<?xml version="1.0" encoding="utf-8"?><!-- generator="wordpress/2.2.2" -->
<rss version="2.0" 
	xmlns:content="http://purl.org/rss/1.0/modules/content/">
<channel>
	<title>Comments on: More Comment Spam</title>
	<link>http://www.denyerec.co.uk/posts/151</link>
	<description>Photography, Graphic Design, Art, Code...</description>
	<pubDate>Fri, 12 Mar 2010 05:29:16 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.2.2</generator>

	<item>
		<title>By: Rob</title>
		<link>http://www.denyerec.co.uk/posts/151#comment-483</link>
		<author>Rob</author>
		<pubDate>Wed, 17 Nov 2004 09:48:25 +0000</pubDate>
		<guid>http://www.denyerec.co.uk/posts/151#comment-483</guid>
		<description>&lt;p&gt;There was a wordpress 'thing' at one point that would do 'self-moderation'. ie send an email to the address given by the commenter and they have to click a link to activate the comment.
Can't remember what it was called though...&lt;/p&gt;
</description>
		<content:encoded><![CDATA[<p>There was a wordpress &#8216;thing&#8217; at one point that would do &#8217;self-moderation&#8217;. ie send an email to the address given by the commenter and they have to click a link to activate the comment.
Can&#8217;t remember what it was called though&#8230;</p>]]></content:encoded>
	</item>
	<item>
		<title>By: MKeeper</title>
		<link>http://www.denyerec.co.uk/posts/151#comment-482</link>
		<author>MKeeper</author>
		<pubDate>Mon, 15 Nov 2004 22:21:36 +0000</pubDate>
		<guid>http://www.denyerec.co.uk/posts/151#comment-482</guid>
		<description>&lt;p&gt;That might work for some of them, problem is where they spoof registered Domains. (We've been spammed at work from emails that are apparently from our own domain!)
You can't even use IP Tracking, as M$ had the brainwave idea of providing Raw Sockets in Windows, so you can spoof IP Addresses too (hence the power of DRDoS attacks).&lt;/p&gt;

&lt;p&gt;A good idea though, it might help to block some of the more bizarre generated email domains (although once they start pretending to belong to genuine domains that goes out the window too).&lt;/p&gt;

&lt;p&gt;Alas .. wordlisting gets screwed by so called "l33tsp34k", where every combinations of letters and numbers need to be considered to block them (it's amazing how people this stupid are capable of thinking of that many combinations of characters to try and say "adult")&lt;/p&gt;

&lt;p&gt;cheers&lt;/p&gt;

&lt;p&gt;MKeeper&lt;/p&gt;

&lt;p&gt;PS - nice to see ya AS ;) been a while&lt;/p&gt;
</description>
		<content:encoded><![CDATA[<p>That might work for some of them, problem is where they spoof registered Domains. (We&#8217;ve been spammed at work from emails that are apparently from our own domain!)
You can&#8217;t even use IP Tracking, as M$ had the brainwave idea of providing Raw Sockets in Windows, so you can spoof IP Addresses too (hence the power of DRDoS attacks).</p>

<p>A good idea though, it might help to block some of the more bizarre generated email domains (although once they start pretending to belong to genuine domains that goes out the window too).</p>

<p>Alas .. wordlisting gets screwed by so called &#8220;l33tsp34k&#8221;, where every combinations of letters and numbers need to be considered to block them (it&#8217;s amazing how people this stupid are capable of thinking of that many combinations of characters to try and say &#8220;adult&#8221;)</p>

<p>cheers</p>

<p>MKeeper</p>

<p>PS - nice to see ya AS <img src='http://www.denyerec.co.uk/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /> been a while</p>]]></content:encoded>
	</item>
	<item>
		<title>By: techfreakz</title>
		<link>http://www.denyerec.co.uk/posts/151#comment-481</link>
		<author>techfreakz</author>
		<pubDate>Mon, 15 Nov 2004 17:34:24 +0000</pubDate>
		<guid>http://www.denyerec.co.uk/posts/151#comment-481</guid>
		<description>&lt;p&gt;how about writing a smart php module that verifies the domain of the sender's email address? just a thought&lt;/p&gt;

&lt;p&gt;Cheers&lt;/p&gt;

&lt;p&gt;AS&lt;/p&gt;
</description>
		<content:encoded><![CDATA[<p>how about writing a smart php module that verifies the domain of the sender&#8217;s email address? just a thought</p>

<p>Cheers</p>

<p>AS</p>]]></content:encoded>
	</item>
	<item>
		<title>By: Rob</title>
		<link>http://www.denyerec.co.uk/posts/151#comment-480</link>
		<author>Rob</author>
		<pubDate>Sat, 13 Nov 2004 12:26:05 +0000</pubDate>
		<guid>http://www.denyerec.co.uk/posts/151#comment-480</guid>
		<description>&lt;p&gt;I agree, i have been hit hard by this spammer also, one night i came back to my blog and found about 1000 comments waiting to be approved and about 300 on my site.  I hate this guy!&lt;/p&gt;
</description>
		<content:encoded><![CDATA[<p>I agree, i have been hit hard by this spammer also, one night i came back to my blog and found about 1000 comments waiting to be approved and about 300 on my site.  I hate this guy!</p>]]></content:encoded>
	</item>
	<item>
		<title>By: dies-el</title>
		<link>http://www.denyerec.co.uk/posts/151#comment-475</link>
		<author>dies-el</author>
		<pubDate>Wed, 10 Nov 2004 09:22:24 +0000</pubDate>
		<guid>http://www.denyerec.co.uk/posts/151#comment-475</guid>
		<description>&lt;p&gt;As I said last time, blocking domain spam by domain is like trying to block email-spam by subject; It doesn't work.&lt;/p&gt;

&lt;p&gt;I've got a script on desto.net that closes comments after 21 days, and that has removed comment spam (so far).&lt;/p&gt;
</description>
		<content:encoded><![CDATA[<p>As I said last time, blocking domain spam by domain is like trying to block email-spam by subject; It doesn&#8217;t work.</p>

<p>I&#8217;ve got a script on desto.net that closes comments after 21 days, and that has removed comment spam (so far).</p>]]></content:encoded>
	</item>
</channel>
</rss>
