Katz, Dov B (IT) wrote: > > I have a site. It requires user registration to communicate with other > users. The communication is sent via email. Users who register are > reuqired to confirm their randomly assigned password via email before > completing registration. > > So, lets say we have one such newly registered user, who decides to > communicate with other users on my site, by sending this stuff out to > them. > > How do I prevent a registered user on my site from easily blasting > others with these types of message.
While it is a good idea to implement such a mechanism, since it will also stop scammers in other regions, how much business would you really lose if you just firewalled that IP, ISP, country or continent? Presuming you don't have any legitimate customers using that ISP, I would just block the entire netblock of that ISP. Put up a scheduled task that does a weekly check of AfriNIC to see if the timestamp on the record changed so you catch any changes to the range. http://www.afrinic.net/cgi-bin/whois?searchtext=213.136.122.149 You can implement this in CF code, in the webserver, in the server or even in the router (you would just block AS 29571). > Is there an open database or filter web service I could compare the > attempted-to-be-sent message to see whether it is spam before I CFMAIL > it? Should I just keep a message-send counter which counts similar > messages sent during an existing session and lock down the ability to > send more than X messages per Y minutes per session? I think rate limiting is a good way to start. Jochem ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Discover CFTicket - The leading ColdFusion Help Desk and Trouble Ticket application http://www.houseoffusion.com/banners/view.cfm?bannerid=48 Message: http://www.houseoffusion.com/lists.cfm/link=i:4:207894 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
