Register Members List Search Today's Posts Mark Forums Read

Reply
 
Mod Options
[GlowHost] Spam-O-Matic - Spam Firewall stops forum spam Details »
[GlowHost] Spam-O-Matic - Spam Firewall stops forum spam
Mod Version: 2.1.2, by GlowHost.com (Coder) GlowHost.com is offline
Developer Last Online: Feb 2018 I like it Show Printable Version Email this Page

vB Version: 4.x.x Rating: (549 votes - 4.79 average) Installs: 4708
Released: 05 Aug 2010 Last Update: 28 May 2013 Downloads: 23558
Not Supported DB Changes Uses Plugins Auto-Template Additional Files Translations External Content  

If you install this mod, please mark this as "Installed."

VERSION 2.1.2 RELEASED 5/28/2013!


About Spam-O-Matic 2.x:
Spam-O-Matic 2.x (SOM) is a spam firewall for your vBulletin Forums version 4.x and later. It prevents known spammers from registering on your forums. If they can't register, they can't spam!

Languages Packs Available
English
German - Courtesy of Alex@bulletin (included in zip)
Romanian - Courtesy of Teascu Dorin's (included in zip)
Spanish - Courtesy of vbluis (included in zip)

How it Works
This data responsible for blocking user registrations comes from the stopforumspam.com (SFS) spammer database. After the user who is trying to register passes the built-in vBulletin registration checks which you have configured in your vBulletin settings, SOM then checks the SFS database to see if the IP, username, or email address that the user is trying to register with has been recently tagged as a known spam source on other forums around the Internet. Also can be configured to check the Akismet service for known comment spam.

This is without a doubt, one of the most important mods that you will be using on your forum.

Other Notable Stuff
It also does a ton of other cool stuff like moderating posts automatically if the post is found in the Akismet database, or if it contains words on your "Bad Words" keyword list which can be configured within the mod itself.

The mod WORKS with vBulletin's new Facebook integration.
This module works with all of the Facebook functions that are built into the vB4 series.
Similar mods do not handle Facebook integration completely.

This module has the ability to submit new spammer details to the StopForumSpam or Akismet databases automatically, all without any new templates or manual template modifications!

This means other forums that are running Spam-O-Matic will not have the same spammer on their forums if you have (automatically) reported the spammer to the SFS database.

Just install the product in the product manager, upload a few files, configure the system and you are done. (Estimated time: 5-10 minutes)

What's new in 2.1.0:
  • Fixed a problem with MySQL engine selection to make mod more compatible with different types of servers.
  • When SOM "Newbies Group" is activated + vB's native option to "Verify Email address in Registration" is activated at the same time, "Users Awaiting Email Confirmation" must click the verification link to become a newbie.
  • Added remove user, post, ban to user profile options in admincp under "Quick User Links"
  • Added German Language Pack
  • Optimized default settings to work with the needs of most forums
  • Added a new coupon for GlowHost (available after you submit a spammer)
  • Several other performance tuning options

Feature List:
  • Optional Public Statistics. Show off to the world how many bad guys you have automatically prevented from posting junk on your forum.
  • Auto-Moderation moderates posts that have links, bad words, and other configurable settings.
  • Auto-Moderation ignores your RSS posts.
  • Registration / Denial Logs available from Admincp > Statistics and Logs
  • Optional "Newbies" Manager! After registration, newly registered users can be placed in a "Newbies" group which has more limited permissions as compared to your regular "Registered Users" group. Newbies will graduate to your Registered Users group based on your required post count settings.
  • Auto-Submit Spammers from the moderation tools menu on each postbit.
  • Remove Posts, threads, PMs, Calendar Events from your spammer in one easy wizard. No double logins needed.
  • Shows other users who signed up with the same IP. (Sleeping Spammers)
  • Optional Affiliate System
  • ~50 customizable settings to fine-tune Spam-O-Matic to your exact needs.


