1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

XF 1.5 How do I turn off the flood filter?

Discussion in 'XenForo Questions and Support' started by CarpCharacin, Oct 11, 2016.

  1. CarpCharacin

    CarpCharacin Active Member

    How do I turn off the 30 second flood filter? @ozzy47 wants me to turn it off.
     
  2. ozzy47

    ozzy47 Well-Known Member

  3. CarpCharacin

    CarpCharacin Active Member

    Thanks. It is disabled now.
     
  4. Martok

    Martok Well-Known Member

    I would recommend that you don't bypass the flood filter for the Registered user group. If a spammer registers and isn't picked up by the spam settings, they could post thousands of posts in a very short time.

    If you are going to use the bypass flood check, do it for a secondary user group that more trusted users are promoted to.
     
    maszd likes this.
  5. CarpCharacin

    CarpCharacin Active Member

    I have stopforumspam and the new google recaptcha.
     
  6. Martok

    Martok Well-Known Member

    And both of those can be bypassed by human spammers.

    I've seen have several threads over the years with XenForo admins disabling the bypass flood check and they have been spammed with thousands of posts. You would be foolish to turn off the flood check altogether, you should turn it off only for a secondary user group of trusted users. You have been warned!
     
    maszd likes this.
  7. Steve F

    Steve F Well-Known Member

    You really should listen to people that make suggestions to you. @Martok is absolutely correct.
     
    Martok likes this.
  8. AndyB

    AndyB Well-Known Member

  9. ozzy47

    ozzy47 Well-Known Member

    I have also mentioned doing that as well. ;)
     
  10. Martok

    Martok Well-Known Member

    Really, it isn't. It's far less of a pain than limiting users to how many posts they can make.

    A far better solution is the one suggested already, leave the spam filter on for new users and create a user group promotion for more trusted users where the flood filter is bypassed. Easy to do, no add-on required.
     
    ozzy47 likes this.
  11. CarpCharacin

    CarpCharacin Active Member

    I just did that. I set it to 20 messages.
     
  12. Martok

    Martok Well-Known Member

    You've just put a barrier on new and existing members. It's not exactly going to be an encouragement for them to post more.
     
    Amaury likes this.
  13. CarpCharacin

    CarpCharacin Active Member

    How did I put a barrier on them? The flood filter turns off once a user reached 20 messages. That is all.
     
  14. Martok

    Martok Well-Known Member

    Apologies, I misinterpreted what you meant, I thought you had installed the add-on mentioned above.

    You might want to set an additional limit such as the member has to have been registered for say 7 days (and personally I'd have the message limit a bit higher). Currently a spammer would be subject to the flood filter for just 20 posts, then after that they would be free to spam as much as they like. Assuming 5 seconds per post and 30 seconds for the flood filter, they would bypass the flood filter after only 12 minutes (plus time for the usergroup promotion cron to promote them).
     
  15. CarpCharacin

    CarpCharacin Active Member

    Spam posts would probably go into the moderation queue.
     
  16. king8084

    king8084 Active Member

    hmmm

    cant you lower the time to whatever you want from acp? flood check means the amount of posts in X time

    right? :/
     
  17. Martok

    Martok Well-Known Member

    There is only one global flood check time (default is 30 seconds). It's not the amount of posts in X time, it's the time between submitting a post and then making a new one.

    You can lower it but the consequence is that a spammer will be able to post more frequently. 30 seconds is fine really, though as I said you can use a user group promotion for trusted members so that they bypass the flood check.
     
  18. king8084

    king8084 Active Member

    i mean this is linked to this right
    upload_2016-10-12_1-1-0.png
     
  19. Martok

    Martok Well-Known Member

    Yes, that's the flood check setting.

    I'd highly recommend that you don't have it set to 4 seconds, a spammer can post pretty quickly with it set to that. Assuming 5 seconds for a post, they can only make a post every 9 seconds, so in just 30 minutes they would have posted 200 messages. If it's set to 30 seconds, they can only make a post every 35 seconds and so would only post 51 messages.
     

Share This Page