LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > LinuxQuestions.org > LQ Suggestions & Feedback
User Name
Password
LQ Suggestions & Feedback Do you have a suggestion for this site or an idea that will make the site better? This forum is for you.
PLEASE READ THIS FORUM - Information and status updates will also be posted here.

Notices


Reply
  Search this Thread
Old 02-03-2016, 06:21 AM   #91
pan64
LQ Guru
 
Registered: Mar 2012
Location: Hungary
Distribution: debian/ubuntu/suse ...
Posts: 16,487

Rep: Reputation: 5530Reputation: 5530Reputation: 5530Reputation: 5530Reputation: 5530Reputation: 5530Reputation: 5530Reputation: 5530Reputation: 5530Reputation: 5530Reputation: 5530

what about limiting the number of new users in an hour/day?
 
Old 02-03-2016, 07:11 AM   #92
rtmistler
Moderator
 
Registered: Mar 2011
Location: USA
Distribution: MINT Debian, Angstrom, SUSE, Ubuntu, Debian
Posts: 9,315
Blog Entries: 13

Rep: Reputation: 4371Reputation: 4371Reputation: 4371Reputation: 4371Reputation: 4371Reputation: 4371Reputation: 4371Reputation: 4371Reputation: 4371Reputation: 4371Reputation: 4371
Quote:
Originally Posted by astrogeek View Post
Wall of SPAM, Tuesday evening...

*** Update to the Update
First post was at 9:30PM.
It is now about 2:30AM and there has been no letup.
So as of now, 5-1/2 hours and counting few "customers" have been served.

Eight pages deep in the Newbie forum to get past the spam...

This one appears more aggressive than previous instances, with greater number of user names and faster delivery rate per user too. Most are staying below 50 posts per user, but some are now above 160 posts, likely 200+ but I am too tired to track them any more tonight.

My sympathies to the admins who I am sure are dealing with it all.
It's either indicative of the local time zone they are coming from, or perhaps they've learned the time frame when people are responsive, and fighting the attacks.
 
Old 02-03-2016, 08:33 AM   #93
pan64
LQ Guru
 
Registered: Mar 2012
Location: Hungary
Distribution: debian/ubuntu/suse ...
Posts: 16,487

Rep: Reputation: 5530Reputation: 5530Reputation: 5530Reputation: 5530Reputation: 5530Reputation: 5530Reputation: 5530Reputation: 5530Reputation: 5530Reputation: 5530Reputation: 5530
using the first few chars as line delimiter you can disable posts containing the same line of text 3 or more times.
Or just check if the subject can be found in the body 3 times....
Is this feasible?
 
Old 02-03-2016, 08:39 AM   #94
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
22 pages of it in https://www.linuxquestions.org/quest...-8/page22.html

Would it be prudent to filter out non-english subject lines?

Last edited by Habitual; 02-03-2016 at 08:40 AM.
 
Old 02-03-2016, 08:45 AM   #95
malekmustaq
Senior Member
 
Registered: Dec 2008
Location: root
Distribution: Slackware & BSD
Posts: 1,667

Rep: Reputation: 495Reputation: 495Reputation: 495Reputation: 495Reputation: 495
Here they come again.
One thing sure: these people hate Free Open Source Software, or even GNU/Linux because they don't mind of the noble things done here for free, at least, they should respect the charity found in us.
 
Old 02-03-2016, 08:56 AM   #96
ardvark71
LQ Veteran
 
Registered: Feb 2015
Location: USA
Distribution: Lubuntu 14.04, Windows Vista
Posts: 6,277
Blog Entries: 3

Rep: Reputation: 841Reputation: 841Reputation: 841Reputation: 841Reputation: 841Reputation: 841Reputation: 841
Quote:
Originally Posted by Habitual View Post
There was a little over 25 in "Zero Reply Threads" as of around 6:50 a.m., with roughly three or four normal threads sprinkled in.

Regards...
 
Old 02-03-2016, 09:37 AM   #97
ReaperX7
LQ Guru
 
Registered: Jul 2011
Location: California
Distribution: Slackware64-Current
Posts: 6,450

Original Poster
Blog Entries: 15

Rep: Reputation: 2031Reputation: 2031Reputation: 2031Reputation: 2031Reputation: 2031Reputation: 2031Reputation: 2031Reputation: 2031Reputation: 2031Reputation: 2031Reputation: 2031
Yeah looks like the damage is isolated to the Newbie forums for now at least.
 