A) StopForumSpam:
The StopForumSpam Module lets you:
  • Check a registrant's IP address.
  • Check a registrant's email address.
  • Check a registrants Username.
  • Disable or enable any of the above checks.
  • Block and log, or, allow and log known spammers.
  • All registration attempts are logged for your viewing pleasure.
  • Several other performance tuning options
If a user (or bot) tries to register on your forum and they pass the built-in vBulletin registration system. (Human verification, email verification, etc), their registration details are then passed to the Spam-O-Matic firewall for further checking.

NOTE: You should use some sort of human verification checking in vBulletin's built-in options to limit the number of requests to the already heavily-loaded StopForumSpam database servers. This will also prevent additional load because SOM will not have to do anything if the bot/spammer fails preliminary registration validation which is built-into vBulletin itself.

It is completely invisible to humans who are registering that this process is taking place. Bots are stopped dead in their tracks.

If a spammer is able to sneak past the first line of defense, and manages to post, then there are secondary, tertiary, and, uh...4th level protections too!

B) Auto-Moderation:
Auto Moderation lets you:
  • Define how many URLs a new member can post before being sent to moderation.
  • Define keywords that will send a post to Auto-moderation (viagra, porn, more here)
  • Define minimum post count to avoid Auto-moderation.
  • Excludes admin and moderators from Auto-moderation.
  • Completely disable Auto-moderation if you don't want it.
C) Akismet Service
Spammers that make it past the StopForumSpam and Auto-Moderation will be checked against the Akismet service. If they manage to make a post, and then are found on Akismet, they can be auto-moderated.

The Akismet settings let you:
  • Set the number of posts that Akismet will check from each user. After this number is exceeded, Akismet checking will be disabled for that user.
  • Auto-Submit spammers that post on your boards back to the Akismet service so that other forums and blogs do not do not receive the same spam.
  • Completely disable the Akismet service.
D) Newbies Manager
Should you decide to enable this option, you can create a new usergroup and then tell Spam-O-Matic about it. Once SOM knows about this usergroup, and once enabled, all new users will be part of the Newbies group. The idea here is that you make a Newbies group that has limited forum permissions. For example, no signatures, no BB code, no images, and etc. This group is created completely in the vB admincp. Spam-O-Matic simply makes it the graduation process to the normal Registered Users group, automatic.
Learn More and Discuss the Newbies Manager here.

Punitive Actions:
If you find a spammer has made it past your 4 front-lines of defense, and has managed to post on your forum, then you can help the community...

The spammer's details can be sent to the Stop Forum Spam and Akismet databases automatically, preventing them from registering or posting on other forums. When other forums do the same, the protection is reciprocated.

Simply moderate a post and choose the option to "Delete Posts As Spam..." an then choose the option to "Ban User." Banning the user sends their details to either Akismet, StopForumSpam, (or both) depending on how you set it up.

API Keys:
API Keys are not required for this system to stop spammers on your forums. But you should obtain them so that your forum can contribute to the real-time block lists.

A StopForumSpam API key is required if you want to contribute to the StopForumSpam blacklists by adding your spammers to their database. By submitting spammers you help keep other forums and blogs clean.

An Akismet API key is required if you want to enable any Akismet auto-moderation features in this module. Akismet API key is not required for all Auto-Moderation functions.

You can obtain a Stop Forum Spam API key which is free from stopforumspam.com.

Get your StopForumSpam API Key Here

You can obtain an Akismet API key from Akismet.com.
Akismet offers free and paid API keys so choose your version based on your situation.

