had it before so I thought it wasn't set up. Dong Inn installed the TicketDeletePlugin now so you can clean up the existing spam. TracXMLRPC and IniAdmin are installed now as well. Are there any others that need to be installed? Syntax highlighting is on now; an admin can turn it off if there are performance problems. Note that many of the problems with the file browser's performance don't have anything to do with highlighting, though. -- Jeremiah Willcock

Dong Inn and I installed the filter from http://trac.edgewall.org/wiki/SpamFilter (without Akismet or Captcha support). One of the moderators should add relevant regular expressions to https://svn.boost.org/trac/boost/wiki/BadContent then make it read-only; I seeded it with the list from Trac's own BadContent page. I added a bunch of junk comments for testing; apparently those can't be removed until we update Trac so they'll have to stay for now.
Updated, and made read only: thanks! Sounds like the Akismet filter would be useful to have as well though? Cheers, John.

On Wed, 12 May 2010, John Maddock wrote:
Dong Inn and I installed the filter from http://trac.edgewall.org/wiki/SpamFilter (without Akismet or Captcha support). One of the moderators should add relevant regular expressions to https://svn.boost.org/trac/boost/wiki/BadContent then make it read-only; I seeded it with the list from Trac's own BadContent page. I added a bunch of junk comments for testing; apparently those can't be removed until we update Trac so they'll have to stay for now.
Updated, and made read only: thanks!
Sounds like the Akismet filter would be useful to have as well though?
Did you have an API key before? There is one on there that seems to have been left over from the previous install. If it is valid, Akismet might be working. I didn't know you had the spam filter plugin installed before and so I thought Akismet wasn't set up, but it might be. -- Jeremiah Willcock

On 5/12/2010 8:38 AM, Jeremiah Willcock wrote:
On Wed, 12 May 2010, John Maddock wrote:
Dong Inn and I installed the filter from http://trac.edgewall.org/wiki/SpamFilter (without Akismet or Captcha support). One of the moderators should add relevant regular expressions to https://svn.boost.org/trac/boost/wiki/BadContent then make it read-only; I seeded it with the list from Trac's own BadContent page. I added a bunch of junk comments for testing; apparently those can't be removed until we update Trac so they'll have to stay for now.
Updated, and made read only: thanks!
Sounds like the Akismet filter would be useful to have as well though?
Did you have an API key before? There is one on there that seems to have been left over from the previous install. If it is valid, Akismet might be working. I didn't know you had the spam filter plugin installed before and so I thought Akismet wasn't set up, but it might be.
ASFAICT it's working fine. The Akismet key that's there is the one Doug G. set up AFAIK. If only there was an easy way to find existing SPAM so we could delete it :-\ -- -- Grafik - Don't Assume Anything -- Redshift Software, Inc. - http://redshift-software.com -- rrivera/acm.org (msn) - grafik/redshift-software.com -- 102708583/icq - grafikrobot/aim,yahoo,skype,efnet,gmail

On Wed, 12 May 2010, Rene Rivera wrote:
On 5/12/2010 8:38 AM, Jeremiah Willcock wrote:
On Wed, 12 May 2010, John Maddock wrote:
Dong Inn and I installed the filter from http://trac.edgewall.org/wiki/SpamFilter (without Akismet or Captcha support). One of the moderators should add relevant regular expressions to https://svn.boost.org/trac/boost/wiki/BadContent then make it read-only; I seeded it with the list from Trac's own BadContent page. I added a bunch of junk comments for testing; apparently those can't be removed until we update Trac so they'll have to stay for now.
Updated, and made read only: thanks!
Sounds like the Akismet filter would be useful to have as well though?
Did you have an API key before? There is one on there that seems to have been left over from the previous install. If it is valid, Akismet might be working. I didn't know you had the spam filter plugin installed before and so I thought Akismet wasn't set up, but it might be.
ASFAICT it's working fine. The Akismet key that's there is the one Doug G. set up AFAIK.
If only there was an easy way to find existing SPAM so we could delete it :-\
There was a list of a few earlier in the thread. I'll check for more later today. -- Jeremiah Willcock

On Wed, 12 May 2010, John Maddock wrote:
Dong Inn and I installed the filter from http://trac.edgewall.org/wiki/SpamFilter (without Akismet or Captcha support). One of the moderators should add relevant regular expressions to https://svn.boost.org/trac/boost/wiki/BadContent then make it read-only; I seeded it with the list from Trac's own BadContent page. I added a bunch of junk comments for testing; apparently those can't be removed until we update Trac so they'll have to stay for now.
Updated, and made read only: thanks!
One thing I noticed on your new entries is that they have unescaped periods. Note that the list in BadContent is of Python regular expressions so periods that are meant to be literal should be escaped. -- Jeremiah Willcock

Updated, and made read only: thanks!
One thing I noticed on your new entries is that they have unescaped periods. Note that the list in BadContent is of Python regular expressions so periods that are meant to be literal should be escaped.
Oh, you think I would have noticed that :-( Now fixed, John.
participants (3)
-
Jeremiah Willcock
-
John Maddock
-
Rene Rivera