Old 02-03-2016, 09:45 AM   #98
suicidaleggroll
LQ Guru
 
Registered: Nov 2010
Location: Colorado
Distribution: OpenSUSE, CentOS
Posts: 5,573

Rep: Reputation: 2138Reputation: 2138Reputation: 2138Reputation: 2138Reputation: 2138Reputation: 2138Reputation: 2138Reputation: 2138Reputation: 2138Reputation: 2138Reputation: 2138
17 pages deep right now.

I still don't understand why it would be so evil to place a limit on the number of new threads a new member can make in a day? Does a legitimate new member honestly need the ability to start more than, say, 3 new threads on their first day? Even if they did, I'm sure if they saw a message when they went to open their 4th that said something along the lines of "You've hit your limit for new threads for the day, please give the LQ members time to respond to your original questions before opening more", they wouldn't mind at all. And if that DID make them angry, are those really the kinds of members we want here anyway?

Last edited by suicidaleggroll; 02-03-2016 at 09:49 AM.
 
2 members found this post helpful.
Old 02-03-2016, 09:48 AM   #99
jeremy
root
 
Registered: Jun 2000
Distribution: Debian, Red Hat, Slackware, Fedora, Ubuntu
Posts: 13,431

Rep: Reputation: 3988Reputation: 3988Reputation: 3988Reputation: 3988Reputation: 3988Reputation: 3988Reputation: 3988Reputation: 3988Reputation: 3988Reputation: 3988Reputation: 3988
While the new filters caught most of this, an obviously unacceptable amount got through. The cleanup is processing and some additional filters have been added. Thanks for the patience.

--jeremy
 
Old 02-03-2016, 09:58 AM   #100
salasi
Senior Member
 
Registered: Jul 2007
Location: Directly above centre of the earth, UK
Distribution: SuSE, plus some hopping
Posts: 4,070

Rep: Reputation: 897Reputation: 897Reputation: 897Reputation: 897Reputation: 897Reputation: 897Reputation: 897
Quote:
Originally Posted by suicidaleggroll View Post
17 pages deep right now.
Persistent little b*****s, aren't they? To me, this attack looks a little worse than the last one, but that may just be what gets past the filters...

Quote:
Originally Posted by suicidaleggroll View Post
I still don't understand why it would be so evil to place a limit on the number of new threads a new member can make in a day?
Nor do I, but it might not be constructive. If we did go down that path, it may be what happens is that the evildoers just pre-reserve a whole bunch of identities, keep them for a week without posting and then unleash their wall of irrelevancy... Not sure that would help all that much.

It would, of course, irritate all the 'my problem is important, I need to cross post in to all the forums' crowd, and that, of itself, might be an advantage.

As an aside, and given that I appreciate the work done by the mods, if you feel that it is of any use having additional volunteers to manually do anything with this sort of outbreak, I volunteer. My suspicion is that this is probably the wrong time, given that an existing mod would have to walk me through this stuff, and that existing mod may well be better employed on something else at the moment, but the offer is still there, for what it is worth.
 
2 members found this post helpful.
Old 02-03-2016, 10:20 AM   #101
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
I consider LQ to be my "home", so I'll help defend it and help take out the Trash.
 
1 members found this post helpful.
Old 02-03-2016, 10:21 AM   #102
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 23,806

Rep: Reputation: 6973Reputation: 6973Reputation: 6973Reputation: 6973Reputation: 6973Reputation: 6973Reputation: 6973Reputation: 6973Reputation: 6973Reputation: 6973Reputation: 6973
Quote:
Originally Posted by salasi View Post
Persistent little b*****s, aren't they? To me, this attack looks a little worse than the last one, but that may just be what gets past the filters...

