| View previous topic :: View next topic |
| Author |
Message |
whoo
Forum Queen
Joined: 25 Dec 2004
Posts: 1293
  
votes: 19
|
 Posted: Thu Apr 14, 2005 20:51 Post subject: |
 |
|
you're welcome 
for what its worth, wordpresss has about 20 plugins that provide some sort of deterrant to spam, and I raised quite a stink with a few ppl posting an entry about wordpress and spam on my blog (plugins being under-rated, and an htaccess being the answer). Today i got a bit of a reprieve when I found another more-intelligent-than-I, wp user that also uses an .htacess and has ditched plugins all together. His .htaccess is up for looking at too @ http://www.tomrafteryit.net/htaccess.txt
_________________
Do you use last.fm?
Try out my nifty badge generator!
|
|
| Back to top |
|
 |
Bryce I
New Poster
Joined: 06 Jan 2005
Posts: 7
|
| Posted: Thu Apr 14, 2005 22:02 Post subject: another wp convert |
|
|
| Well, whoo, also for what it's worth, I pointed a friend of mine who maintains a large group blog running wp to this thread, and he is now eternally grateful, so chalk up one more convert. |
|
| Back to top |
|
|
whoo
Janitor
Joined: 25 Dec 2004
Posts: 1293
votes: 19
|
| Posted: Fri Apr 15, 2005 0:25 Post subject: |
|
|
woohhhooo! ya know, bryce, i really love plugins, and i truly love wordpress, BUT if you spend any time reading their support forums, the majority of the spam plugins are like Vioxx; they might work, they might not, and they all cause liver damage. 
You would think with all of those plugins available, that there would not be ANY threads about spam over there, and yet there still are, every day.  My goal if I were developing any sort of web based app would be to eliminate the need for ANY spam threads, regardless of the form the solution took. Thats just me, though.
_________________
Do you use last.fm?
Try out my nifty badge generator!
|
|
| Back to top |
|
|
captsolo
Seasoned Poster
Joined: 19 Aug 2003
Posts: 70
|
| Posted: Tue Apr 19, 2005 13:35 Post subject: |
|
|
Whoo, after moving /htsrv to another location I was getting quite a lot error messages (in apache error log) that trackback.php was not found. This does not influence the work of b2evo, but still i'd prefer to get rid of these messages.
Would it make sense to redirect those coming to the old /htsrv location? To their own IP address or something? And if yes, what would be the appropriate .htaccess lines?
_________________
Best regards,
CaptSolo |
|
| Back to top |
|
|
whoo
Forum Queen
Joined: 25 Dec 2004
Posts: 1293
votes: 19
|
| Posted: Wed Apr 20, 2005 0:07 Post subject: |
|
|
| captsolo wrote: |
Whoo, after moving /htsrv to another location I was getting quite a lot error messages (in apache error log) that trackback.php was not found. This does not influence the work of b2evo, but still i'd prefer to get rid of these messages.
Would it make sense to redirect those coming to the old /htsrv location? To their own IP address or something? And if yes, what would be the appropriate .htaccess lines? |
ahhh, so you are seeing spam attempts at the old location for trackbacks? yes you can send them back to their own ip
use this in the old dir :
| Code: |
RewriteEngine on
RewriteRule ^(.*) http://%{REMOTE_ADDR}/ [R=301,L]
|
note that you will still see them in your apache logs..
you can remove the "R=301," (just leave the L) also, but youre still gonna see them.
_________________
Do you use last.fm?
Try out my nifty badge generator!
|
|
| Back to top |
|
|
Bryce I
New Poster
Joined: 06 Jan 2005
Posts: 7
|
| Posted: Thu Apr 21, 2005 8:35 Post subject: candygenius no longer available |
|
|
FYI, if anyone has read this far, and is looking for information linked to in point #5 in whoo's original post re: pinapple proxy, that page is no longer publicly available, although whoo's directions should still work.