Get your Akismet API Key Here

Why it is better than the other anti-spam solutions on vBulletin.org:
  • Works with all of vBulletin 4 functions including Facebook automatic registration.
  • Report spammers that you find to the Stop Forum Spam Database.
  • Report spammers that you find to the Akismet Database.
  • Built-in Auto-moderation.
  • Auto-moderation rules based on post count.
  • Auto-moderation rules based keywords.
  • Auto-moderation rules based Akismet results.
  • Enable or disable any actions that you do not want.
  • Customizable "Registration Rejected" message.
  • Consolidates 4 popular methods of spam prevention into one product.
  • No Manual Template Modifications!
  • Lots of community support!
======================
Compatibility:
vBulletin 4.0.x

Server Requirements:
Curl or allow_url_fopen must be compiled/enabled into PHP. Ask your web host to enable curl or allow_url_fopen if it is not already available on your server's PHP configuration. (Or just host with GlowHost.com, where it already is

=====================
Donations:

If you like this mod, sure, you can donate!

Donations can be all sorts of things:
1) The "Give Thanks" option in your settings is an optional link back to GlowHost Web Hosting.
2) Tell your friends and others about this mod.
3) If you are in need of web hosting, please consider ordering it from the hosting and development professionals at GlowHost.com who were able to develop this mod to you.
4) Help others who are having trouble with this mod by posting tips and suggestions in this forum thread.
5) Cash! Use the "Support Developer" option on the top right of this page.

When you choose to donate, you are contributing to the product development, bug fixes and new releases for SOM and are helping to feed our hungry developers and their families! In other words, your donations helps to cover the time and money spent to develop this system.

The entire team at GlowHost thanks you for your help and support!

We hope you enjoy the mod!

=====================
Installation:

1) Download the attached file
2) Mark As Installed
3) SOM 2.x does not support updates from the v1.x series.
When upgrading to version 2.x, please, be sure to remove any other existing version of SOM 1.x from the product manager before installing v2.x series. Also make sure to remove /forum/includes/xml/bitfield_glowhostspamomatic.xml from version 1 if you had it installed.

4) Extract the zip file, and view the readme file for the rest of the instructions.

=====================

Original concept credits go to the authors of vBStopForumSpam, MonkeyStop.

Download Now

Only licensed members can download files, Click Here for more information.

Screenshots

Click image for larger version

Name:	logs.png
Views:	10659
Size:	40.7 KB
ID:	126504   Click image for larger version

Name:	postbit-mod-tools.jpg
Views:	9948
Size:	60.7 KB
ID:	126505   Click image for larger version

Name:	stats.jpg
Views:	12342
Size:	48.8 KB
ID:	126506   Click image for larger version

Name:	wizard.jpg
Views:	8456
Size:	54.9 KB
ID:	126507  

Click image for larger version

Name:	admincp.gif
Views:	3263
Size:	18.0 KB
ID:	143256  

Show Your Support

  • To receive notifications regarding updates -> Click to Mark as Installed.
  • If you like this modification support the author by donating.
  • This modification may not be copied, reproduced or published elsewhere without author's permission.
Similar Mod
Mod Developer Type Replies Last Post
Anti-Spam Options [GlowHost] Spam-O-Matic for vB 3.8 (StopForumSpam, Akismet, Auto-Moderation and more) GlowHost.com vBulletin 3.8 Add-ons 239 27 Jun 2018 13:12
Administrative and Maintenance Tools Suppress-o-Matic - Stop database error spam GeekyDesigns vBulletin 3.8 Add-ons 65 12 Sep 2013 20:01
Moderators Functions Akismet Anti-Spam (3.6) Jafo232 vBulletin 3.6 Add-ons 12 15 Jun 2011 15:13
Akismet Anti-Spam Jafo232 vBulletin 3.5 Add-ons 97 14 May 2011 03:07
Moderators Functions Akismet - spam detection El_Muerte vBulletin 3.6 Add-ons 58 22 Feb 2011 14:18

  #226  
Old 12 Sep 2010, 13:50
cagbaazee cagbaazee is offline
 
Join Date: Jul 2007
Hi.. I have install it but cannot find where is it in my forum. Can u tell me where it is locate. Thanks
Reply With Quote
  #227  
Old 12 Sep 2010, 14:05
GlowHost.com's Avatar
GlowHost.com GlowHost.com is offline
 
Join Date: Nov 2005
Originally Posted by BadgerDog View Post
Installed 1.27 yesterday ...

