tlamprecht
Member
Hi,
We configured "Maximum messages to check for spam" to 15, as with that amount of valid messages (i.e., not hanging in the approval queue) its highly unlikely that a user starts spamming, so the "Spam cleaner user criteria" setting was also set to 15 for similar reasons and because we hard-delete everything and want some basic safeguard against triggering it for very engaged users.
A spammer this weekend just continued to submit new posts until they went beyond those limits at which time their posts showed up directly, without being checked for spam anymore, and further, the spam cleaner button was disabled making it a lot of more work for the moderators online over the weekend (which have no admin access to change that setting) to clean up.
IMO this is a clear bug in the anti-spam architecture, posts pending approval must not count towards the total post counts, as that allows bad actors to disable the spam checker and or cleaner by, well, spamming.
We configured "Maximum messages to check for spam" to 15, as with that amount of valid messages (i.e., not hanging in the approval queue) its highly unlikely that a user starts spamming, so the "Spam cleaner user criteria" setting was also set to 15 for similar reasons and because we hard-delete everything and want some basic safeguard against triggering it for very engaged users.
A spammer this weekend just continued to submit new posts until they went beyond those limits at which time their posts showed up directly, without being checked for spam anymore, and further, the spam cleaner button was disabled making it a lot of more work for the moderators online over the weekend (which have no admin access to change that setting) to clean up.
IMO this is a clear bug in the anti-spam architecture, posts pending approval must not count towards the total post counts, as that allows bad actors to disable the spam checker and or cleaner by, well, spamming.