Nor do I, but it might not be constructive. If we did go down that path, it may be what happens is that the evildoers just pre-reserve a whole bunch of identities, keep them for a week without posting and then unleash their wall of irrelevancy... Not sure that would help all that much.
And that's exactly why the first-few-posts moderation would work. Even if they pre-reserved a thousand ID's, those posts wouldn't ever hit the forums.
Quote:
It would, of course, irritate all the 'my problem is important, I need to cross post in to all the forums' crowd, and that, of itself, might be an advantage.
...back to "first-few-post" moderation....
Quote:
As an aside, and given that I appreciate the work done by the mods, if you feel that it is of any use having additional volunteers to manually do anything with this sort of outbreak, I volunteer. My suspicion is that this is probably the wrong time, given that an existing mod would have to walk me through this stuff, and that existing mod may well be better employed on something else at the moment, but the offer is still there, for what it is worth.
I agree, and would also volunteer. A 'limited moderator' role might be in order...someone who could only ban a user/hide posts, to keep spam at bay until someone else could make a decision/delete wholesale.
 
Old 02-03-2016, 10:23 AM   #103
Keith Hedger
Senior Member
 
Registered: Jun 2010
Location: Wiltshire, UK
Distribution: Linux From Scratch, Slackware64, Partedmagic
Posts: 2,940

Rep: Reputation: 780Reputation: 780Reputation: 780Reputation: 780Reputation: 780Reputation: 780Reputation: 780
I agree with both salasi and suicidaleggroll, I know we all want to keep the forums open and friendly but as it is the forums are getting almost unusable, people who come here regularly know the mods are doing their best and are doing a good job, but at the same time any newbies comeing to forums and seeing all the spam are just as likly to leave without even signing up, in my opinion getting a mod to check the first couple of posts from a newcomer or limiting their ability to post numerous threads is surely the lesser of two evils.

As P.S. I would also be happy to help out in anyway possible even if it's just emailing newbs to veryfy that they have a valid email and are a real person.
 
2 members found this post helpful.
Old 02-03-2016, 10:51 AM   #104
jeremy
root
 
Registered: Jun 2000
Distribution: Debian, Red Hat, Slackware, Fedora, Ubuntu
Posts: 13,431

Rep: Reputation: 3988Reputation: 3988Reputation: 3988Reputation: 3988Reputation: 3988Reputation: 3988Reputation: 3988Reputation: 3988Reputation: 3988Reputation: 3988Reputation: 3988
It appears a major part of our anti-spam infrastructure was not operating as expected for the duration of this issue. I apologize to all members and mods. It's up and running now and should massively impact this issue moving forward. I'm looking into the root cause now.

--jeremy
 
1 members found this post helpful.
Old 02-03-2016, 03:44 PM   #105
astrogeek
Moderator
 
Registered: Oct 2008
Distribution: Slackware [64]-X.{0|1|2|37|-current} ::12<=X<=14, FreeBSD_12{.0|.1}
Posts: 5,616
Blog Entries: 11

Rep: Reputation: 3655Reputation: 3655Reputation: 3655Reputation: 3655Reputation: 3655Reputation: 3655Reputation: 3655Reputation: 3655Reputation: 3655Reputation: 3655Reputation: 3655
Thanks for your continuing efforts to keep things going here.

Bummer to hear that something was not working as expected, I hope the cause was benign.

But that too, can be a symptom of how overwhelming the problems are on the internet today - we run so many overlapping layers of complexity at so many different points in the process that it can be very difficult to know with certainty what is working as expected and what is not. It can even be difficult to know what "working as expected" actually means!

Let me add my own offer to help in any way possible if the problems persist. As others have already said, if some users can be given limited powers to intervene in active attacks, that might make a very effective form of first responder, almost always live on the scene.

I know there would be much to consider before implementing something like that, but should you decide to do so I'll gladly volunteer whatever I can to the effort. This is also my home on the internet, and worth defending!

Thanks as always!

Last edited by astrogeek; 02-03-2016 at 03:47 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Auto deleting spam assasins spam box via cronjob and Roundcube Junk Folder osmy Linux - Newbie 8 01-23-2012 04:22 PM
Move SA Marked Spam to Junk/Spam Folder Using Procmail, Postfix, and Virtual Users alden_pease Linux - Server 0 01-05-2012 12:29 AM
some threads are become unnoticed because of large number of continious threads deepak_cucek LQ Suggestions & Feedback 9 08-20-2009 11:21 PM
spam filter that puts spam into spam folder? paul_mat Linux - Software 3 03-31-2009 04:18 AM
Java threads listed using kill -3 does not contain all threads found using ps -auxww coneheed Programming 2 11-14-2005 08:57 AM

LinuxQuestions.org > Forums > LinuxQuestions.org > LQ Suggestions & Feedback

All times are GMT -5. The time now is 11:28 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration