Spam Protection

83 vues Markdown

Spam Protection screens guest-facing submissions for spam signals and keeps a record of what it has blocked.

Opening the Screen

It opens from Settings › Security. On the tab strip at the top of the page, select the Spam Protection tab: {admin}/settings/security?general=spamProtection

What Is on the Screen

An info banner explains the scope. These rules apply to every guest-facing form: contact form, support ticket, sign-up, blog and news comments, newsletter, and live chat. They also apply to messages arriving through Email Pipe. The rules are independent; a rule that is off is not applied anywhere.

Rules Four independent switches: the Project Honey Pot API, blocking temporary e-mail services, blocking anonymous IPs, and a list of blocked keywords.

Last 50 Blocked Records A collapsible section with the running total of everything ever blocked. Below it, a table of the most recent 50 submissions, with a button to read each one in full.

The total counter and the visible list are not the same thing

The number next to Total Spam Blocked keeps counting forever. The table underneath only shows the most recent 50 submissions. Older ones are removed automatically, so the table can be much shorter than the total.

Fields

Projecthoneypot.org API Looks the sender's IP up in the Project Honey Pot database and rejects the submission if its risk score is too high. Opens two more fields below it once switched on.

API Key Your key from projecthoneypot.org.

Risk Score The threshold above which a submission is rejected. Defaults to 25.

Block Temporary Email Services Blocks submissions made with a temporary or disposable e-mail address.

Block Anonymous IP Usage Blocks submissions coming through an anonymous IP such as a VPN or proxy.

Blocked Keywords One word per line. Matched against the message body as well as the sender's name, e-mail, phone, and domain.

Tasks

Turn on the Project Honey Pot check

Switch on Projecthoneypot.org API.
Enter your API key and set the risk score threshold.
Save. Submissions scoring above the threshold are rejected from then on.

Block a keyword

Add the word to the Blocked Keywords box, one entry per line.
Save.
Any guest submission containing that word, in the message or in the sender's name, e-mail, phone, or domain, is now rejected.

Review or clear blocked records

Open the Last 50 Blocked Records section.
Click the arrow on a row to read the full message.
To start over, click the clear button above the table and confirm. The total counter and the list both go back to zero.

Things to Watch

Each rule stands on its own

Turning off the keyword list, for example, does not weaken the other three rules. None of the four covers what another one catches, so turn on every protection you need.

This keyword list is separate from the one on Prohibited List

Blocked Keywords here rejects a guest submission at the moment it is sent. The Word List on the Prohibited List tab is a different setting that blocks sign-ups and purchases. Adding a word to one does not add it to the other.

Required Privileges

Saving changes and clearing blocked records need SECURITY_SETTINGS.

Exporting the Last 50 Blocked Records table needs TABLE_EXPORT.

Cet article vous a-t-il été utile ?

Merci pour votre retour !

Besoin d'aide supplémentaire ?

Notre équipe d'assistance est disponible 24h/24 pour tout ce que vous ne trouvez pas ci-dessus.

Nous contacter Ouvrir un ticket