Lack of interest Centralized Database of Spam Email Domains

This suggestion has been closed automatically because it did not receive enough votes over an extended period of time. If you wish to see this, please search for an open suggestion and, if you don't find any, post a new one.

Sal Collaziano

Well-known member
I know this is a first world problem that nobody is going to care about - but I'm just going to voice my opinion anyway. Delete it if you want.

Most people only run one XenForo, but since I run, 15 (and 30 once I replace all my vBulletins), this kind of thing matters to me...

There needs to be a centralized database of email domains that administrators block in their AdminCP (and can opt into). I spend a lot of time denying new signups that get caught in the moderation filter. Across all my forums, this becomes aggravating and time consuming. I keep adding new email domains, and keep adding new email domains, and keep adding new email domains, and every time I add more, new ones just keep coming in. It never ends.

It would be nice, and would save a lot of time, if these address could be imported either on a set time scheduled, or on the fly during registration, or on demand - so that I never have to see them in the first place.

Have the system set a certain amount of reports to consider them "verified". Or allow a certain amount of reports to reach a pre-specific threshold before your forum "believes" the database.

I know there are add-ons that do something similar for email addresses. However, every day people register new B.S. spam domains. Like @gmailhost.net. So I'll block that one. The there's gmailhost1.net, and 2, and 3, and 4...
 
Upvote 0
This suggestion has been closed. Votes are no longer accepted.
I think rather than trying to block specific domains, it would be more beneficial to use the already established DNSBL & Project Honeypot which already exists within XenForo Spam Management.

You could have new domains poping up all the time on the same ip addresses already in the the lists maintained by DNSBL and Project Honey Pot. You would not get very far if you're just looking at domain names and these already very well established span blockers already exist and work well.

These already established lists will always be more robust than something that XenForo would take on by itself. The anti-spam wheel has already been invented.

Maybe you need to tighten your spam settings for the options that already exist in XenForo or make sure you use all the options if you don't already.
 
I think rather than trying to block specific domains, it would be more beneficial to use the already established DNSBL & Project Honeypot which already exists within XenForo Spam Management.

You could have new domains poping up all the time on the same ip addresses already in the the lists maintained by DNSBL and Project Honey Pot. You would not get very far if you're just looking at domain names and these already very well established span blockers already exist and work well.

These already established lists will always be more robust than something that XenForo would take on by itself. The anti-spam wheel has already been invented.

Maybe you need to tighten your spam settings for the options that already exist in XenForo or make sure you use all the options if you don't already.
Perhaps. I do use DNSBL and Project Honey Pot. I just keep getting new spam domains registering and then I need to add them individually into every forum (into the banned emails area) as they're used to sign up. It would be nice if there were a pre-verified list already existing that I could automatically download into my XF. Heck, I'd even be happy with a copy/paste list that I manually update every week...
 
I think this already exists, it's StopForumSpam. Everyone should sign up for a key, when you ban spammers they get added to the central database.

I maybe get 1-2 spam posts per month and they get stuck in auto-moderation so typically users never see them, these are my settings:

CloudFlare set to Medium
Enable email confirmation
Use reCAPTCHA v2

1569696110057.webp
1569696147748.webp

The most important setting is:
Reject registration when this many warning flags are detected: 2

That way if the IP and the email match something on StopForumSpam, it's just auto rejected. Might get a false positive with just 1 but not typically with both.

You may also want to use a disposable email block list, which I recently contributed to:

Hopefully this will help you. StopForumSpam is awesome.
 
I think this already exists, it's StopForumSpam. Everyone should sign up for a key, when you ban spammers they get added to the central database.

I maybe get 1-2 spam posts per month and they get stuck in auto-moderation so typically users never see them, these are my settings:

CloudFlare set to Medium
Enable email confirmation
Use reCAPTCHA v2

View attachment 211244
View attachment 211245

The most important setting is:
Reject registration when this many warning flags are detected: 2

That way if the IP and the email match something on StopForumSpam, it's just auto rejected. Might get a false positive with just 1 but not typically with both.

You may also want to use a disposable email block list, which I recently contributed to:

Hopefully this will help you. StopForumSpam is awesome.
I was really looking for something that got the domain rather than the first part of the email address - but I'll drop the "Reject registration" setting to "2" (down from 3) and see how that goes...

How do you have the next two options (Only count flags recorded within the last, Only count flags recorded at least this many times) set? I have them at 7 and 5...
 
While this does nothing with email address you might like this addon to fight bots registering on your forum,
 
If you are more interested in the domain name, then using the banned email lists will help, this only covers disposable emails tho.

These are the other settings I use:

Only count flags recorded within the last: 14 days

Only count flags recorded at least this many times: 4

Hope it helps, I have had a really good outcome with this setup
 
If you are more interested in the domain name, then using the banned email lists will help, this only covers disposable emails tho.

These are the other settings I use:

Only count flags recorded within the last: 14 days

Only count flags recorded at least this many times: 4

Hope it helps, I have had a really good outcome with this setup
Thank you. I just had to go and ban @nerpmail.com from every one of my forums... Manually... It's annoying...

Today's domain to ban across the board is wapmail.net
 
I now have 18 pages of banned email domains - and that list continuously grows as the spammers just keep creating new ones. Very frustrating and surprising that nobody else is dealing with this. I guess it's no big deal when you only run one XenForo.
 
See



 
I now have 18 pages of banned email domains - and that list continuously grows as the spammers just keep creating new ones. Very frustrating and surprising that nobody else is dealing with this. I guess it's no big deal when you only run one XenForo.



There is an infinite amount of email addresses bots can use. The banned email lists are almost useless.
 
I now have 18 pages of banned email domains - and that list continuously grows as the spammers just keep creating new ones. Very frustrating and surprising that nobody else is dealing with this. I guess it's no big deal when you only run one XenForo.


130k disposable emails blocked with this list, it blocks 30 disposable email registrations everyday on my site
 

130k disposable emails blocked with this list, it blocks 30 disposable email registrations everyday on my site
I like the sounds of this. The ONLY little problem is that this list just keeps growing daily. Is there no way to have all these domains updated at a single location that XenForo can refer to during each registration? It would probably be a decent paid service for a small monthly or annual fee.
 
Top Bottom