Spam tips please

[Alvin63]

Ok I just checked in ACP and I have HCaptcha turned on (I have forgotten a lot of things from first setting up the forum). And I can see there is an option to use Cloudflare Turnstile there. And also a question and answer captcha. So I guess I can just set it all up in ACP? Except Turnstile seems to need something doing at the Cloudflare end.

 

[Alvin63]

This looks like a good option perhaps?

[OzzModz] Registration Spaminator Stop Spam Bot Registrations

Sep 29, 2019

Registration Spam Bot Fighting Tool

• Ozzy47
• spam spam bot spam registrations
• Add-ons [2.x]

 

[Alvin63]

I'll try Turnstile first. I think I've worked out how to set up Turnstile on the Cloudflare page - not impressed that the Cloudflare page doesn't fit on my 14" screen full screen - I've had to make it really small to complete the process. Pre-clearance: Do I leave it on the default "No"?

 

[Alvin63]

Ok Turnstile looks ok. No big page that says Cloudflare for 10 seconds (so don't know what that was with the other site I visited).

I tried a test registration with a fake email address, but still got an undelivered email notification in contact us email. So looks like it's not working for blocking those.

 

[Alvin63]

Sorry to keep posting. Have I done everything right? You just paste the site key and secret key in ACP and save?

 

[Alvin63]

Do you have Cloudflares Turnstile turned on?

Cloudflare Turnstile | CAPTCHA Replacement Solution

Cloudflare Turnstile is a simple and free CAPTCHA replacement solution that delivers better experiences and greater security for your users.

www.cloudflare.com

I do now. How do I check it's working?

 

[Alvin63]

So it seems since I switched to SMTP, my daily email quota is not being flooded with fake email attempts to register, but instead I'm getting the "undelivered" emails in the inbox. Chat GPT suggested using email validation?

 

[Alvin63]

So just to check. When someone goes to register, do they need to tick the "verify you are human" or not? Because when I tried it myself after clearing cookies it just automatically ticked itself before I'd even typed anything. Is that how it is supposed to work?

 

[CedricV]

So just to check. When someone goes to register, do they need to tick the "verify you are human" or not? Because when I tried it myself after clearing cookies it just automatically ticked itself before I'd even typed anything. Is that how it is supposed to work?

It depends which challenge you set. Turnstile has an option that makes it easier for anyone to register but not the bots. I believe setting it to the visible setting is the best one. Anyone who register sees they’re being verified but don’t have to do anything for it.

 

[Suzanne O]

Cloudflare turnstyle

@Xon's sign up and abuse addon and his standard library addon.

 

[Alvin63]

Ok no spam to delete today since setting up Turnstile so that is good. I'll see how it goes with the undelivered emails. I am not sure if they are spamming the contact us email or just trying to register with a non existent email address.

 

[Alvin63]

It depends which challenge you set. Turnstile has an option that makes it easier for anyone to register but not the bots. I believe setting it to the visible setting is the best one. Anyone who register sees they’re being verified but don’t have to do anything for it.

Thanks. Yes I have the visible option. But should it tick itself automatically or should the user need to tick it manually? When I tested, it just ticked itself automatically - but maybe it's because it recognised my IP?

 

[Suzanne O]

So just to check. When someone goes to register, do they need to tick the "verify you are human" or not? Because when I tried it myself after clearing cookies it just automatically ticked itself before I'd even typed anything. Is that how it is supposed to work?

Yes

 

[Alvin63]

So why didn't I need to tick it? It automatically ticked itself.

 

[Alvin63]

Thanks for all the tips. Turnstile seems to be doing the job on its own right now. No spammers to delete today. And at the moment, no new "undelivered" emails.

 

[Suzanne O]

So why didn't I need to tick it? It automatically ticked itself.

Because it knows that your account is fine and it recognises your ip address.

 

[Alvin63]

Just a query. That other site I mentioned that uses cloudflare - you get a big cloudflare page and it sits and waits to check you're human - which is very offputting and what I thought turnstile would be (but isn't - it's significantly better than that).

So out of interest, what is it that other site has set up with cloudflare? Have they incorrectly set up cloudflare or using something different?

This is what you get on the other site I mentioned. It fills the entire screen. Which is why my initial reaction to the idea of turnstile was negative, but I figured people on here know what they are talking about!



Whereas I get this, which is much better! Is it that Xenforo itself adapts it?

 

[CedricV]

Just a query. That other site I mentioned that uses cloudflare - you get a big cloudflare page and it sits and waits to check you're human - which is very offputting and what I thought turnstile would be (but isn't - it's significantly better than that).

So out of interest, what is it that other site has set up with cloudflare? Have they incorrectly set up cloudflare or using something different?

This is what you get on the other site I mentioned. It fills the entire screen. Which is why my initial reaction to the idea of turnstile was negative, but I figured people on here know what they are talking about!

View attachment 318824

Whereas I get this, which is much better! Is it that Xenforo itself adapts it?

View attachment 318825

Those are custom rules.

 

[Alvin63]

Do you mean Xenforo custom rules?