We had a spamattack today. My first measures was to delete the user and posts, but he returned… so now I made some more changes.
- Banned user and email of course, and deleted posts
- I blocked a big range of ip-addresses (which seem to be connected with phishing and other crap).
- I changed the registration at YashicaForum.com so now you need to confirm your mail when registering
- New passwords need to have both numbers and letters.
Defensiv changes
None of these will totally stop this kind of shit, but the main idea is to make it not worth while the effort. I’m going to look in to phpBB3s extensions if there are any spamprotection like Bad Behavior or Akismet. If these keeps on going there are more settings to use in phpBB3, but they moght be inconvinient for the real users so I rather not… like admin approval when registering, first 3 post needs approval and so on.
Maybe I should also get some moderators.
If anyone have more ideas, let me know.