Registration email domain blacklisting

gotwf

@julian Have you tested recently with isTempMail enabled? No API token required? I was expecting to need one but seems I am missing something?

In any case, it is blocking manually added domains but does not appear to be blocking via isTempMail domains, e.g. an temp-mail.org address, and I did not find anywhere to add my isTempMail API token.

I am still on 1.12.

TIA.

gotwf

Did a bit more investigating. Plugin is definitely broken using isTempMail API. Evidently when first coded the public api was free and did not require an api key.

{"error":"no_token","error_description":"Please add API token to your request."}

I am a freak and do not code Javascript. Given that, I do not grok anywhere in this code that generates an opportunity to provide one:

Build software better, together

GitHub is where people build software. More than 100 million people use GitHub to discover, fork, and contribute to over 420 million projects.

GitHub (github.com)

Query url needs to look like this:

https://www.istempmail.com/api/check/YOUR-isTempMail-API-KEY/example.com (or can also handle full [email protected]).

Update: I can confirm the URL string above works via manual submission, but not via simple edit of nodebb-plugin-email-blaclist/library.js's isTempMail function's path.

gotwf

Well looks like I was an ID10T on this one. npm install pulls the original Annihil version cuz that is where package.json tells it to grab it from.

Manual installation of Julian's/NodeBB 3rd Party forked version, available here: https://github.com/NodeBB-Community/nodebb-plugin-email-blacklist
Coupled with my URL query string update above and ... voila! Now works dandy w/both manually added addresses and istempmail.org API key.

The function isTempMail's path var needs to be thusly:

path: '/api/check/Your-API-Key-Here/' + email

Or maybe I neglected the trailing slash first time around. In any event, geronimo, there ya' go.

crazycells

hi @julian , will this plugin be updated to work with NodeBB 1.19.0 ?

GitHub - NodeBB-Community/nodebb-plugin-email-blacklist: A NodeBB plugin that provides email blacklist feature

A NodeBB plugin that provides email blacklist feature - NodeBB-Community/nodebb-plugin-email-blacklist

GitHub (github.com)

currently, it does not prevent registration addresses from the blacklisted domains...

Additionally, the original repository is gone but the broken link is in the package.json, I guess it makes sense to update that too. Thanks in advance.

volanar

@crazycells said in Registration email domain blacklisting:

hi @julian , will this plugin be updated to work with NodeBB 1.19.0 ?

GitHub - NodeBB-Community/nodebb-plugin-email-blacklist: A NodeBB plugin that provides email blacklist feature

A NodeBB plugin that provides email blacklist feature - NodeBB-Community/nodebb-plugin-email-blacklist

GitHub (github.com)

currently, it does not prevent registration addresses from the blacklisted domains...

Additionally, the original repository is gone but the broken link is in the package.json, I guess it makes sense to update that too. Thanks in advance.

Usually opencollective is used to finance the support of third-party plugins. Without such support, it is impossible for a small team to support all plugins.
Example:
https://opencollective.com/flarum
https://opencollective.com/discourse
@baris, what do you think about it? Open an account for podderki third-party plugins and nodebb in general.

julian

@crazycells The plugin has now been updated to support v2.

The isTempMail portion is now disabled as that API is no longer free.

gotwf

@julian said in Registration email domain blacklisting:

The isTempMail portion is now disabled as that API is no longer free.

Damn. Well, that sucks!

Good to know, though. I have not kept up w/the isTempMail "news".

Now the question becomes... how to replicate it as true ROSS plugin? Hmm...

julian

@gotwf chasing after temporary mail domains is like playing whack-a-mole. There's no way to do it cheaply because there's some human element involved..

I wonder if anyone maintains a GitHub gist of temp mail domains ... Hmm

Edit: a ha! https://github.com/disposable-email-domains/disposable-email-domains

gotwf

@julian said in Registration email domain blacklisting:

@gotwf chasing after temporary mail domains is like playing whack-a-mole.

Yep. Hence the "thinking" emoji.

I was pondering how isTempMail might be handling this on the backend. I presumed it must be automated/ai in some way because....

There's no way to do it cheaply because there's some human element involved..

I wonder if anyone maintains a GitHub gist of temp mail domains ... Hmm

Edit: a ha! https://github.com/disposable-email-domains/disposable-email-domains

Yes, "they" do.

Many such specialized black lists, actually. Issue is the veracity thereof. Many of these miscreant types are able to leverage large discontinuous IP blocks. Ever fsck'ing evolution of the arms race 'twixt good and evil. And of course, the latter always has the advantage.

gotwf

@julian Just found this:

burner-email-providers

A list of burner email providers.. Latest version: 1.0.67, last published: 3 years ago. Start using burner-email-providers in your project by running `npm i burner-email-providers`. There is 1 other project in the npm registry using burner-email-providers.

npm (www.npmjs.com)

There are several others. That one looks to be the most "recently" maintained. Maybe worth a gander?

crazycells

@julian thanks

<baris>

Plugin updated to work on 3.2.0 and up, latest version is 3.0.0.

crazycells

@baris thank you. this is a very useful plugin.

admins can copy the email list from here:

disposable-email-domains/disposable_email_blocklist.conf at main · disposable-email-domains/disposable-email-domains

a list of disposable and temporary email address domains - disposable-email-domains/disposable_email_blocklist.conf at main · disposable-email-domains/disposable-email-domains

GitHub (github.com)