Submitted a test case (not in their database) by manual submission to StopForumSpam site at that time ....

As of today, it still hasn't appeared ... Wouldn't it be a good idea to have feedback to the manual submitter in the log or on the screen that this action has been accepted by their site etc.?

Second observation ...

Just had my first legitimate spam poster since 1.27 installed. They made one post which appeared as moderated, so I assume your Akismet check got them as I don't have the moderate posts enabled in your in 1.27? Anyway, I selected "delete as spam" and chose to ban the user as well as delete all their posts. When I submitted it, the screen cleared and some strange black (maybe dark gray) screen flashed by, one that has a lot of text on it, however the text was dark against the dark background, so I really couldn't read it except it was an entire screen full of data (looked like a forum display maybe?).

The screen returned to a readable format and I went to check the StopForumSpam site. The name of the user I banned was immediately there as the last name in my spammers listing, so, at least this test seemed to work, but the manual one hasn't so far ..

Hope this helps ...

Regards,
Badger
I suggest using delete posts as spam until version 2 comes out which is a lot slicker than this version.

As for the logs and indication of submission success, it is also in version 2.
__________________
GlowHost.com - vBulletin Web hosting and managed dedicated servers since 2002.
Hot Deal! Free vBulletin License with Hosting
Reply With Quote
  #228  
Old 13 Sep 2010, 01:00
sas forum sas forum is offline
 
Join Date: Jan 2008
Originally Posted by djbaxter View Post
You've been wasting your time. If the spammer is already in the rejected logs, then SFS already has them. You've been submitting duplicate information.

I checked with SFS. If they are in there today, and I do not report them, then maybe tomorrow they will have been in there 11 days total (since last reported), with nobody reporting them because they are already in there.

If someone has their spam-o-matic to only go back 10 in the SFS DB, then this spammer would not have given a hit if the last submission was 11 days back (not within the 10 day window). If I had submitted them "yesterday", then they would have got a hit and I could have helped keep one spammer off someone elses site.

Not sure if that make sense, but eventually, if the spammers stop getting reported, based on how far you set the spam-o-matic to go back in the SFS DB, if they are never reported after the ifrst reporting, eventually they will not get a hit for someone. It is actually in everyone's best interest to report them even if they are already in there. This keeps their list up to date so they are still shown as "active".

Hope that made sense above.
Reply With Quote
  #229  
Old 13 Sep 2010, 03:04
sas forum sas forum is offline
 
Join Date: Jan 2008
Originally Posted by cagbaazee View Post
Hi.. I have install it but cannot find where is it in my forum. Can u tell me where it is locate. Thanks
Go to AdminCP / Settings / Options / then scroll through the list and look for Glowhost - Spam-o-matic.

You can also see the logs at AdminCP / Statistics and Logs / Glowhost-Spam-o-matic logs
Reply With Quote
  #230  
Old 13 Sep 2010, 12:43
GlowHost.com's Avatar
GlowHost.com GlowHost.com is offline
 
Join Date: Nov 2005
Originally Posted by VIPER-MAN View Post
This is working somewhat but I am encountering the same problem others have mentioned .... it conflicts with the automatic RSS poster ... I have an ADMIN account (News) that automatically posts based on various RSS feeds ... SpamOMatic puts these threads in Moderation mode no matter what I try. The NEWS user has over 3,000 posts and my settings have the cut off at 6 posts so it should not be moderating this user.

My settings:
---------
vBulletin Spam Scanning: Disabled
Akismet: Disabled
Auto-Moderation: Enabled
Min Post Count: 6
Url Count: 0

It should be ignoring the NEWS user and it doesn't -- throws every RSS post in moderation. I've tried all variations with no luck ... any ideas? I don't want to uninstall as it really has curbed the spam registrants!!!
By the way, if someone wants to show me this in action I might be able to find a fix for it faster if it is really an issue with Spam-O-Matic. I cannot duplicate it so if someone wants to let me login to their admincp to see the problem it might lead to an answer sooner. I need to be able to duplicate it in order to fix it.