However, I'm guessing that the pinapple spammer has changed something recently. Can anyone confirm? I'm not being targeted, but a friend of mine is, and I've noticed a lot of spam this morning on his blog. |
|
| Back to top |
|
|
a.shane
New Poster
Joined: 21 Jan 2005
Posts: 5
|
| Posted: Sat May 14, 2005 0:47 Post subject: Odd happenings with my .htaccess |
|
|
Thanks for this thread! I finally got sick enough of spam to get into the hardcore prevention. I slamed into it head first and now I have a head ache.
What went wrong:
I have to use the www in www.racerx.info now. Before the www wasn't needed.
RewriteCond %{HTTP_REFERER} type lines like in Whoo's original post in .htaccess seem to catch ALL links. Even if I hand type the address.
I'm guessing my server doesn't support mod-rewrite?
I tried this test from Whoo to another person and it did not work for me. My page loads normaly instead of loading Whoo's as it should.
| Code: |
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http://www.geencommentaar.nl.*$ [NC]
RewriteRule ^(.*) http://www.village-idiot.org/ [R=301,L] |
I settled on the .htaccess Kiesow posted for people with out mod-rewrite. I'll use that untill I get Micfo to turn on mod-rewrite. Has anyone expanded on Kiesow's version? I can't be as good as Whoo's. Its just to short!
While I'm wating on Micfo, anyone know how to get my url to work with or with out the WWW?
-Shane
www.racerx.info |
|
| Back to top |
|
|
Dan
New Poster
Joined: 16 May 2005
Posts: 11
|
| Posted: Tue May 31, 2005 10:19 Post subject: Don't like blacklists? |
|
|
I'm not a fan of blacklists. They steal my time (in upkeep) and my webhost's CPU usage (in execution).
The following htaccess entry would block any referrer spam I've received to date.
| Code: |
# Try to prevent referrer spam
RewriteCond %{HTTP_REFERER} "!^http://www.yourdomain.com/.*$" [NC]
RewriteCond %{QUERY_STRING} "disp=stats"
#RewriteRule .* - [F]
RewriteRule ^(.*) http://%{REMOTE_ADDR}/ [R=301,L]
|
The commented out rule would be an alternative to the rule I'm using (it gives a 403 error instead of a 301 redirect back to the source).
Maybe this is just a temporary solution, but all referrer spam I've seen (so far) has targetted the stats display page. What is the experience of other users? |
|
| Back to top |
|
|
Ioo
New Poster
Joined: 09 Mar 2005
Posts: 24
|
| Posted: Tue May 31, 2005 16:48 Post subject: |
|
|
Okay I added the
| Code: |
# Try to prevent referrer spam
RewriteCond %{HTTP_REFERER} "!^http://www.bushsamerica.com/.*$" [NC]
RewriteCond %{QUERY_STRING} "disp=stats"
#RewriteRule .* - [F]
RewriteRule ^(.*) http://%{REMOTE_ADDR}/ [R=301,L] |
to my .htaccess
I am still getting span from there, so I ask... what am I doing wrong? |
|
| Back to top |
|
|
Dan
New Poster
Joined: 16 May 2005
Posts: 11
|
| Posted: Tue May 31, 2005 17:08 Post subject: |
|
|
Ioo
You did not give much background. You have Apache with mod_rewrite? .htaccess is in your document root? Maybe change "disp=stats" to ^.*disp=stats.*$ -- shouldn't matter, I don't think. |
|
| Back to top |
|
|
Ioo
New Poster
Joined: 09 Mar 2005
Posts: 24
|
| Posted: Wed Jun 01, 2005 5:14 Post subject: |
|
|
Dan,
I will have to ask the sys admin, about the rewrite thing, because I am not sure.. HTML I am there, php and I am kinda there, this part hear, I have no clue what so ever
I will find out ant let you know, thanks |
|
| Back to top |
|
|
Elpie
Seasoned Poster
Joined: 17 Jun 2005
Posts: 40
|
| Posted: Fri Jun 17, 2005 21:56 Post subject: |
|
|
Hi all,
Thanks Whoo for starting an excellent thread.
