Bot attack

a_5mith

@meetdilip just don't fill in the honeypot api.

meetdilip

After installing npm install nodebb-plugin-spam-be-gone , my ACP is not working. I restarted a couple of times using terminal. I can see the plugin under plugins option but whatever button I click on ACP does not work. That include " Restart Nodebb ".

The I tried npm remove nodebb-plugin-spam-be-gone . The cursor kept blinking for say 10 minutes and I closed the terminal to get out of it. Then restarted. Still no luck. Any help ?

julian

Invoke the log viewer by running ./nodebb log -- what errors do you see? Open another terminal and try restarting. Ctrl-C to exit.

meetdilip

@julian

info: [meta/css] Minifying LESS/CSS
info: [sounds] Sounds OK
info: [meta/css] Done.
info: [themes] Compiling templates
info: [themes] Successfully compiled templates.
info: NodeBB attempting to listen on: 0.0.0.0:80
info: NodeBB Ready
warn: [plugins/nodebb-plugin-emailer-local] "callbacked" deprecated as of 0.4x. Use asynchronous method instead for hook: filter:admin.header.build
info: [meta/js] Compilation complete
warn: [plugins/nodebb-plugin-emailer-local] "callbacked" deprecated as of 0.4x. Use asynchronous method instead for hook: filter:admin.header.build

meetdilip

Disabled emailer-local. Now working fine.

psychobunny

Just to add my 2 cents, I've been an admin at a bunch of big forums in the past (phpBB); the best spam prevention has been a Q&A "what's the name of this forum" kind of thing in registration. Of course, anybody could easily write a bot to solve that, but I guess the idea is that a good chunk of forum admins can get by with minimal spam prevention measures as the aforementioned.

julian

Baris brings up a good point with the "users with rep > x can flag2ban".

Where do we want to go with the rep system, anyway?

Scuzz

How can i tell if this project honeypot key is actually working?

meetdilip

No. of bot registrations will reduce.

a_5mith

@Scuzz the output log of node adds a warn user x denied registration when it happens.

Scuzz

@meetdilip That's quite hard to notice when we have like 3 every two months.

@a_5mith Thanks, i'll keep an eye on the logs

trevor

I wonder who created this bot program. I would like to thank them first and foremost for having expedite this honeypot / Captcha system, then I would like to tell them fuck you for having me go and delete 100 users manually.

Guiri

@bentael Awesome. Looking forward to it. What's the proper way to update when it is published? cd /var/node_modules/nodebb-plugins-spam-be-gone && git pull && npm install?

julian

@Guiri said:

@bentael Awesome. Looking forward to it. What's the proper way to update when it is published? cd /var/node_modules/nodebb-plugins-spam-be-gone && git pull && npm install?

npm-installed packages won't have git info. Just run npm install {plugin-name}@latest from the nodebb root folder.

psychobunny

@trevor said:

I wonder who created this bot program. I would like to thank them first and foremost for having expedite this honeypot / Captcha system, then I would like to tell them fuck you for having me go and delete 100 users manually.

LOL