Trac spam etc.

I've made some small modifications to the trac site due to latest spam
waves in the ticket comments. Now all accounts need to have their
email verified before being able to login. I doubt this will make any
significant improvement, but at least it's another step the spammers
need to take before posting spam. Also, I did notice that some spam
accounts in the db didn't have a valid email set.

This may mean that all you legit users get a mail about confirming
your email. Sorry about the inconvenience.

Ultimately, it would be nice if Trac got some decent anti spam
features but they are really not fast in that aspect.

* The most immediate feature would be the possibility to delete
comments ( http://trac.edgewall.org/ticket/454  - ticket been around
since 0.7)
* Another feature would be mass-delete comments from a specific user
* Blocking of posts including external urls (+ some sort of whitelist
of valid urls)
* etc.

Unfortunately, a lot (all?) of the spam in our trac seems to come from
real humans which makes conventional techniques less useful. Not sure
what to do.

If anyone has experience with (good) anti-spam measures in trac,
please let us know (reply to this mail)

-Isak

---------------------------------------------------------------------
To unsubscribe, e-mail: autopackage-dev-unsubscribe-OfajU3CKLf1/[email protected]
For additional commands, e-mail: autopackage-dev-help-OfajU3CKLf1/[email protected]