Spammers using uploaded images in spam e-mails. Any advice how to resolve?

[JammyDodger]

@fifafu

Do you know whether using S3 instead of my own server for uploads would resolve the issue? Is there maybe some way to only allow viewing of uploaded images to logged in users?

There is the Secure Uploads feature that may be of some use:

Secure Uploads

Added in the Discourse 2.4 release in February is the Secure Uploads feature, which provides a higher degree of security for ALL uploads (images, video, audio, text, pdfs, zips, and others) within a Discourse instance. Prerequisites You must have S3 uploads enabled on your site, which needs the following settings to be filled: S3 access key id S3 secret access key S3 region S3 upload bucket You also must be using an S3 bucket that does not have a Public bucket policy, and you need to make su…

Though it is an advanced setup, and not one I’m overly familiar with.

---

Actually, reading through it again, it may not be suitable for this after all:

@martin

Once you have enabled Secure Uploads, any file uploaded via the Composer will either be marked as secure or not secure based on the following criteria:

• If you have the “login required” site setting enabled, all uploads will be marked as secure, and anonymous users will not be able to access it.
• If you are uploading something within a Personal Message, it will be marked as secure.
• If you are uploading something within a Topic that is inside a private Category, it will be marked as secure.