[allura:tickets] #8193 Allow rate-limiting of comments

2018-03-07 Thread Dave Brondsema
- **Comment**:

* posting a new topic/thread in a forum bypasses the check
* on tickets/forums/blog, the `..` redirect goes a url that isn't very 
end-user-friendly, and it 404s if doing a reply.   Maybe redirect to 
request.referer?
* `development.ini` config probably should have a comment to explain that 
"allura" covers all comments/posts



---

** [tickets:#8193] Allow rate-limiting of comments**

**Status:** review
**Milestone:** unreleased
**Created:** Wed Mar 07, 2018 03:45 PM UTC by Kenton Taylor
**Last Updated:** Wed Mar 07, 2018 05:06 PM UTC
**Owner:** Kenton Taylor


Creating of tickets, wikis, projects, etc can all be optionally rate-limited.  
We should allow the same ability for posting comments.


---

Sent from forge-allura.apache.org because dev@allura.apache.org is subscribed 
to https://forge-allura.apache.org/p/allura/tickets/

To unsubscribe from further messages, a project admin can change settings at 
https://forge-allura.apache.org/p/allura/admin/tickets/options.  Or, if this is 
a mailing list, you can unsubscribe from the mailing list.

[allura:tickets] #8193 Allow rate-limiting of comments

2018-03-07 Thread Dave Brondsema
- **status**: review --> in-progress



---

** [tickets:#8193] Allow rate-limiting of comments**

**Status:** in-progress
**Milestone:** unreleased
**Created:** Wed Mar 07, 2018 03:45 PM UTC by Kenton Taylor
**Last Updated:** Wed Mar 07, 2018 11:11 PM UTC
**Owner:** Kenton Taylor


Creating of tickets, wikis, projects, etc can all be optionally rate-limited.  
We should allow the same ability for posting comments.


---

Sent from forge-allura.apache.org because dev@allura.apache.org is subscribed 
to https://forge-allura.apache.org/p/allura/tickets/

To unsubscribe from further messages, a project admin can change settings at 
https://forge-allura.apache.org/p/allura/admin/tickets/options.  Or, if this is 
a mailing list, you can unsubscribe from the mailing list.

[allura:tickets] #8192 StopForumSpam filter and moderation+spam update

2018-03-07 Thread Kenton Taylor
- **status**: review --> closed
- **Comment**:

Merged.



---

** [tickets:#8192] StopForumSpam filter and moderation+spam update**

**Status:** closed
**Milestone:** unreleased
**Created:** Tue Mar 06, 2018 10:29 PM UTC by Dave Brondsema
**Last Updated:** Wed Mar 07, 2018 06:17 PM UTC
**Owner:** Dave Brondsema


There's an existing SpamFilter interface we can use to implement filtering with 
StopForumSpam files.  And it'd be good to expand the spam filters to support 
using multiple filters not just one.

Also posts that are already destined for moderation, and are also spam still 
just end up in the moderation queue.  Changes here will put them directly into 
the 'spam' status and not show up in moderation.


---

Sent from forge-allura.apache.org because dev@allura.apache.org is subscribed 
to https://forge-allura.apache.org/p/allura/tickets/

To unsubscribe from further messages, a project admin can change settings at 
https://forge-allura.apache.org/p/allura/admin/tickets/options.  Or, if this is 
a mailing list, you can unsubscribe from the mailing list.

[allura:tickets] #8192 StopForumSpam filter and moderation+spam update

2018-03-07 Thread Dave Brondsema
- **summary**: StopForumSpam filter --> StopForumSpam filter and 
moderation+spam update
- Description has changed:

Diff:



--- old
+++ new
@@ -1 +1,3 @@
 There's an existing SpamFilter interface we can use to implement filtering 
with StopForumSpam files.  And it'd be good to expand the spam filters to 
support using multiple filters not just one.
+
+Also posts that are already destined for moderation, and are also spam still 
just end up in the moderation queue.  Changes here will put them directly into 
the 'spam' status and not show up in moderation.



- **status**: in-progress --> review
- **Comment**:

db/8192 branch

* new entry point for stopforumspam needs to be registered, so run: 
`docker-compose run taskd python setup.py develop`
* download a file like listed_ip_180_all.txt from 
https://www.stopforumspam.com/downloads 
* add some settings to development.ini to test, e.g.:

```
spam.method = stopforumspam
spam.stopforumspam.ip_addr_file = /allura/listed_ip_180_all.txt
```

* ip addresses within docker can be a bit weird.  To test, I printed the `ip` 
result from `StopForumSpamSpamFilter.check` and then added that ip address to 
the .txt file



---

** [tickets:#8192] StopForumSpam filter and moderation+spam update**

**Status:** review
**Milestone:** unreleased
**Created:** Tue Mar 06, 2018 10:29 PM UTC by Dave Brondsema
**Last Updated:** Tue Mar 06, 2018 10:29 PM UTC
**Owner:** Dave Brondsema


There's an existing SpamFilter interface we can use to implement filtering with 
StopForumSpam files.  And it'd be good to expand the spam filters to support 
using multiple filters not just one.

