I've asked wikicreole users what their engines are offering to do against
spam. Most of that is in some similar form already available in JSPWiki,
however a constant complaint is that it takes 4 clicks to revert a page. I
also like the Idea to having a central spamword regex list. We don't have a
mailinglist at wikicreole.org and I locked down wikicreole for edits right
now, so I repost it here...

> what is MoinMoin offering against this? Suggestions are welcome...

>By default MoinMoin has SurgeProtection -- that is it refuses to perform
>too many operations in a short time span -- if an user (recognizes by login
>or ip) attempts too many edits or page views or other requests (the limits
>are set individually for every action), the engine will block him for a
>minute or two, displaying an explanation instead of pages.

>There is also a LocalBadContent page that lists regular expressions that
>are forbidden on the pages of the wiki -- if the page being saved matches,
>the save will fail.

>If the admin uncomments a single line in the wiki configuration, a global
>BadConetnt page is being used in addition -- it is automatically downloaded
>from the MoinMoin site periodically.

>There are also "active" solution: a single-click "revert" action (currently
>on the wikicreole.org it takes 4 clicks and some scrolling to revert a
>spammed page), a despam action for admins.

>More information and some discussion:
> http://moinmo.in/AntiSpamFeatures
> http://moinmo.in/AntiSpamGlobalSolution
> http://moinmo.in/DespamAction


-----Ursprüngliche Nachricht-----
Von: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Im Auftrag von Andrew Jaquith
Gesendet: Mittwoch, 26. September 2007 23:09
An: JSPWiki Users discussion list
Betreff: Re: [Jspwiki-users] coordinated spam attack on wikicreole.org
andjspwiki.org

Note also that 2.5/2.6 also has workflow capabilities that allows a  
named group of users to serve as approvers for page edits. This is  
essentially a moderation feature.

Andrew

On Sep 26, 2007, at 4:13 PM, Janne Jalkanen wrote:

>> Glad to hear that 2.6 has some capabilities in these areas. It  
>> does leave some sites in a bit of a bind, though. (Do I want to  
>> run on a version blessed as being production-ready, or one that  
>> provides the spam controls that most production sites will need?)
>
> The 2.6 SpamFilter *should* be trivially backportable to 2.4.   
> Anybody want to send me a patch; I'll gladly release a 2.4.105 with  
> it...
>
> (If anyone wants to take over maintenance of 2.4, this would be a  
> good time to step up, by the way.)
>
>> I think it could help if combined with a way to blacklist  
>> registrations from certain email address patterns. So for example,  
>> if we see that all of the spam users are registering with  
>> [EMAIL PROTECTED] addresses, we could blacklist spammer.com.  
>> Currently, even if that capability existed, the spammer could just  
>> put in whatever email address they wanted (since there will be no  
>> validation step). With the validation step in place, at least  
>> they'd have to keep coming up with new email addresses/domains to  
>> use.
>
> Of course, if they're using hotmail.com or gmail.com... ;-)
>
> In 2.6, there is a way to moderate registrations (and remove user  
> accounts), so that might be really useful as well.
>
> /Janne
>
>
> _______________________________________________
> This is the Jspwiki-users mailing list, in which we discuss  
> thestable release (even-numbered, 2.4.x, 2.6.x), and user- 
> issues.For development discussion, please join jspwiki-dev.
> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
> http://www.jspwiki.org/JSPWikiMailingList

_______________________________________________
This is the Jspwiki-users mailing list, in which we discuss the 
stable release (even-numbered, 2.4.x, 2.6.x), and user-issues. 
For development discussion, please join jspwiki-dev.
http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
http://www.jspwiki.org/JSPWikiMailingList


_______________________________________________
This is the Jspwiki-users mailing list, in which we discuss the
stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.
For development discussion, please join jspwiki-dev.
http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
http://www.jspwiki.org/JSPWikiMailingList

Reply via email to