Hey guys,
I just deleted another 60 or so spam tickets. It's a pretty manual process which requires three (3!) clicks per spam ticket. Any trac gurus on this list that know how to secure a trac install? E.g. to combat spam -- captcha, mod_security? I'm not sure what people run nowadays.
Feedback appreciated!
Till _______________________________________________ List info: http://lists.roundcube.net/dev/ BT/aba52c80
Till,
I've looked into it a few times, but, for one reason or another, wasn't successful in finding something. It is pretty easy to run a query to remove the spam tickets on the server side, though (not ideal to have to do this, but it's better than 180+ clicks).
Adam
On Thu, Dec 2, 2010 at 3:16 PM, till till@php.net wrote:
Hey guys,
I just deleted another 60 or so spam tickets. It's a pretty manual process which requires three (3!) clicks per spam ticket. Any trac gurus on this list that know how to secure a trac install? E.g. to combat spam -- captcha, mod_security? I'm not sure what people run nowadays.
Feedback appreciated!
Till _______________________________________________ List info: http://lists.roundcube.net/dev/ BT/181ed1e3
List info: http://lists.roundcube.net/dev/ BT/aba52c80
Now that I look at it, I can't figure out if user registration (with email confirmation) is still mandatory. That seems to be the only thing and the accounts I deleted didn't have an email assigned.
Do you know where that setting i?
Till
On Thu, Dec 2, 2010 at 10:21 PM, Adam Grelck adam.grelck@gmail.com wrote:
Till,
I've looked into it a few times, but, for one reason or another, wasn't successful in finding something. It is pretty easy to run a query to remove the spam tickets on the server side, though (not ideal to have to do this, but it's better than 180+ clicks).
Adam
On Thu, Dec 2, 2010 at 3:16 PM, till till@php.net wrote:
Hey guys,
I just deleted another 60 or so spam tickets. It's a pretty manual process which requires three (3!) clicks per spam ticket. Any trac gurus on this list that know how to secure a trac install? E.g. to combat spam -- captcha, mod_security? I'm not sure what people run nowadays.
Feedback appreciated!
Till _______________________________________________ List info: http://lists.roundcube.net/dev/ BT/181ed1e3
List info: http://lists.roundcube.net/dev/ BT/b33d0462
List info: http://lists.roundcube.net/dev/ BT/aba52c80
Actually, I'm not sure it was ever in effect. I think there wasn't a readily available way to do it before, but it looks like there might be now: http://trac-hacks.org/wiki/AccountManagerPlugin/Modules#EmailVerificationMod...
Adam
On Thu, Dec 2, 2010 at 3:35 PM, till till@php.net wrote:
Now that I look at it, I can't figure out if user registration (with email confirmation) is still mandatory. That seems to be the only thing and the accounts I deleted didn't have an email assigned.
Do you know where that setting i?
Till
On Thu, Dec 2, 2010 at 10:21 PM, Adam Grelck adam.grelck@gmail.com wrote:
Till,
I've looked into it a few times, but, for one reason or another, wasn't successful in finding something. It is pretty easy to run a query to remove the spam tickets on the server side, though (not ideal to have to do this, but it's better than 180+ clicks).
Adam
On Thu, Dec 2, 2010 at 3:16 PM, till till@php.net wrote:
Hey guys,
I just deleted another 60 or so spam tickets. It's a pretty manual process which requires three (3!) clicks per spam ticket. Any trac gurus on this list that know how to secure a trac install? E.g. to combat spam -- captcha, mod_security? I'm not sure what people run nowadays.
Feedback appreciated!
Till _______________________________________________ List info: http://lists.roundcube.net/dev/ BT/181ed1e3
List info: http://lists.roundcube.net/dev/ BT/b33d0462
List info: http://lists.roundcube.net/dev/ BT/aba52c80
Oh, cool. Maybe we try that first.
I googled mod_security and trac and found this: http://projects.otaku42.de/wiki/ScallyWhack/Installation
Would that be an option as well?
On Thu, Dec 2, 2010 at 10:41 PM, Adam Grelck adam.grelck@gmail.com wrote:
Actually, I'm not sure it was ever in effect. I think there wasn't a readily available way to do it before, but it looks like there might be now: http://trac-hacks.org/wiki/AccountManagerPlugin/Modules#EmailVerificationMod...
Adam
On Thu, Dec 2, 2010 at 3:35 PM, till till@php.net wrote:
Now that I look at it, I can't figure out if user registration (with email confirmation) is still mandatory. That seems to be the only thing and the accounts I deleted didn't have an email assigned.
Do you know where that setting i?
Till
On Thu, Dec 2, 2010 at 10:21 PM, Adam Grelck adam.grelck@gmail.com wrote:
Till,
I've looked into it a few times, but, for one reason or another, wasn't successful in finding something. It is pretty easy to run a query to remove the spam tickets on the server side, though (not ideal to have to do this, but it's better than 180+ clicks).
Adam
On Thu, Dec 2, 2010 at 3:16 PM, till till@php.net wrote:
Hey guys,
I just deleted another 60 or so spam tickets. It's a pretty manual process which requires three (3!) clicks per spam ticket. Any trac gurus on this list that know how to secure a trac install? E.g. to combat spam -- captcha, mod_security? I'm not sure what people run nowadays.
