I've been impressed with Honeypot <a href="http://drupal.org/project/honeypot">http://drupal.org/project/honeypot</a> which adds a field only bots see (like botcha) and also uses a time limit. If a form is completed in less than a configurable time (default 5 sec) it is rejected. Bots usually fill forms in milliseconds and can't afford to hang around for longer so this is a particularly effective defence. I think captcha and recaptcha are almost useless now and depending on spammer lists (requiring lots of calls to an external service) can be slow.<br>
<br>Neil<br><br><div class="gmail_quote">On Tue, Oct 30, 2012 at 7:17 PM, Jamie Holly <span dir="ltr"><<a href="mailto:hovercrafter@earthlink.net" target="_blank">hovercrafter@earthlink.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Still not a guarantee. There is no guarantee for stopping spam. Just ask<br>
Google, Hotmail, Facebook, Twitter, etc.<br>
<br>
One of the big things going on now is that companies are paying people<br>
to create accounts. They also use proxies from computers infected with<br>
viruses, which makes it extra hard to catch.<br>
<br>
For one client, that has seen over 40,000 spam account in the past 2<br>
months (we tried Mollom, Botcha, every Captcha method and Bad Behavior).<br>
I have been trying numerous, custom modules and methods. I have one that<br>
is working really well right now. I'm afraid to release it though, since<br>
if the spammers get a hold of it then they can see the work around.<br>
<br>
What you need to do is be very vigilant. Record the request headers and<br>
look for things in there that might give it up. Try to limit the number<br>
of registrations for a period of time for each IP. Block the countries,<br>
if they are all coming from a certain one. Actually you can block the<br>
registration page for those countries.<br>
<br>
But, as I said in the beginning, there is not a fool-proof way. If<br>
someone does come up with it, then their name would be about as common<br>
as Bill Gates and their wallet close to the same size. The big companies<br>
spend millions trying to fight spam accounts and are still losing out on<br>
the battle.<br>
<span class="HOEnZb"><font color="#888888"><br>
Jamie Holly<br>
<a href="http://www.intoxination.net" target="_blank">http://www.intoxination.net</a><br>
<a href="http://www.hollyit.net" target="_blank">http://www.hollyit.net</a><br>
</font></span><div class="HOEnZb"><div class="h5"><br>
On 10/30/2012 5:00 PM, Lynn wrote:<br>
> The only module you'll need for all spam (comments, bogus account creation, etc)... works awesome.<br>
> <a href="http://drupal.org/project/botcha" target="_blank">http://drupal.org/project/botcha</a><br>
><br>
> On Oct 30, 2012, at 11:21 AM, Patrick Avella wrote:<br>
><br>
> > Hi Nancy, unfortunately blocking individual IPs and blocks of IPs does<br>
> > not guarantee you're blocking a specific country. There is a GeoIP<br>
> > Apache module that translates IP addresses into geographic location,<br>
> > and happens at the web server layout. This is much different than the<br>
> > built in IP-Blocking that happens in the drupal layer and is much less<br>
> > flexible.<br>
> ><br>
> > I would not recommend blocking blocks of IP addresses w/o Geo look up<br>
> > information, as you're not guaranteed uniform IP address allocation<br>
> > globally.<br>
> ><br>
> > On Tue, Oct 30, 2012 at 12:51 PM, Ms. Nancy Wichmann<br>
> > <<a href="mailto:nan_wich@bellsouth.net">nan_wich@bellsouth.net</a>> wrote:<br>
> >> You don't need any modules to block IPs. Go to<br>
> >> admin/config/people/ip-blocking<br>
> >><br>
> >> Nancy<br>
> >> Injustice anywhere is a threat to justice everywhere. -- Dr. Martin L. King,<br>
> >> Jr.<br>
> >><br>
> >> ________________________________<br>
> >> From: Patrick Avella<br>
> >> You can also block countries via GeoIP and apache,<br>
> >><br>
> >><br>
> >> --<br>
> >> [ Drupal support list | <a href="http://lists.drupal.org/" target="_blank">http://lists.drupal.org/</a> ]<br>
> > --<br>
> > [ Drupal support list | <a href="http://lists.drupal.org/" target="_blank">http://lists.drupal.org/</a> ]<br>
><br>
<br>
--<br>
[ Drupal support list | <a href="http://lists.drupal.org/" target="_blank">http://lists.drupal.org/</a> ]<br>
</div></div></blockquote></div><br>