Is there any way to add an option where all registrations that are denied automatically get submitted to SFS?
As another member mentioned there isn't much point to that, though your followup post makes sense in relation to keeping them active on the SFS list.

However the AIM is to report people who have actually posted spam on your boards, not to report the ones that tried to register using information already found in the SFS DB. That could lead to more false positives then needed especially in regards to IP addresses.

Originally Posted by sas forum View Post
...this is a great mod, my favorite and most used for sure. This mod is actually so useful, that I would have paid money to get my hands on it.

Thanks for everything.
You are welcome You can still pay money if you like A nomination for MOTM would be good, we are starting to trail in the rankings!
__________________
GlowHost.com - vBulletin Web hosting and managed dedicated servers since 2002.
Hot Deal! Free vBulletin License with Hosting

Last edited by GlowHost.com; 14 Sep 2010 at 19:32.
Reply With Quote
  #231  
Old 15 Sep 2010, 14:20
Alfa1's Avatar
Alfa1 Alfa1 is offline
 
Join Date: Dec 2005
Its nice to see 3 important hacks combined.
Is there any chance to also get:
- minimal registration speed check
- hidden registration fields (that only bots can see)

That would make this complete.
Reply With Quote
  #232  
Old 15 Sep 2010, 14:52
GlowHost.com's Avatar
GlowHost.com GlowHost.com is offline
 
Join Date: Nov 2005
Its possible.

I like the sound of the first one but am not sure how useful the second one would be since the spammers that code the bots are people, and they generally are going to want to see the fields that they are trying to defeat when they program their bots.

If a bot doesn't know what to put in a field, it will be bank, the same as a human who can't see the field. This might also cause accessibility problems for some people who rely on bots like screen-readers to do things for them.

Maybe I missed the concept of the second idea though.
__________________
GlowHost.com - vBulletin Web hosting and managed dedicated servers since 2002.
Hot Deal! Free vBulletin License with Hosting
Reply With Quote
  #233  
Old 15 Sep 2010, 15:53
Alfa1's Avatar
Alfa1 Alfa1 is offline
 
Join Date: Dec 2005
Many vb boards have mandatory custom profile fields. Spam bots need to fill these in to register. Every board has different custom fields, so spammers have little chance to anticipate. It would be easy to add invisible fields with standard names. If you add a hidden profile field named 'Interests' then chances are that a bot will recognize this and fill it in. There used to be a addon that did this, but cant find it ATM.

Two other suggestion that would make this anti-spam suite complete are:
  • Bad behaviour: http://www.bad-behavior.ioerror.us/d.../how-it-works/
  • Option to disallow disposable email domains from registration. There is a list here. People can easily add the list to the email ban list, but it would be far more useful to have a centrally updated list. (doesnt need to be updated more than once every few months) And most admins do not realize the problems that disposable email addresses pose.
BTW: Many boards are getting a lot of profile spam these days. Does this addon deal with that or is that something that needs an additional solution?
Reply With Quote
  #234  
Old 15 Sep 2010, 16:34
GlowHost.com's Avatar
GlowHost.com GlowHost.com is offline
 
Join Date: Nov 2005
Thanks for the suggestions, it would be good to have a central DB of disable emails, I agree.

This does not deal with profile spam, or blog spam at the moment. Those are planned for a later release. The primary purpose is to block registrations of known-spammers, then moderate the ones that are able to sneak past so that they never get as far as being able to spam in the first place.
__________________
GlowHost.com - vBulletin Web hosting and managed dedicated servers since 2002.
Hot Deal! Free vBulletin License with Hosting
Reply With Quote
  #235  
Old 15 Sep 2010, 21:11
Alfa1's Avatar
Alfa1 Alfa1 is offline
 
Join Date: Dec 2005
Originally Posted by GlowHost.com View Post
then moderate the ones that are able to sneak past so that they never get as far as being able to spam in the first place.
Does that mean that you aim to add cookie based multiple account detection for banned accounts?

