[TriLUG] porn spam problem

[James Tuttle]

WA Brown wrote:
> PHPBB
> 
> 
> ----- Original Message ----- 
> From: "Matt Pusateri" <mpusateri at wickedtrails.com>
> To: "Triangle Linux Users Group General Discussion" <trilug at trilug.org>
> Sent: Wednesday, November 28, 2007 9:20 AM
> Subject: Re: [TriLUG] porn spam problem
> 
> 
>> WA Brown wrote:
>>> I have a server and website. I am having a problem with robots trying to
>>> access the message board to load porn spam. Looks like captcha dont work. 
>>> I
>>> get, on the average, 50 tries a
>>> day. It fills up my email and I have to delete all the entries.
>>> What can I do to stop this?
>>>
>>>
>>> WA Brown
>>> www.havenstead.net
>>>
>>>
>>>
>> what message board software ?
>> -- 
>> TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
>> TriLUG Organizational FAQ  : http://trilug.org/faq/
>> TriLUG Member Services FAQ : http://members.trilug.org/services_faq/
>>
> 
> 
It may also be that an agent doesn't need to use the form to post
messages.  I know that some blog software has been vulnerable to attacks
in which the attacking script calls on functions directly having
bypassed the form and any protective measures implemented on the form.
Have you looked into hardening phpbb beyond captcha?  Also, some
captchas are very easy to break with OCR.  You may consider looking into
other captcha implementations.


Jim

-- 
--
---Jim Tuttle
------------------------------------------------------
http://www.braggtown.com
PGP Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x69B69B08