[OzzModz] Registration Spaminator Stop Spam Bot Registrations [Deleted]

You can use something like this addon, which requires email validation prior to registration. This isn't going to stop people from using temporary emails that will be dead shortly after use, but will it will slow down the bounces you are getting from fully fake email addresses.
Thanks - will email validation work for the contact us form as well as registration?
 
So if they are trying to register, and it is a botnet, yes, this addon will put a stop to them registering and triggering bounces.
 
Can I use it with turnstile as well, or is it one or the other? Also will it stop them spamming the contact us form with fake email addresses?
 
they put something like xkiiofifi as an email address!). The effect that was having was masses of activation emails going out
Sounds strange: Does XF not have a simple syntax checker for the mail address? Also, as something like "xkiiofifi" is not a routable mailaddress no activiation emails can go out.
 
Sounds strange: Does XF not have a simple syntax checker for the mail address? Also, as something like "xkiiofifi" is not a routable mailaddress no activiation emails can go out.
He's probably talking about the prefix gibberish. XF does have basic filter that requires the address to match the format of someone@somewhere.randotld - you can't get past the registration page without formatting the address correctly.
 
Maybe they are spamming the contact us email directly then - rather than trying to sign up with a gibberish email address. But I get undelivered emails so I assumed they were trying to sign up and it was the activation emails that were undelivered.

I did actually try signing up with a fake email not@not.com and replicated getting a undelivered notification though. And it opened an account. But obviously there was nowhere to send an activation email to. So maybe I need an email filter?

What they've been achieving is putting my daily email rates over quota and spamming the inbox of the contact us email. Presumably by triggering loads of activation emails that bounced.

Anyway no spam to delete in the mod panel since turnstile was turned on :-)
 
I did actually try signing up with a fake email not@not.com and replicated getting a undelivered notification though. And it opened an account. But obviously there was nowhere to send an activation email to. So maybe I need an email filter?
This is why I suggested the other addon here -- the registration can't proceed if the email is invalid.
 
I did actually try signing up with a fake email not@not.com and replicated getting a undelivered notification though. And it opened an account. But obviously there was nowhere to send an activation email to. So maybe I need an email filter?
not.com is a valid domain that belongs to "Next Online Technologies":


It also has a valid DNS entry for the mx:


$ dig -t mx not.com
; <<>> DiG 9.10.6 <<>> -t mx not.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55124
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;not.com. IN MX
;; ANSWER SECTION:
not.com. 300 IN MX 75 isaac.mx.cloudflare.net.
not.com. 300 IN MX 94 linda.mx.cloudflare.net.
not.com. 300 IN MX 30 amir.mx.cloudflare.net.

So the domain exists, the mx entry exists but the mailbox for the localpart of the address does not exist, thus you get a bounce. Completely different story from what you wrote in your last post.

Anyone can use any mailaddress during registration and as long as there's an mx entry for the domain the server will try to deliver the registrasion mail (as it does and can not know if the mailbox/mailaddress exists). A "mailfilter" whatever that may be cannot circumvent that - how should it do that?

First thing you should find out is wether the mails you get are caused by registration attemps or by the contact form. Should not be too difficult. If they come in masses it is probably automated and then the according spaminator variant could probably help.
 
I bought Spaminator back in January 2020, but I have no idea if I can upgrade for free to the latest version or not. Does anyone know?
 
I saw that, but when I purchased it 5 years ago, I do not know what the license conditions were back then, and the version I downloaded was 1.1.2. The Updates duration says lifetime for versions 2.2 and 2.3, but no mention for my xenforo 1.x download.
As per the overview, only 2.2 and 2.3 have lifetime licenses.
I would DM @Ozzy47 for an usage license. He always responds.
 
All working now thanks, and caught a spammer within the first 10 minutes of installing.

Edit: Make that 2 spammers within 10 minutes.
 
Last edited:
Back
Top Bottom