Opened 9 years ago

Closed 8 years ago

Last modified 4 years ago

#2441 closed enhancement (implemented)

We need the antispam plugin (or some kind of moderation plugin) for trac

Reported by: nickm Owned by: phobos
Priority: Medium Milestone:
Component: Internal Services/Service - trac Version:
Severity: Keywords:
Cc: weasel, erinn Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Looks like the spammers have finally found and automated our upload-a-ticket interface. I've scrubbed and closed 3 in the last couple of hours. (See #2440 for an example.) We really need to look into possible upgrades here.

Options are:

  • Looking into the TicketModerator plugin
  • Looking into the SpamFilter plugin (the latest versions of which require Trac 0.12)
  • Looking into other related plugins
  • Looking into some way to close user accounts in a way that blacklists their credentials immediately rather than just preventing them from logging in again if ever log out.

Child Tickets

Change History (19)

comment:1 Changed 9 years ago by nickm

Cc: weasel erinn added

Spam on ticket #2334. THer eis apparently no way to remove it without messing with the db. We need to do something about this.

comment:2 Changed 9 years ago by nickm

My favored solution is currently: install TicketModerator;

moderate everybody's first comment or submission; give everybody
the MODERATOR_UNMODERATED permission upon approving their first
ticket.

comment:3 Changed 9 years ago by nickm

To elaborate : we should have a GRP_users group that has permission MODERATOR_UNMODERATED; and we should add people to this group on the slightest evidence that they are a real person, taking them out on evidence that they are not.

comment:4 Changed 9 years ago by nickm

We could also stand to install http://trac-hacks.org/wiki/TicketDeletePlugin

comment:5 in reply to:  1 Changed 9 years ago by rransom

Replying to nickm:

Spam on ticket #2334. THer eis apparently no way to remove it without messing with the db. We need to do something about this.

http://trac-hacks.org/wiki/TicketChangePlugin

comment:6 Changed 9 years ago by phobos

I installed the TicketDelete plugin, removed the two spam tickets (#2447, #2448) and removed the spam comment from #2334.

comment:7 Changed 8 years ago by nickm

We should review our options here. Over 1/3 of the tickets opened so far this month had to be deleted as spam.

comment:8 Changed 8 years ago by tagnaq

spam ticket: #3103

I would also appriciate less spam.

comment:9 Changed 8 years ago by tagnaq

comment:10 Changed 8 years ago by weasel

tagnaq, this isn't a ticket to collect ticket numbers for spam. You're just adding noise.

comment:11 Changed 8 years ago by Sebastian

I deleted a user, and after the deletion it still added a spam comment. That sounds like trac's handling of users is so absurdly broken and terrible that I'm not quite sure if a plugin could fix this.

comment:12 Changed 8 years ago by phobos

Owner: changed from erinn to phobos
Status: newaccepted

I applied the trac_spamfilter plugin last night. We'll see if it does what we want.

comment:13 Changed 8 years ago by phobos

Priority: majornormal

comment:14 Changed 8 years ago by nickm

Great. I turned on logging ; we should be able to see what the filter is doing under Administration->Spam Filtering->Monitoring.

comment:15 in reply to:  14 Changed 8 years ago by phobos

Replying to nickm:

Great. I turned on logging ; we should be able to see what the filter is doing under Administration->Spam Filtering->Monitoring.

Logging was already turned on. The html interface doesn't show if logging is on or off, you have to query the db directly.

comment:16 Changed 8 years ago by phobos

Has this plugin done anything to stop spam? I haven't seen any tickets deleted for spam, but I haven't been watching too closely either.

comment:17 Changed 8 years ago by nickm

I haven't seen any new spam in a while. Also, I haven't heard any complaints about legit stuff getting marked as spam... but lastly, the monitoring interface doesn't actually report anything, so I'm not sure whether there has been any spam or false-positives.

comment:18 Changed 8 years ago by rransom

Resolution: implemented
Status: acceptedclosed

I have seen no spam tickets or comments at all since the trac_spamfilter plugin was installed. Closing.

comment:19 Changed 4 years ago by qbi

Component: TracService - trac

Move all tickets from trac to "Service - trac" component.

Note: See TracTickets for help on using tickets.