bbAntiSpam: Discuss how to stop web spam

[timur.tatlibal]

Pleasd dont spam me its ok now ore i musst got to the police.

[admin]

We don't spam you. Why do you think the spam is from us?
_________________
Oleg Parashchenko, bbAntiSpam
Do you love our tools? Please sponsor further development!

[Fabrease]

Here's why he thinks it's you. And please note the reason why thiese are sent to me everyday 10 times a day....

Message 1
user 'Catdogcatdogcatdogcatdogc' has failed to answer the Textual Confirmation
question correctly. It might be a spambot, therefore the
registration is rejected.
--
User: Catdogcatdogcatdogcatdogc
E-mail domain: @highschoolindex.com
Website:
Signature:
--
Data provided by the server:
REMOTE_ADDR=210.87.251.41
HTTP_USER_AGENT=Opera/7.21 (Windows NT 5.0; U) [en]
HTTP_VIA=1.1 LMCMPS_PROXY, 1.0 wttaos03:80 (squid/2.5.STABLE6)
HTTP_X_FORWARDED_FOR=203.198.162.124
ENCODING=iso-8859-1
--
You are using the COMMUNITY EDITION of Textual Confirmation. This
message is also SENT TO THE COMMUNITY SPAM DATABASE. If you don't
like it, buy the business edition license:
http://bbantispam.com/tc/?mode=register
--
Textual Confirmation, http://bbantispam.com/tc/


Message 2
User 'Bexsi' has failed to answer the Textual Confirmation
question correctly. It might be a spambot, therefore the
registration is rejected.
--
User: Bexsi
E-mail domain: @highschoolindex.com
Website:
Signature:
--
Data provided by the server:

REMOTE_ADDR=210.87.251.107
HTTP_USER_AGENT=Opera/7.21 (Windows NT 5.0; U) [en]
HTTP_VIA=1.1 LMCMPS_PROXY, 1.0 wttaos03:80 (squid/2.5.STABLE6)
HTTP_X_FORWARDED_FOR=203.198.162.124
ENCODING=iso-8859-1
-
You are using the COMMUNITY EDITION of Textual Confirmation. This
message is also SENT TO THE COMMUNITY SPAM DATABASE. If you don't
like it, buy the business edition license:
http://bbantispam.com/tc/?mode=register
--
Textual Confirmation, http://bbantispam.com/tc/

Message 3
User 'Phatty' has failed to answer the Textual Confirmation
question correctly. It might be a spambot, therefore the
registration is rejected.

--

User: Phatty
E-mail domain: @highschoolindex.com
Website:
Signature:
--
Data provided by the server:

REMOTE_ADDR=210.87.251.107
HTTP_USER_AGENT=Opera/7.21 (Windows NT 5.0; U) [en]
HTTP_VIA=1.1 LMCMPS_PROXY, 1.0 wttaos03:80 (squid/2.5.STABLE6)
HTTP_X_FORWARDED_FOR=203.198.162.124
ENCODING=iso-8859-1
--
You are using the COMMUNITY EDITION of Textual Confirmation. This
message is also SENT TO THE COMMUNITY SPAM DATABASE. If you don't
like it, buy the business edition license:
http://bbantispam.com/tc/?mode=register
--
Textual Confirmation, http://bbantispam.com/tc/

Message 4
User 'Abdoerbunlen' has failed to answer the Textual Confirmation
question correctly. It might be a spambot, therefore the
registration is rejected.
--
User: Abdoerbunlen
E-mail domain: @lmaorofllol.info
Website:
Signature:
--
Data provided by the server:

REMOTE_ADDR=74.79.217.207
HTTP_USER_AGENT=Opera/7.21 (Windows NT 5.0; U) [en]
ENCODING=iso-8859-1
-
You are using the COMMUNITY EDITION of Textual Confirmation. This
message is also SENT TO THE COMMUNITY SPAM DATABASE. If you don't
like it, buy the business edition license:
http://bbantispam.com/tc/?mode=register
--
Textual Confirmation, http://bbantispam.com/tc/

Message 5

User 'Sedes' has failed to answer the Textual Confirmation
question correctly. It might be a spambot, therefore the
registration is rejected.
--
User: Sedes
E-mail domain: @lmaorofllol.info
Website:
Signature:
--
Data provided by the server:

REMOTE_ADDR=74.79.217.207
HTTP_USER_AGENT=Opera/7.21 (Windows NT 5.0; U) [en]
ENCODING=iso-8859-1
--
You are using the COMMUNITY EDITION of Textual Confirmation. This
message is also SENT TO THE COMMUNITY SPAM DATABASE. If you don't
like it, buy the business edition license:
http://bbantispam.com/tc/?mode=register
--
Textual Confirmation, http://bbantispam.com/tc/


Need I continue? No I think not. Please take note of where the links divert you and you'll figure out why the f*** we think it's you. Please remove me. And if it's NOT you please don't encourage your webmasters to spam emails to get hits for your page. And if it IS your webmasters please find out who is doing this to me and ask them to remove me.

Mike

[admin]

Hello,

thanks for details and sorry for delay, I was on vacations.

[Kareeser]

You're gonna go to the police? Laughable.

Just filter the emails, they all have the same subject. Jeez.

[bruncan]

actually there is a way to stop the emails.
first find this code in the includes\functions_tc.php

/*function tc_bad_answer() {
global $error, $error_msg, $lang, $phpbb_root_path, $phpEx, $board_config;
global $lang, $username, $email, $website, $signature;
global $HTTP_SERVER_VARS;
//
// Set the error flag and the error message
//
tc_load_lang();
$error = TRUE;
$s = $lang['tc_bad_answer'];
if (isset($error_msg) && (!empty($error_msg))) {
$error_msg = $error_msg . '<br />' . $s;
} else {
$error_msg = $s;
}
//
// Send an email to update the public database of spammers,
// unless the user has a license
//
$lic_file = $phpbb_root_path . 'includes/bbantispam.key';
$lic_key = 'x';
$key = '';
if (file_exists (@phpbb_realpath ($lic_file))) {
include($lic_file);
$s1 = strtr(strtolower($board_config['server_name']), array(' ' => '', '.' => '', 'w' => ''));
$s2 = strtr(strtolower($lic_server), array(' ' => '', '.' => '', 'w' => ''));
if ($s1 == $s2) {
$key = md5($s1);
if ($key == $lic_key) {
if (! (isset($tc_notify) and $tc_notify)) {
return;
}
}
}
}


then replace it with this code

function tc_bad_answer() {
global $error, $error_msg, $lang, $phpbb_root_path, $phpEx, $board_config;
tc_load_lang();
$error = TRUE;
$s = $lang['tc_bad_answer'];
if (isset($error_msg) && (!empty($error_msg))) {
$error_msg = $error_msg . '<br />' . $s;
} else {
$error_msg = $s;
}
}


if you do it correctly and then reinstall the mod it should get rid of the emails being sent. at least thats what happened for me