Registration email domain blacklisting

[linuxlover]

I was annoyed by users registering with disposable/throwaway/temporary email addresses (like mailinator),
so I decided to develop a plugin to prevent that.

The ACP is just a textarea where you can paste your email domains that you want to blacklist (one per line).
Example of a maintained blacklist.
Edit: It can now also use isTempMail API to check the domain.

If an user register (or update his email address) with an email address that is blacklisted, it will block the registration with an error message.

Build software better, together

GitHub is where people build software. More than 100 million people use GitHub to discover, fork, and contribute to over 420 million projects.

GitHub (github.com)

npm install nodebb-plugin-email-blacklist

nodebb-plugin-email-blacklist

nodebb email blacklist. Latest version: 3.0.0, last published: 8 months ago. Start using nodebb-plugin-email-blacklist in your project by running `npm i nodebb-plugin-email-blacklist`. There are no other projects in the npm registry using nodebb-plugin-email-blacklist.

npm (www.npmjs.com)

[PitaJ]

Nice work. Looks really useful.

[yariplus]

Clever

[meetdilip]

Awesome !!

[rod]

Would you consider adding hooks to use a back end service such as IsTempMail for the aggregation of fake email domains?

Block Disposable Email Addresses - Detect Temporary Mails WordPressPHPnpmJavascript

Detect and block disposable, temporary, fake email addresses. Fight spam, fraud and free trial abuse. Available as WordPress plugin and via JSON API.

(www.istempmail.com)

[linuxlover]

@rod
Very good idea!
Done
https://i.imgur.com/PA6Zbbl.png

[fasterthan]

@Annihil Is there an option to use a whitelist instead?

[Wamakaska]

Hi, sorry to up this old topic, but is it possible to update this plugin. Or is there an other plugin which is able to blacklist a email or a domain ?
Indeed, I have regularly new members with an email @dl.quirkymeme.com. I have blacklisted all their IP (about 44) but they always come. I think it will be more simple to block the domain @dl.quirkymeme.com.

PS : sorry for my english, I'm french.

[Wamakaska]

No response...

For waiting, if someone wants my whole list of blacklisted IP (I update it when A find new IP), you can find it here https://www.lereboot.com/topic/13832/bloquer-blacklister-les-bots-dl-quirkymeme-com
It's not perfect, but it's better than nothing.

[julian]

@Raccoon -- we can probably take over this plugin, it seems quite popular

What's the problem with it, doesn't start?

[Wamakaska]

@julian yes it doesn't start. When I click to access the settings, nothing happens. The progress bar stops to 2/3 and the circle turns indefinitly.

[Maleficent]

@julian said in Registration email domain blacklisting:

@Raccoon -- we can probably take over this plugin, it seems quite popular

What's the problem with it, doesn't start?

There is this error on console, the plugin doesn't load the template

[Wamakaska]

@Maleficent heureusement que tu as des réflexes de développeuse

[The Worms]

Le plugin n'est plus à jour et donc ne suit pas les nouvelles updates

Il est testé pour nodebb 1.4.5 maximum... pour le moment
Du coup le chemin de la librairie n'est pas bon

[julian]

@Raccoon @Maleficent

The plugin is tested and seems to work fine. In your case @Maleficent, you need to run ./nodebb build after activating the plugin.

I sent over a PR to fix up a typo in the library, but that version (with the typo) was never published to npm, so the existing version on npm should still work with latest NodeBB.

[gotwf]

@julian Have you tested recently with isTempMail enabled? No API token required? I was expecting to need one but seems I am missing something?

In any case, it is blocking manually added domains but does not appear to be blocking via isTempMail domains, e.g. an temp-mail.org address, and I did not find anywhere to add my isTempMail API token.

I am still on 1.12.

TIA.

[gotwf]

Did a bit more investigating. Plugin is definitely broken using isTempMail API. Evidently when first coded the public api was free and did not require an api key.

{"error":"no_token","error_description":"Please add API token to your request."}

I am a freak and do not code Javascript. Given that, I do not grok anywhere in this code that generates an opportunity to provide one:

Build software better, together

GitHub is where people build software. More than 100 million people use GitHub to discover, fork, and contribute to over 420 million projects.

GitHub (github.com)

Query url needs to look like this:

https://www.istempmail.com/api/check/YOUR-isTempMail-API-KEY/example.com (or can also handle full [email protected]).

Update: I can confirm the URL string above works via manual submission, but not via simple edit of nodebb-plugin-email-blaclist/library.js's isTempMail function's path.

[gotwf]

Well looks like I was an ID10T on this one. npm install pulls the original Annihil version cuz that is where package.json tells it to grab it from.

1. Manual installation of Julian's/NodeBB 3rd Party forked version, available here: https://github.com/NodeBB-Community/nodebb-plugin-email-blacklist

2. Coupled with my URL query string update above and ... voila! Now works dandy w/both manually added addresses and istempmail.org API key.

The function isTempMail's path var needs to be thusly:

path: '/api/check/Your-API-Key-Here/' + email

Or maybe I neglected the trailing slash first time around. In any event, geronimo, there ya' go.

[crazycells]

hi @julian , will this plugin be updated to work with NodeBB 1.19.0 ?

GitHub - NodeBB-Community/nodebb-plugin-email-blacklist: A NodeBB plugin that provides email blacklist feature

A NodeBB plugin that provides email blacklist feature - NodeBB-Community/nodebb-plugin-email-blacklist

GitHub (github.com)

currently, it does not prevent registration addresses from the blacklisted domains...

Additionally, the original repository is gone but the broken link is in the package.json, I guess it makes sense to update that too. Thanks in advance.

[volanar]

@crazycells said in Registration email domain blacklisting:

hi @julian , will this plugin be updated to work with NodeBB 1.19.0 ?

GitHub - NodeBB-Community/nodebb-plugin-email-blacklist: A NodeBB plugin that provides email blacklist feature

A NodeBB plugin that provides email blacklist feature - NodeBB-Community/nodebb-plugin-email-blacklist

GitHub (github.com)

currently, it does not prevent registration addresses from the blacklisted domains...

Additionally, the original repository is gone but the broken link is in the package.json, I guess it makes sense to update that too. Thanks in advance.

Usually opencollective is used to finance the support of third-party plugins. Without such support, it is impossible for a small team to support all plugins.
Example:
https://opencollective.com/flarum
https://opencollective.com/discourse
@baris, what do you think about it? Open an account for podderki third-party plugins and nodebb in general.