Feedback appreciated!
Till _______________________________________________ List info: http://lists.roundcube.net/dev/ BT/181ed1e3
List info: http://lists.roundcube.net/dev/ BT/b33d0462
List info: http://lists.roundcube.net/dev/ BT/aba52c80
We just had another spam attack. Can you take a look?
On Thu, Dec 2, 2010 at 11:19 PM, till till@php.net wrote:
Oh, cool. Maybe we try that first.
I googled mod_security and trac and found this: http://projects.otaku42.de/wiki/ScallyWhack/Installation
Would that be an option as well?
On Thu, Dec 2, 2010 at 10:41 PM, Adam Grelck adam.grelck@gmail.com wrote:
Actually, I'm not sure it was ever in effect. I think there wasn't a readily available way to do it before, but it looks like there might be now: http://trac-hacks.org/wiki/AccountManagerPlugin/Modules#EmailVerificationMod...
Adam
On Thu, Dec 2, 2010 at 3:35 PM, till till@php.net wrote:
Now that I look at it, I can't figure out if user registration (with email confirmation) is still mandatory. That seems to be the only thing and the accounts I deleted didn't have an email assigned.
Do you know where that setting i?
Till
On Thu, Dec 2, 2010 at 10:21 PM, Adam Grelck adam.grelck@gmail.com wrote:
Till,
I've looked into it a few times, but, for one reason or another, wasn't successful in finding something. It is pretty easy to run a query to remove the spam tickets on the server side, though (not ideal to have to do this, but it's better than 180+ clicks).
Adam
On Thu, Dec 2, 2010 at 3:16 PM, till till@php.net wrote:
Hey guys,
I just deleted another 60 or so spam tickets. It's a pretty manual process which requires three (3!) clicks per spam ticket. Any trac gurus on this list that know how to secure a trac install? E.g. to combat spam -- captcha, mod_security? I'm not sure what people run nowadays.
Feedback appreciated!
Till _______________________________________________ List info: http://lists.roundcube.net/dev/ BT/181ed1e3
List info: http://lists.roundcube.net/dev/ BT/b33d0462
List info: http://lists.roundcube.net/dev/ BT/aba52c80
On 08.12.2010 18:19, till wrote:
We just had another spam attack. Can you take a look?
I see, we could at least require email address and its validation. http://trac-hacks.org/wiki/AccountManagerPlugin/Modules#RegistrationModule
There's also a SpamFilter plugin http://trac.edgewall.org/wiki/SpamFilter
p.s. please, update trac to at least 0.11.7.
We're now running Trac 0.12 with email verification required. I haven't noticed anything broken with the upgrade, but I haven't exercised it fully. I also upgraded the spam filter plugin, which now supports reCAPTCHA - but Google's signup page is 404'ing for me right now.
Adam
On Thu, Dec 9, 2010 at 2:35 AM, A.L.E.C alec@alec.pl wrote:
On 08.12.2010 18:19, till wrote:
We just had another spam attack. Can you take a look?
I see, we could at least require email address and its validation. http://trac-hacks.org/wiki/AccountManagerPlugin/Modules#RegistrationModule
There's also a SpamFilter plugin http://trac.edgewall.org/wiki/SpamFilter
p.s. please, update trac to at least 0.11.7.
-- Aleksander 'A.L.E.C' Machniak LAN Management System Developer [http://lms.org.pl] Roundcube Webmail Developer [http://roundcube.net]
PGP: 19359DC1 @@ GG: 2275252 @@ WWW: http://alec.pl
List info: http://lists.roundcube.net/dev/ BT/aba52c80
Today i checked the status of the project and found a GREAT news: Trac 0.12!!
congratulatios to the admins who worked on this!
May be, now, with this new version we can install Localization! http://trac.edgewall.org/wiki/TracL10N
for the google mail account, you have to support openid authentication into Trac. Doing a very fast google search found this plugin to do that work: http://bitbucket.org/Dalius/authopenid-plugin/wiki/Home
regards!
Charly
El jue, 09-12-2010 a las 19:41 -0600, Adam Grelck escribió:
We're now running Trac 0.12 with email verification required. I haven't noticed anything broken with the upgrade, but I haven't exercised it fully. I also upgraded the spam filter plugin, which now supports reCAPTCHA - but Google's signup page is 404'ing for me right now.
Adam
On Thu, Dec 9, 2010 at 2:35 AM, A.L.E.C alec@alec.pl wrote:
On 08.12.2010 18:19, till wrote:
We just had another spam attack. Can you take a look?
I see, we could at least require email address and its validation. http://trac-hacks.org/wiki/AccountManagerPlugin/Modules#RegistrationModule
There's also a SpamFilter plugin http://trac.edgewall.org/wiki/SpamFilter
p.s. please, update trac to at least 0.11.7.
-- Aleksander 'A.L.E.C' Machniak LAN Management System Developer [http://lms.org.pl] Roundcube Webmail Developer [http://roundcube.net]
PGP: 19359DC1 @@ GG: 2275252 @@ WWW: http://alec.pl
List info: http://lists.roundcube.net/dev/ BT/5456fcb4
List info: http://lists.roundcube.net/dev/ BT/aba52c80
-
A.L.E.C -
Adam Grelck -
Carlos Pasqualini -
till