cannoy make IP banwork

Hi - I'm getting lots of posts from porn operators and although I'm adding the ip address shown in the post to the banned list it doesn't seem to stop them.

I don't know why they bother because my guestbooks do not display the URL they post but is there a better way to stop them?

Cheers,
Neil

See Fixes and Mods 5 posts down. Get Carbonize's image verification script and his quick mod to log IP.

Also try adding some words to the list of words not allowed.

See if any of that helps.

Many IPs (like mine) change with each new internet connection. If you ban the IP you would be banning other people with that ISP who did not spam you.

Thanks for that. I've implemented the hack to get ip instead of domains and also already have some words in the banned list. I don't allow image posting or comments.

The latest posts all come from the same domain: unfortunately I've deleted all the emails with the full domain name but it was a .de TLD at 212.172.172.230. Ripe won't tell me who that is!

I'll know if it works tomorrow, as I've been getting several messages a day from them.

Cheers,

Neil

if you know the domain name try this...

http://www.whois.sc/domainnamehere.com

Auron

I don't allow image posting or comments.

The Image Verification Script has nothing to do with your allowing or disallowing image uploads. For lack of a better explanation, it is an "image" of a code that must be input so robots can't post. Look at Carbonize's thread to get the correct explanation. At any rate, you need to install this mod.

The ISP appears to be Tiscali.de in Germany

Send Complaints about spam and other netabuse to: team@abuse.tiscali.de

From: http://www.ripe.net/whois?

% This is the RIPE Whois tertiary server.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

inetnum: 212.172.0.0 - 212.172.255.255
org: ORG-TBG1-RIPE
netname: DE-NACAMAR-981217
descr: Tiscali Business GmbH
descr: Provider Local Internet Registry
country: DE
admin-c: TRR1-RIPE
tech-c: TRR1-RIPE
status: ALLOCATED PA
notify: ripe@de.tiscali.com
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: TISCALI-BACKBONE
mnt-routes: TISCALI-ROUTE
mnt-routes: TISCALI-BACKBONE
changed: hostmaster@ripe.net 19981217
changed: hostmaster@ripe.net 20030108
changed: hostmaster@ripe.net 20030317
changed: hostmaster@ripe.net 20040719
source: RIPE

route: 212.172.0.0/16
descr: Tiscali
origin: AS12312
mnt-by: TISCALI-BACKBONE
changed: dennis.kuchenbecker@de.tiscali.com 20011210
changed: sven.eisenmann@de.tiscali.com 20021217
source: RIPE

organisation: ORG-TBG1-RIPE
org-name: Tiscali Business GmbH
org-type: LIR
address: Robert-Bosch-Strasse 32
address: D-63303
address: Dreieich
address: Germany
phone: +49 6103 916 0
fax-no: +49 6103 916 898
e-mail: ripe@de.tiscali.com
admin-c: IRON1-RIPE
admin-c: MD1063-RIPE
admin-c: TRR1-RIPE
admin-c: KUCH3-RIPE
admin-c: VHUM-RIPE
mnt-ref: TISCALI-BACKBONE
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
changed: hostmaster@ripe.net 20040415
changed: bitbucket@ripe.net 20040719
changed: bitbucket@ripe.net 20041029
changed: bitbucket@ripe.net 20041029
changed: bitbucket@ripe.net 20041110
source: RIPE

role: TISCALI RIPE REGISTRY
address: Tiscali Business GmbH
address: Robert-Bosch-Str. 32
address: D-63303 Dreieich
address: Germany
phone: +49 6103 916 0
fax-no: +49 6103 916 898
e-mail: ripe@de.tiscali.com
trouble: Complaints about spam and other netabuse: team@abuse.tiscali.de
trouble: Requests from law enforcement (only!), Fax: +49 6103 916177
trouble: Inquiries can only be processed if sent to the correct address.
admin-c: IRON1-RIPE
tech-c: TRR1-RIPE
nic-hdl: TRR1-RIPE
remarks: RIPE-REGISTRY Tiscali Germany
mnt-by: TISCALI-ROOT
changed: ripe@b2b.tiscali.com 20040408
changed: ripe@de.tiscali.com 20040719
source: RIPE

Well, the IP ban hasn't worked, I'm still getting the postings and they are all from: ip-217-172-172-230.inaddr.intergenia.de

I've now emailed Tiscali with copies of the messages, maybe that will help.

Now I understand the purpose of the imgae verification script I'll have a goat installing that.

Cheers,
Neil

This computer can't type

Of course I mean I will have a go and install the script. Goats are not involved!

IP banning will not stop spam as they use different IP's every time.

OK, but according to the emails the script sends me, this lot is using the same one, as reported in my previous post.

In addition to my last coment, in this case ip banning is not working at all, as it has failed each time to prevent these posts. I have 217.172.172. entered into the ban list but it clearly isn't working. Am I entering the ip
address wrong?

Neil

it should be 4 sets of numbers e.g.

192.168.0.1

I have the full address entered too but the legend on the page says that I can ban a range by using just the first 3 numbers, is that not right?

Neil

I forgot about that. I don't know if you can make the range larger.

eg. 192.168

Auron

You can block an entire IP block if you wish, not advisable though. My image verifcation is best way to combat spam or change the name of the name input from gb_name to something else.