# Spam Protection

https://docs.wisecp.com/de/spam-protection

Spam Protection screens guest-facing submissions for spam signals and keeps a record of what it has blocked.

## Opening the Screen

It opens from **Settings › Security**. On the tab strip at the top of the page, select the **Spam Protection** tab: `{admin}/settings/security?general=spamProtection`

## What Is on the Screen

An info banner explains the scope. These rules apply to every guest-facing form: contact form, support ticket, sign-up, blog and news comments, newsletter, and live chat. They also apply to messages arriving through Email Pipe. The rules are independent; a rule that is off is not applied anywhere.

- **Rules**: Four independent switches: the Project Honey Pot API, blocking temporary e-mail services, blocking anonymous IPs, and a list of blocked keywords.
- **Last 50 Blocked Records**: A collapsible section with the running total of everything ever blocked. Below it, a table of the most recent 50 submissions, with a button to read each one in full.

### The total counter and the visible list are not the same thing

The number next to Total Spam Blocked keeps counting forever. The table underneath only shows the most recent 50 submissions. Older ones are removed automatically, so the table can be much shorter than the total.

## Fields

- **Projecthoneypot.org API**: Looks the sender's IP up in the Project Honey Pot database and rejects the submission if its risk score is too high. Opens two more fields below it once switched on.
- **API Key**: Your key from projecthoneypot.org.
- **Risk Score**: The threshold above which a submission is rejected. Defaults to 25.
- **Block Temporary Email Services**: Blocks submissions made with a temporary or disposable e-mail address.
- **Block Anonymous IP Usage**: Blocks submissions coming through an anonymous IP such as a VPN or proxy.
- **Blocked Keywords**: One word per line. Matched against the message body as well as the sender's name, e-mail, phone, and domain.

## Tasks

### Turn on the Project Honey Pot check

1. Switch on **Projecthoneypot.org API**.
2. Enter your API key and set the risk score threshold.
3. Save. Submissions scoring above the threshold are rejected from then on.

### Block a keyword

1. Add the word to the **Blocked Keywords** box, one entry per line.
2. Save.
3. Any guest submission containing that word, in the message or in the sender's name, e-mail, phone, or domain, is now rejected.

### Review or clear blocked records

1. Open the **Last 50 Blocked Records** section.
2. Click the arrow on a row to read the full message.
3. To start over, click the clear button above the table and confirm. The total counter and the list both go back to zero.

## Things to Watch

> **Each rule stands on its own**
> 
> Turning off the keyword list, for example, does not weaken the other three rules. None of the four covers what another one catches, so turn on every protection you need.

> **This keyword list is separate from the one on Prohibited List**
> 
> Blocked Keywords here rejects a guest submission at the moment it is sent. The Word List on the Prohibited List tab is a different setting that blocks sign-ups and purchases. Adding a word to one does not add it to the other.

## Required Privileges

Saving changes and clearing blocked records need `SECURITY_SETTINGS`.

Exporting the Last 50 Blocked Records table needs `TABLE_EXPORT`.

## Related Articles

- [Prohibited List](https://docs.wisecp.com/en/prohibited-list)
- [Captcha Security](https://docs.wisecp.com/en/captcha-security)
- [Process Restriction](https://docs.wisecp.com/en/process-restriction)