Slashdot Mirror

← Back to Stories (view on slashdot.org)

Stopping Spambots: A Spambot Trap

Posted by Hemos on from the stopping-the-bots dept.

Neil Gunton writes "Having been hit by a load of spambots on my community site, I decided to write a Spambot Trap which uses Linux, Apache, mod_perl, MySQL, ipchains and Embperl to quickly block spambots that fall into the trap. "

3 of 304 comments (clear)

  1. Take a look in the mirror by Spackler · · Score: 5, Informative


    Superior Labs spambot_trap mirror

    -Spack

  2. A tip by anthony_dipierro · · Score: 5, Informative

    Here's a tip for those of you writing spambot traps... How about not blindly responding to the faked Return-Path address?

    Now that should be illegal. You people whine about your 10 spams a day, try 10,000 from 2000 different email addresses. Idiot postmasters should be caught and jailed.

  3. he suggests formmail, another spam tool by nwc10 · · Score: 5, Informative
    Interestingly within the article he suggests hiding your e-mail addresses by making a feedback page. One of the programs that he suggests is formmail, and he links to Matt's original version.

    formmail itself (even the most recent version) can still be abused by spammers to use your webserver as a bulk mail relay - see the advisory at
    http://www.monkeys.com/anti-spam/formmail-adviso ry . df

    It's a shame he didn't suggest the more robust formmail replacement at nms which is maintained, and attempts to close all the known bugs and insecurities.