Register Members List Search Today's Posts Mark Forums Read

Reply
 
Mod Options
Ultimate Spambot Killer Details »
Ultimate Spambot Killer
Mod Version: 1.0.5, by y2ksw (Coder) y2ksw is offline
Developer Last Online: Oct 2019 I like it Show Printable Version Email this Page

This modification is in the archives.
vB Version: 3.7.x Rating: (0 vote - 0 average) Installs: 9
Released: 18 Oct 2008 Last Update: 24 Oct 2008 Downloads: 61
Supported Uses Plugins Translations External Content Is in Beta Stage  

This product is a natural evolution of many single solutions. It is an attempt to integrate in vBulletin the features other applications have, without requiring a lot of code, and without obviously giving the code to the spammers.

With this software, your board connects to one of the most powerful email checking engines available. The engine itself is maintained remotely and can currently be accessed at the production server. After debugging and wide-scale test, it will be moved to vbulletin.it.

Please read first the included help before installing!


BETA RELEASE

1.0.4: FIX misplaced bracket
1.0.5 More reliable connections and a few new options, updated help. This version should be the last one before release.

Online Help

Please continue discussing here (stable release).

Download Now

Only licensed members can download files, Click Here for more information.

Addons

Supporters / CoAuthors

Show Your Support

  • To receive notifications regarding updates -> Click to Mark as Installed.
  • If you like this modification support the author by donating.
  • This modification may not be copied, reproduced or published elsewhere without author's permission.
Similar Mod
Mod Developer Type Replies Last Post
Administrative and Maintenance Tools Ultimate Spambot Killer (Stable) y2ksw vBulletin 3.7 Add-ons 18 06 Jun 2010 09:40
[release] Spambot Protection filburt1 vBulletin 2.x Template Modifications 34 10 Mar 2003 12:42

  #16  
Old 20 Oct 2008, 14:12
pedigree pedigree is offline
 
Join Date: Jul 2005
Originally Posted by Alfa1 View Post
Yes, but this also seems to check the validity of email addresses, which is a big plus. Maybe this can be combined with vbstopforumspam?
Sure it could but the problem with a single source of active SMTP scanning is that mail servers could just block connections or worse, tarpit them by reducing the TCP window size to 0, therefore just killing any scanning machine thats busy and invalidating any results, possibly timing out causing unhandled errors... if I ran a mail server and had it hit by a non-stop mail scanning site, it would get the tarpit treatment.

Take gmail for example, it waits to the end of the conversation before rejecting email addresses. This could pass email testing but be an invalid email address. Other sites will just accept everything and bin non-valid recipents later. Lets not forget (and I havent looked at the source) you can have a mail server running without a MX record. stopforumspam.com does tests to govern if an email is a valid format but it doesnt connect to a remote server to test if we got a 220/451/452 result code.

A single point for email scanning isnt a great method, as much as I like making it hard for spammers. By doing active scanning, your results are skewed by the remote end which you have no control over. vBulletin already has a method for controlling email validity, in that you must confirm a registration. For those sites without email confirmation, well, they deserved to get spammed really. While this doesnt stop a member registering to that point and hoping that their details will still be visible somewhere, email tests could be done on your server in a more distributed manner. There is no reason why those results couldnt then be submitted to a central site for further testing.

Im not trying to rag on anyones effort, god knows I had enough myself when I released my mod but Im just playing devils advocate
__________________
My mods vbRosterMaster | Ajax New PM Notifier | vbStopForumSpam

Last edited by pedigree; 20 Oct 2008 at 14:38.
Reply With Quote
  #17  
Old 20 Oct 2008, 15:52
y2ksw's Avatar
y2ksw y2ksw is offline
 
Join Date: Aug 2003
Real name: Giovanni
Originally Posted by pedigree View Post
Sure it could but the problem with a single source of active SMTP scanning is that mail servers could just block connections or worse, tarpit them by reducing the TCP window size to 0, therefore just killing any scanning machine thats busy and invalidating any results, possibly timing out causing unhandled errors... if I ran a mail server and had it hit by a non-stop mail scanning site, it would get the tarpit treatment.
Right. However we have to start at some point, and if we had the fear to move against spammers, we shouldn't move at all. I'm aware of the risks, but at the end we are not sending any email, and just try to find out if the mailbox exists, with a simple mail conversation which may come any time from any server. It doesn't mean we are spammers, and those who protect do know. The point of one source is easy to understand - it is a start project and every server is an expense, I'm sure you know. And on the other hand it never will be only one source, because once everybody starts to share, spammers are defeated from many places. And in fact this is the only way.

Take gmail for example, it waits to the end of the conversation before rejecting email addresses. This could pass email testing but be an invalid email address. Other sites will just accept everything and bin non-valid recipents later. Lets not forget (and I havent looked at the source) you can have a mail server running without a MX record. stopforumspam.com does tests to govern if an email is a valid format but it doesnt connect to a remote server to test if we got a 220/451/452 result code.
GMail seems to handle email as any other server. The few cases an email results valid but effectively isn't will be handled by the mail server. But if you ever had a forum with thousands of users and frequent email bounces just because they don't care even to register, you will also understand that a basic connection test isn't the worst thing. In fact this is what many people ask for: more reliable email addresses.

A single point for email scanning isnt a great method, as much as I like making it hard for spammers. By doing active scanning, your results are skewed by the remote end which you have no control over. vBulletin already has a method for controlling email validity, in that you must confirm a registration. For those sites without email confirmation, well, they deserved to get spammed really. While this doesnt stop a member registering to that point and hoping that their details will still be visible somewhere, email tests could be done on your server in a more distributed manner. There is no reason why those results couldnt then be submitted to a central site for further testing.
We have to build that. As far as I know there is no public database where to look at if an email address is valid and existing. It is rather the contrary, since otherwise the spammers could just download that database and send spam to 1.000.000.000 world-wide users instead of only 1.000.000 at a single time.

Im not trying to rag on anyones effort, god knows I had enough myself when I released my mod but Im just playing devils advocate
We can share experiences, databases, code. But it must be us to start the fight, waiting for other people to join and actively help will take a long time. Since your site is already up for quite some time (a year or so), you will know how much it takes, unless you already had a lot of helpers.
__________________
Giovanni
Italian support: http://www.vbulletin.it/
Reply With Quote
  #18  
Old 21 Oct 2008, 09:54
y2ksw's Avatar
y2ksw y2ksw is offline
 
Join Date: Aug 2003
Real name: Giovanni
We have added an online Help (yet under development), which explains what this service does. You may access these pages from here.
__________________
Giovanni
Italian support: http://www.vbulletin.it/
Reply With Quote
  #19  
Old 21 Oct 2008, 11:28
y2ksw's Avatar
y2ksw y2ksw is offline
 
Join Date: Aug 2003
Real name: Giovanni
Originally Posted by Alfa1 View Post
Yes, but this also seems to check the validity of email addresses, which is a big plus. Maybe this can be combined with vbstopforumspam?
I believe it can be combined easily. As far as have seen by now, the collected data does not differ a lot from what we store, and additional features can be shared once the service has been tested by many forums.

I'm not sure if one central SMTP mailbox test is practicable though. Best would be a cluster of providers offering this particular service and client applications will choose randomly or sequentially from that list.
__________________
Giovanni
Italian support: http://www.vbulletin.it/
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Mod Options

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 07:50.

Layout Options | Width: Wide Color: