프로필 스팸: 계정 삭제 및 이메일 차단 옵션은 있지만 IP 주소는 차단되지 않음

다음에서 이어서 가져온 내용입니다:

리뷰 대기열에서 사용자 프로필 스팸머를 처리할 때 개선 사항을 제안합니다. 정당한 사용자들도 사용 중인 공유 IP 범위를 자주 사용하기 때문에, 계정을 삭제하고 이메일을 차단하되 IP 주소는 차단하지 않는 옵션이 있으면 좋겠습니다.

14개의 좋아요

If not mistaken you can delete account and block the email. Though many use disposable email account services. I usually search spam account email domain. If a disposable email service I add the domain to the blocked/Black list in settings.

2개의 좋아요

Right, but as far as I can tell, that handling option also blocks the IP address, which I would prefer to avoid.

Spammers do often use free email addresses, but they’re usually from the big providers like Gmail and Microsoft that make it fairly hard to bulk create new addresses, so blocking the email address is a somewhat effective way of preventing the same spammer from returning while completely avoiding false positives, whereas blocking the IP is almost useless for preventing repeat spammers while also having the possibility of blocking other legitimate users with the same IP.

It has been awhile since I have had to delete an account. Though a perm suspension would work to prevent the same spammer from using that email account to create a new account. Suspended users you can set the site to not show non staff suspended. You can also change their profile to hide from public.

Most of the spam e-mails I see are using gmail, I agree would be ideal to have an option to block only e-mail not I.P. address.

Some proxy/disposable e-mail services were created also specifically for the purpose to stop spammers, so people don’t need to give out their main personal e-mail but only a proxy address that can be destroyed if spammers start to attack that.

Protonmail has a feature sort of like this called “simplelogin,” which allows people to create new temporary addresses and sub-domains:

1개의 좋아요

Depending on the kind of I.P. that may not make any sense at all such as if it is from public wi-fi like a library. The I.P. lookup feature with the admin dashboard is helpful to show what kind of a I.P. is being used, including the internet provider.

I’m not sure if there is a way to identify if someone is using a vpn with that? There is the suspicious login alert if login is changing countries, but otherwise are there ways to check if I.P. is a proxy address or the original source?

2개의 좋아요

Yes, exactly. Also IP ranges that cheap home internet ISPs assign to customers on a random and non-static basis.

1개의 좋아요

Right, but if there is a static I.P. that is causing problems it does make sense to ban that at times.

It’s not easy to determine if it’s a static IP or not from the review queue. I agree that the option should remain, but an additional option to only block the email address is needed.

Good to know, well the way would probably be to contact the internet provider if possible to determine source. For me that is my friend George who runs local phone/internet company. Here there are static I.P. addresses for individual fiber routers.

Seems that if someone attempts to login to account from IP that was banned an error appears that states: “You can’t log in from that IP address.”

Don’t know if there is a way to lift a ban like that if requested.

The sole method to remove a prohibition would entail accessing the

Yourwebsite/logs/screened_ip_addresses

It appears that you have inadvertently blocked an IP address associated with a VPN or mobile data, as opposed to a fixed IP address.

Or if a fixed I.P. was banned then no one will be able to use that to login without routing traffic through another network.

1개의 좋아요

I agree, it’s also worse for mobile connections. Because many people can have the same IP simultaneously (hundreds to thousands).

Would be great for the option (delete + block email without ip block) to also be included in the delete user option on the profile admin page.

또한, 첫 번째 게시물에서 언급한 이유로 IP 주소를 차단하지 않고 해당 계정을 영구 정지하는 빠른 옵션이 있으면 좋겠습니다.

완료되었습니다:

9개의 좋아요

안녕하세요, 이 기능을 구현해 주셔서 정말 감사합니다!

밀접하게 관련되어 있어 여기에 게시합니다: 스팸 플래그와 같은 경우, 검토 대기열에서도 ‘사용자 이메일은 차단하되 IP 주소는 차단하지 않는’ 옵션을 직접 사용할 수 있으면 좋겠습니다(아래 예시에서는 ‘IP 주소 및 이메일 주소 모두 삭제 및 차단’ 옵션만 사용 가능합니다 – 스팸 감지를 위해 Akismet 플러그인을 사용 중입니다).

2개의 좋아요

동의합니다.

해당 기능이 검토 대기열에도 구현되는 대로 주제를 업데이트하겠습니다.

5개의 좋아요