On Tue, Feb 20, 2007 at 12:06:28AM +0100, Martin van den Bemt wrote:
> I think you need need to report this to Jeff (I thought he could something 
> with that)... Although I
> don't know if Jeff also helps out on the codehaus install.. (maybe asking 
> what kind of measures he
> takes so we can also do that on codehaus ?).

Rather than delete spam comments manually (which effectively just moves
them to the issue change history), a JIRA admin should run the JSP at
http://jira.codehaus.org/secure/admin/cleancommentspam.jsp and
permanently delete them.

I have been tracking IPs of spammers from about 8 public JIRAs for about
3 months, and the spam originates from just a handful of ISPs.  The
latest spam reported here is almost certainly from ninand.ro, because 3
other JIRAs where hit on the same day with identical links:

https://svn.atlassian.com/svn/public/contrib/jira/spamfighting/spammers/ninand.ro/89.34.173.230/

It's up to Codehaus ops people (Cc'ed), but I suggest asking the hosting
company (Contegix) to ban the IPs of these ISPs hosting repeat spammers:

https://svn.atlassian.com/svn/public/contrib/jira/spamfighting/spammers/blockspammers.rc

I've done this for issues.apache.org and atlassian.com domains and it's
solved the problem.

Additionally, Contegix needs to delete the deleted comments directly from
the database:

https://svn.atlassian.com/svn/public/contrib/jira/spamfighting/scripts/commentspam_delete

since they're still available as google-fodder in the history:

http://jira.codehaus.org/browse/MPA-6?page=com.atlassian.jira.plugin.system.issuetabpanels:changehistory-tabpanel


--Jeff


> Mvgr,
> Martin
> 
> Carlos Sanchez wrote:
> > you can change their password (so they can't login) and email (to
> > avoid password recovery), i guess that would take them more time to
> > figure out than if you just remove their account
> > 
> > On 2/19/07, Arnaud HERITIER <[EMAIL PROTECTED]> wrote:
> >> To remove their accounts we need to have their emails.
> >> But, that's effectively an infinite war ;-)
> >>
> >> Arnaud
> >>
> >> On 2/19/07, Emmanuel Venisse <[EMAIL PROTECTED]> wrote:
> >> >
> >> > We can't really suspend them, if we remove account(s), spammer(s)
> >> create a
> >> > new one.
> >> >
> >> > Emmanuel
> >> >
> >> > Vincent Siveton a écrit :
> >> > > Hi,
> >> > >
> >> > > Today, user "marie" has been spamming the JIRA issues:
> >> > > MPA-2, MPA-5 and MPA-6.
> >> > > Last week, "mars luther" did it for MAVEN-1832.
> >> > >
> >> > > Could someone suspend them?
> >> > >
> >> > > Thanks,
> >> > >
> >> > > Vincent
> >> > >
> >> > > ---------------------------------------------------------------------
> >> > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> >> > > For additional commands, e-mail: [EMAIL PROTECTED]
> >> > >
> >> > >
> >> > >
> >> > >
> >> >
> >> >
> >> > ---------------------------------------------------------------------
> >> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> >> > For additional commands, e-mail: [EMAIL PROTECTED]
> >> >
> >> >
> >>
> > 
> > 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to