The world as we know it has just ended

b/Other publicado por u/Dream of Omnimaga May 21, 2015, 05:45:42 AM

The world as we know it has just ended

We just got a spambot that uses IPv6

http://codewalr.us/index.php?action=profile;u=354

Inicia sesión o crea una cuenta para dejar un comentario

u/novenary May 21, 2015, 06:01:55 AM

Oooh crap. Abandon ship ! I repeat: abandon ship !

u/Dream of Omnimaga May 21, 2015, 06:11:24 AM

Yes. That said I think I have read a 2014 post on Stop Spam forums that said they were trying to implement IPv6 support.

Technically, the mod we have that checks their database to detect spam accounts lets us block IPv6 registrations or require them to have an admin validate their account, which is why @netham45 and @Phero accounts required manual activation. It isn't an anti-spam feature, but rather a glitch that causes IPv6 users to cause an error when being checked. We decided to make CW approve registrations by default when an user could not be checked now, although we will most likely revert that change if spambots start getting through it.

SMF 2.0 by itself doesn't even support IPv6, but we use a mod that adds partial support for it (in the online list it still shows 0.0.0.0). Without the mod, banning a troll that uses IPv6 would be impossible.

u/netham45 May 21, 2015, 06:14:31 AM

Huh, I just thought you guys required activation for everyone. Honestly didn't even know I had connected over IPv6.

u/Dream of Omnimaga May 21, 2015, 06:43:00 AM

Oh, nah, it was just because you had IPv6, so when you tried signing up, the anti-spam was unable to check Stop Forum Spam database. Otherwise there is no activation required. When activation is required, we can check if it's not a false positive so then we can approve or reject the account, with the option to either send an e-mail in the process or require the user to manually activate his account afterward. Of course I cannot reject accounts myself though so the account approval queue sometimes piles up

That reminds me, I should disable the CAPTCHA to see if it leads to more spam. My understanding is that default ones are totally useless and we could probably do away with it, but we would have to keep an eye on it in case we wake up to 5000 spam posts.

Last Edit: May 21, 2015, 06:45:00 AM by DJ Omnimaga

u/Snektron May 21, 2015, 06:50:26 AM

Also the 20 second wait time on the search bar is pretty brutal

u/Dream of Omnimaga May 21, 2015, 06:54:39 AM

I don't have this problem

. What browser/OS do you use? For me it's almost instant.

EDIT: Unless you mean StopForumSpam search engine rather than CW's?

u/Unicorn May 21, 2015, 08:19:01 AM

I think he means between searches.

u/Snektron May 21, 2015, 08:42:19 AM

Yeah after i've searched and need to search again

u/Dream of Omnimaga May 21, 2015, 06:16:04 PM

Oh right. I should try to find a way to remove that only for regular members. I might set it every 5 seconds, but I was afraid that spambots or web crawlers would DDoS our site via the search feature like what happened to Omni and Cemetech in the past.

u/alexgt May 21, 2015, 07:23:09 PM

Quote from: DJ Omnimaga on May 21, 2015, 06:16:04 PM
Oh right. I should try to find a way to remove that only for regular members. I might set it every 5 seconds, but I was afraid that spambots or web crawlers would DDoS our site via the search feature like what happened to Omni and Cemetech in the past.

I did that to my friends minecraft server

.

What is IPv6? It sound really bad

u/Snektron May 21, 2015, 07:43:14 PM

It's just another version of ip addresses

u/novenary May 21, 2015, 07:53:53 PM

Quote from: DJ Omnimaga on May 21, 2015, 06:16:04 PM
Oh right. I should try to find a way to remove that only for regular members. I might set it every 5 seconds, but I was afraid that spambots or web crawlers would DDoS our site via the search feature like what happened to Omni and Cemetech in the past.

Well our server is much faster than Omni's old thing.

u/Dream of Omnimaga May 21, 2015, 09:25:09 PM

Quote from: alexgt on May 21, 2015, 07:23:09 PM
Quote from: DJ Omnimaga on May 21, 2015, 06:16:04 PM
Oh right. I should try to find a way to remove that only for regular members. I might set it every 5 seconds, but I was afraid that spambots or web crawlers would DDoS our site via the search feature like what happened to Omni and Cemetech in the past.
I did that to my friends minecraft server .

What is IPv6? It sound really bad

It's because they ran out of IP addresses for IPv4.