Re: coordinated spam attack on wikicreole.org and jspwiki.org

> Glad to hear that 2.6 has some capabilities in these areas. It does  
> leave some sites in a bit of a bind, though. (Do I want to run on a  
> version blessed as being production-ready, or one that provides the  
> spam controls that most production sites will need?)

The 2.6 SpamFilter *should* be trivially backportable to 2.4.   
Anybody want to send me a patch; I'll gladly release a 2.4.105 with  
it...

(If anyone wants to take over maintenance of 2.4, this would be a  
good time to step up, by the way.)

> I think it could help if combined with a way to blacklist  
> registrations from certain email address patterns. So for example,  
> if we see that all of the spam users are registering with  
> [email protected] addresses, we could blacklist spammer.com.  
> Currently, even if that capability existed, the spammer could just  
> put in whatever email address they wanted (since there will be no  
> validation step). With the validation step in place, at least  
> they'd have to keep coming up with new email addresses/domains to use.

Of course, if they're using hotmail.com or gmail.com... ;-)

In 2.6, there is a way to moderate registrations (and remove user  
accounts), so that might be really useful as well.

/Janne