Also posts that are already destined for moderation, and are also spam still 
just end up in the moderation queue.  Changes here will put them directly into 
the 'spam' status and not show up in moderation.


---

Sent from forge-allura.apache.org because dev@allura.apache.org is subscribed 
to https://forge-allura.apache.org/p/allura/tickets/

To unsubscribe from further messages, a project admin can change settings at 
https://forge-allura.apache.org/p/allura/admin/tickets/options.  Or, if this is 
a mailing list, you can unsubscribe from the mailing list.

[allura:tickets] #8191 Remove html-only mailing options

2018-03-07 Thread Kenton Taylor
- **status**: review --> closed
- **Comment**:

Merged.



---

** [tickets:#8191] Remove html-only mailing options**

**Status:** closed
**Milestone:** unreleased
**Created:** Tue Feb 27, 2018 06:03 PM UTC by Dave Brondsema
**Last Updated:** Wed Feb 28, 2018 10:01 PM UTC
**Owner:** Dave Brondsema


On /auth/subscriptions/ their are choices for HTML, Plain Text, or Combined 
emails.  Sending html-only mails can trigger spam warnings like this one from 
spamassassin:

2.3 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

There's no reason we need to offer HTML-only.  All HTML mail clients can handle 
multipart (combined) mails.  So I think we should consider all HTML-only 
preferences as "Combined".  And on the preferences page, remove "HTML" and then 
rename "Combined" to "HTML" (or rich text / formatted / something better?)


---

Sent from forge-allura.apache.org because dev@allura.apache.org is subscribed 
to https://forge-allura.apache.org/p/allura/tickets/

To unsubscribe from further messages, a project admin can change settings at 
https://forge-allura.apache.org/p/allura/admin/tickets/options.  Or, if this is 
a mailing list, you can unsubscribe from the mailing list.

[allura:tickets] #8193 Allow rate-limiting of comments

2018-03-07 Thread Kenton Taylor
- **status**: open --> review



---

** [tickets:#8193] Allow rate-limiting of comments**

**Status:** review
**Milestone:** unreleased
**Created:** Wed Mar 07, 2018 03:45 PM UTC by Kenton Taylor
**Last Updated:** Wed Mar 07, 2018 05:06 PM UTC
**Owner:** Kenton Taylor


Creating of tickets, wikis, projects, etc can all be optionally rate-limited.  
We should allow the same ability for posting comments.


---

Sent from forge-allura.apache.org because dev@allura.apache.org is subscribed 
to https://forge-allura.apache.org/p/allura/tickets/

To unsubscribe from further messages, a project admin can change settings at 
https://forge-allura.apache.org/p/allura/admin/tickets/options.  Or, if this is 
a mailing list, you can unsubscribe from the mailing list.

[allura:tickets] #8193 Allow rate-limiting of comments

2018-03-07 Thread Kenton Taylor
kt/8193


---

** [tickets:#8193] Allow rate-limiting of comments**

**Status:** open
**Milestone:** unreleased
**Created:** Wed Mar 07, 2018 03:45 PM UTC by Kenton Taylor
**Last Updated:** Wed Mar 07, 2018 03:45 PM UTC
**Owner:** Kenton Taylor


Creating of tickets, wikis, projects, etc can all be optionally rate-limited.  
We should allow the same ability for posting comments.


---

Sent from forge-allura.apache.org because dev@allura.apache.org is subscribed 
to https://forge-allura.apache.org/p/allura/tickets/

To unsubscribe from further messages, a project admin can change settings at 
https://forge-allura.apache.org/p/allura/admin/tickets/options.  Or, if this is 
a mailing list, you can unsubscribe from the mailing list.

[allura:tickets] #8193 Allow rate-limiting of comments

2018-03-07 Thread Kenton Taylor



---

** [tickets:#8193] Allow rate-limiting of comments**

**Status:** open
**Milestone:** unreleased
**Created:** Wed Mar 07, 2018 03:45 PM UTC by Kenton Taylor
**Last Updated:** Wed Mar 07, 2018 03:45 PM UTC
**Owner:** Kenton Taylor


Creating of tickets, wikis, projects, etc can all be optionally rate-limited.  
We should allow the same ability for posting comments.


---

Sent from forge-allura.apache.org because dev@allura.apache.org is subscribed 
to https://forge-allura.apache.org/p/allura/tickets/

To unsubscribe from further messages, a project admin can change settings at 
https://forge-allura.apache.org/p/allura/admin/tickets/options.  Or, if this is 
a mailing list, you can unsubscribe from the mailing list.