mu.nu - "My Tamagotchi!" she said. "It has to poop."
March 21, 2006
Oh, you just gotta love checking the email in the morning:
Note the 101 entries -- exactly 9 are actual emails, the rest are trackback spam from 10pm to 7:30am EST.
Posted by: Ogre at 12:52 PM | Comments (21) | Add Comment | Trackbacks (Suck)
I too get hammered, not as much as Ogre. Then I delete them...
Any suggestions?
SR
Posted by: Sacramento Republicrat @ at March 21, 2006 07:59 PM
Posted by: Ogre @ at March 21, 2006 08:35 PM
Posted by: Ted @ at March 21, 2006 09:18 PM
Posted by: Ogre @ at March 21, 2006 09:47 PM
Posted by: Pixy Misa @ at March 21, 2006 10:14 PM
Posted by: Ogre @ at March 21, 2006 10:20 PM
The way Snark works is it performs a statistical analysis of all the trackbacks received by the munu blogs, and anyone who is sending too many trackbacks gets flagged as a spammer. Depending on the volume and the time frame, this means that further pings from them get blocked either temporarily or permanently. It tracks both domain names and the IP addresses of spammers, and it blocks 99% of trackbacks even before they get to the blacklist.
But - it only works when someone is spamming the whole of munu. If they spam just one blog, and it trickles in overnight, Snark never works out that it's spam.
So it's not perfect, but it has blocked two million trackbacks in four months, which is something we can all be thankful for.

Posted by: Pixy Misa @ at March 22, 2006 12:23 AM
One of the options in Snark!™ is to block trackbacks to old posts, but the definition of "old" was itself somewhat old. I've updated it now, which should stop about 80% of the spam you're getting. MT Blacklist also helps, of course, but it's good to stop the spam as early as possible.
Posted by: Pixy Misa @ at March 22, 2006 05:16 AM
Posted by: Pixy Misa @ at March 22, 2006 05:32 AM
Of course, the other filter rules (age, volume, IP address etc) usually zap them anyway, but all those throwaway domains were clogging up the blacklist and slowing things down.
Posted by: Pixy Misa @ at March 22, 2006 05:46 AM
The two big ones that were hitting me were xxxxx (dot) proboards ### (.com) and pubxx.something.com. Once I figured out the format to blog xxx (dot) proboards### (.com), that picked up a lot of them -- but they were also spaced out a few minutes apart to get past the timing check on the spam blocker, those bastards.
Posted by: Ogre @ at March 22, 2006 12:22 PM
Posted by: 3d accessories @ at April 15, 2011 03:29 AM
Processing 0.01, elapsed 0.0129 seconds.
22 queries taking 0.0092 seconds, 34 records returned.
Page size 12 kb.
Powered by Minx 0.8 beta.