This addon works very well: Multiple Account Detection & Prevention
It seems a perfect combination with your addon. (as is vmail)
Reply With Quote
  #236  
Old 15 Sep 2010, 21:40
GlowHost.com's Avatar
GlowHost.com GlowHost.com is offline
 
Join Date: Nov 2005
Probably not. Only people use cookies and spammers are rarely people. The other thing is people can delete cookies.

What I meant was that if they get past the blacklist checks then in the current version if they do anything "spammy" they will generally be caught by auto-moderation and moderated.

In version 2 all new members are placed in a new usergroup which has (configurable) limited permissions. If they make it past X posts they will graduate to the standard registered users group. If they do anything spammy in either group they will be moderated, until they are no longer checked for automatic moderation based on your postcount settings.

Your spammer would have to be a very persistent and bored person to make it to the registered users group and if they are that much of a pain in the butt then banning their IP from your server is always an option. I think it would be a rare day.
__________________
GlowHost.com - vBulletin Web hosting and managed dedicated servers since 2002.
Hot Deal! Free vBulletin License with Hosting
Reply With Quote
  #237  
Old 15 Sep 2010, 22:20
Alfa1's Avatar
Alfa1 Alfa1 is offline
 
Join Date: Dec 2005
I do use a usergroup for new users, which they can only get out of if they receive 5 reputation points. That does work like a charm. Post count is something that spam bots seem to recognize, as they just start posting like crazy to get more than X posts. That caused me to put it the post count at 50. My staff catches them well before they can make that, as they are there around the clock.

I would expect that same about cookies, but I actually catch a very substantial number of spammers trough cookie. Happens every day.

Even after all of the above (including all of my suggestions and multiple account detection) we still get spammers, that try to circumvent the links block, in various creative ways. All these measures did get rid of 99% of all spam though, so its vital functionality for me.

To get an idea: I get 7.000 registrations attempts per month, of which 4.000 are successful and have confirmed their email and passed all spam checks. I have 3.000 banned members.

Last edited by Alfa1; 15 Sep 2010 at 22:33.
Reply With Quote
  #238  
Old 16 Sep 2010, 03:44
maidos maidos is offline
 
Join Date: Jul 2006
a suggestion for spammers who already are a memebe on the board, how do you preven them, you know they dont only spam by posting thread but they also spam all members on pm with the llinks so how can this mod prevent further spam
Reply With Quote
  #239  
Old 16 Sep 2010, 17:46
GlowHost.com's Avatar
GlowHost.com GlowHost.com is offline
 
Join Date: Nov 2005
There is not much you can do about existing spammers with this mod. This mod prevents them from getting on the boards in the first place. You should probably install it now to prevent more bad guys from signing up, then start working on your existing spammers using alternative means.
__________________
GlowHost.com - vBulletin Web hosting and managed dedicated servers since 2002.
Hot Deal! Free vBulletin License with Hosting
Reply With Quote
  #240  
Old 17 Sep 2010, 03:19
onehost onehost is offline
 
Join Date: Jul 2006
here is one.

I have people / spammers registering on my forum...but afterwood disappear
into nothingness, no trace of the members name or anything...

this is what i find in spam matic log:

Venusian Arts PUA Spam-O-Matic Tagged ip - 98.64.196.143 - Spammer Found but allowed

It says it has identified the spammer, but has allowed the spammer.

So i can not find any record of the member in non-validated to registered to banned,
the member record is just no where to be found....

on another signup attempt, I get this one:

No Username Submitted Spam-O-Matic Tagged email - (email) Spammer Found but allowed.


Whats going on?
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Mod Options

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 11:07.

Layout Options | Width: Wide Color: