« Upcoming 0.9.2 releaseW3C uses b2evolution :) »

The centralized antispam backlist...

Permalink May 2, 2006 @ 20:43, by Francois Planque • Category: b2evolution.net

I had to take down the centralized antispam backlist because it's really eating up a lot of resources, thus slowing down the main site.

If you really rely on the centralized blacklist more than on your own spam defeating techniques (or on the new Phoenix techniques), I'd like to hear from you.

Also, in order to put the list back up, we could really really use someone willing to provide some server CPU & RAM to run something like antispam.b2evolution.net . It's mostly about processing SQL queries in memory. It's not that much about bandwidth or disk space. If you feel like giving it a try, please step forward ;) Thanks!

-François.

Update: we have a new server for the antispam blacklist.

41 comments

Comment from: sushi [Visitor]
sushiThe central antispam database is one of the big features in b2evo that I really love. I've tried lots of other antispam techniques, but I still feel like the database does a lot to keep down comment spam.
2006-05-02 @ 21:57
Comment from: blueyed [Member] Email
blueyedWith Phoenix we'll have better techniques, but until it's stable, we should really provide the blacklist.

In fact, it's the only core feature for 0.9 that helps defeating spam.
2006-05-02 @ 22:28
Comment from: EdB [Member] Email
EdBI no longer rely on it and only it. The antispam system is now one third of my approach. I use a bit of .htaccess for undesirable keywords (but not full domain names), a simple turing test using text instead of images, and finally the antispam system. I've no defense against trackback spam but I have it turned off so I don't see a problem there.

I think, as blueyed points out, that part of the problem is that the antispam keyword list is the only tool installed by default, and therefore the only tool most users will have available. Fortunately it still works as a 'stand alone' reaction/protection system for any user even if reporting and retrieving doesn't work. Anyway I think part of the next stable phoenix release should be MULTIPLE methods to combat each type of spam. That'll take the load off each specific method, but spam is spam and will never be stopped.

You still have an email addy for me? Let me know what I need in terms of server resources and I'll see if I can host the antispam component.
2006-05-02 @ 23:43
Comment from: ¥åßßå [Visitor]
¥åßßåI don't use the blacklist at all on my blogs, but I understand that there are a lot of people who rely on it (although phoenix and new antispam methods will hopefully reduce that reliance).

If you need any more resources on top of what EdB can provide then let me know. I currently have a *cough windoze* box sat there doing pretty much nothing.

[off topic]
Any ideas when the dev list will be live again?
[/off topic]

¥
2006-05-03 @ 00:45
Comment from: Dave Brondsema [Visitor]
Dave BrondsemaDitto blueyed and edbennett.

I can't really measure how much I use the centralized blacklist v. reactionary cleanup/block. But I believe it is very important.
2006-05-03 @ 03:50
Comment from: clark [Visitor]
clarkI use the spam blacklist and only it. I don't how my blogs will cope without it... However, I don't have a powerful machine to offer :(.
2006-05-03 @ 09:03
Comment from: Calvin Park [Visitor]
Calvin ParkWow! I use the blacklist a lot since it's the only antispam feature installed by default. Our blogs get spammed like crazy, and without the antispam list I'm VERY concerned that it'll only increase. Unfourtunetly we don't have a server to offer for antispam.b2evolution.net :( Is the 0.9.2 release going to include new spam filters, or do we still have to wait for phoenix?
2006-05-03 @ 12:36
Comment from: Personman [Member] Email
PersonmanI've been depending on the blacklist for despamming skins.b2evolution.net, plugins.b2evolution.net and a few personal sites, too. I'm in favor of getting it back online as soon as possible.
2006-05-03 @ 13:35
Comment from: Ryan Bonham [Visitor]
Ryan BonhamI would be happy to provide some server resources for this.. Please send me an email (ryan at transparent-tech.com) if you are still in need.

Thanks,

2006-05-03 @ 18:22
Comment from: Christopher [Visitor]
ChristopherHi!
Not great to see that the antispam backlist is down.
So i would be happy to provide the backlist on my server.
If i can help, please contact me ( christopher [.at.] new-zone.de).
I hope the global antispam backlist will come back as soon as possibel.
Thanks,
Christopher
2006-05-04 @ 07:42
Comment from: Sig [Visitor]
SigI have noticed a large increase in spam to my site over the last few days. After visiting here I now know why. It's a big pity that the spam database has been taken down. I rely a lot on it. Just an idea. How about making the database subscription based. Like paying a SMALL nominal amount per year.
2006-05-04 @ 08:47
Comment from: Vincent Navarino [Visitor]
Vincent NavarinoHoly *bleep* taking down the central blacklist pretty much *bleeps* us all! Without it, as well as more technology to prevent spam we can go the way of MT!
2006-05-04 @ 19:46
Comment from: Francois Planque [Member] Email
... okay, we'll try to set up a new antispam.b2evolution.net server.
2006-05-04 @ 20:01
Comment from: William Hill [Visitor]
William HillI think it is a bad idea all together. Not having the blacklist is like leaving the back door unlocked overnight. Sure, there are other anti-spam techniques but they are just that...techniques. Most users do not have the skill, time or knowledge to employ everything that should/could be done to ward of spam. Even with my blog employing a major chunk of the anti-spam solutions I still get spam from time to time. My reporting these attacks will help those who are unable or unwilling to block them.

My vote is to get it back up and running as it was. Otherwise many users blogs will simply be a major spam magnet for bots and other idiots who find pleasure in spamming people.
2006-05-05 @ 11:51
Comment from: Bill [Visitor]
BillHowdy, how about changing the "404" to let people know. Thanks for all the hard work.

Requesting abuse list from b2evolution.net...

Latest update timestamp: 2006-05-02 14:24:10
Remote error: Didn't receive 200 OK from remote server. (HTTP/1.1 404 Not Found) (5)

Done.
2006-05-05 @ 13:57
Comment from: Punkie [Visitor]
PunkieI really love the blacklist. It catches a lot of things that I don't catch on my own. I'm hoping that something will work out to bring it back up...
2006-05-05 @ 14:20
Comment from: Heidi [Visitor]
HeidiI don't mind not having it except I feel less useful now when I do blacklist something as it is not helping anyone else.

Of course my antispam measures did rely heavy on keeping the blacklist updated other measures I took, like removing most all stats on my blog sites, also make my blogs less desirable so I get less spam.

I don't mind not having public stats or not allowing comments because it means I spend less time chasing down spam and more time updating my various sites :p

Good luck and I do hope it comes back but it won't be disastrous if it doesn't in my opinion.

Heidi

2006-05-05 @ 15:52
Comment from: Tara C. [Visitor]
Tara C.I delete and block a lot of spam on my own but the blacklist catches things that I don't. I'd say it's 50%/50% for the three sites I administer.

I could help if it was bandwidth you needed. My host is pressed for CPU though.

I'm down with Sig's idea of paying a nominal fee either per month, per quarter, or per year if it helps.
2006-05-05 @ 17:02
Comment from: Vincent Navarino [Visitor]
Vincent NavarinoThe blacklist is one of the great features of b2. Even thinking of discontinuing it is a bad idea.
2006-05-05 @ 17:31
Comment from: Francois Planque [Member] Email
We hope to have the blacklist back over the week-end.
You'll need a tiny little update on your b2evo though.
Stay tuned.
2006-05-05 @ 18:03

Leave a comment


Your email address will not be revealed on this site.

Your URL will be displayed.
(Line breaks become <br />)
(Name, email & website)
(Allow users to contact you through a message form (your email will not be revealed.)