I have an .htaccess which I would appreciate feedback on.
| Quote: |
# Apache configuration for the blog folder
# this will select the default blog template to be displayed
# if the URL is just .../blogs/
<IfModule mod_dir.c>
DirectoryIndex index.php
</IfModule>
# this will make register globals off in b2's directory
# just put a '#' sign before these three lines if you don't want that
<IfModule mod_php4.c>
php_flag register_globals off
</IfModule>
# this is used to make b2 produce links like http://example.com/archives/m/200209
# if you renamed the file 'archives' to another name, please change it here too
<Files archives>
ForceType application/x-httpd-php
</Files>
# Last updated 30th May 05
RewriteEngine On
RewriteBase /
# Fix for comments
RewriteCond %{HTTP_REFERER} !^http://mydomain.com/.*$ [NC]
RewriteCond %{REQUEST_URI} ^.*comment_post\.php$
RewriteRule .* - [F]
# Bad referers and pinapple start here
# Get the pinapple proxy first
RewriteCond %{HTTP:VIA} ^.+pinappleproxy [NC,OR]
# Atrivo Technologies
deny from 69.50.160.0/19
# Bad TLDs not covered above
RewriteCond %{HTTP_REFERER} \.biz [NC,OR]
RewriteCond %{HTTP_REFERER} \.ru [NC,OR]
# Try to prevent referrer spam
RewriteCond %{HTTP_REFERER} "!^http://www.mydomain.com/.*$" [NC]
RewriteCond %{QUERY_STRING} "disp=stats"
#RewriteRule .* - [F]
RewriteRule ^(.*) http://%{REMOTE_ADDR}/ [R=301,L]
|
I noticed that Atrivo has not been mentioned in other posts.
I recently moved my blog (still within the same domain, but different name) which made it easier to see who is hitting it. In the first 10 minutes after the change I had a number of IP's in the Atrivo block appearing in my error logs.
If you want to see what sites are hosted by Atrivo, check this out...
http://www.bluetack.co.uk/foru...topic=9119
There is more info on http://www.rojisan.com/spam/ar...vocom.html
and http://www.thebishop.net/geodo...lpers.html
In the 24 hours after my blog was moved I was hit every 10 seconds by 5 IP's within the Atrivo block. Since I added the "deny" = nothing.
If you are getting hit on by any of the domains listed in that first link I gave I would recommend you take steps to block. Seems like this host has been around a while and has no intention of enforcing its own AUP. |
|
| Back to top |
|
|
whoo
Forum Mom
Joined: 25 Dec 2004
Posts: 1293
votes: 19
|
| Posted: Sat Jun 18, 2005 10:52 Post subject: |
|
|
WOW! I cant say that I have ever been hit by them but I will be on the look out now. Nice catch
_________________
Do you use last.fm?
Try out my nifty badge generator!
|
|
| Back to top |
|
|
personman
SuperGuru
Joined: 09 Feb 2005
Posts: 2178
votes: 15
|
| Posted: Wed Jul 13, 2005 9:01 Post subject: |
|
|
I wondered if that might be the case. Can't he just add
| Code: |
| deny from 82.***.25.** |
to his .htaccess file? Of course, you'll need to use the real ip address. That will prevent this person from any access to your web site. If his IP changes (because his ISP uses dynamic addressing or becuase he goes through a proxy) then this will stop working. |
|
| Back to top |
|
|
DirkVanuitDelft
New Poster
Joined: 31 May 2005
Posts: 1
|
| Posted: Wed Jul 13, 2005 9:33 Post subject: |
|
|
| Works like a charm, I'm so happy! Thanks a lot, guys! . |
|
| Back to top |
|
|
|
Home
Search
Usergroups
Register
Log in
