[GRASS-dev] Fwd: new trac anti-spam filter

[Markus Neteler]

FYI!

(I'm in the OSGeo-SAC team but thought to fwd here to avoid any bus factor)

Indeed, we have spam in our wiki, see
https://trac.osgeo.org/grass/admin/spamfilter/monitor

I cleaned that one up now.

Markus

---------- Forwarded message ----------
From: Sandro Santilli <strk at keybit.net>
Date: Sat, May 7, 2016 at 7:01 PM
Subject: Re: [SAC] fail2ban osgeo-trac-spam jail disabled
To: System Administration Committee Discussion/OSGeo <sac at lists.osgeo.org>


On Sat, May 07, 2016 at 04:40:16PM +0200, Markus Neteler wrote:
> On May 7, 2016 3:57 PM, "Sandro Santilli" <strk at keybit.net> wrote:
> ...
> > Contextually, I've made sure TracSpamPlugin is enabled in each
> > and every instance, so from now on spam filtering should be dealth
> > with via the admin panel of each instance.
>
> Thanks. Is there any action item related to this for trac admins?

The action is: configure the filter.
Unfortunately the configuration is per-instance so cannot be shared.
I've been playing a bit with ossim as it was under attack.

The default configuration doesn't catch much spam, especially as
the score of being authenticated is very high (20). Not many systems
allow spammers to register accounts (fixing the LDAP registration
is top priority to reduce spam). The score of various filters can
be set via https://trac.osgeo.org/INSTANCE/admin/spamfilter/config

It also helped to create a BadContent wiki page, see
https://trac.osgeo.org/ossim/wiki/BadContent
It needs be improved, and ideally copied among the various
instances.

Then you can train the bayes db, going to:
https://trac.osgeo.org/INSTANCE/admin/spamfilter/monitor
and telling spam from ham.

These activities can by default only be done by those who
have TRAC_ADMIN permission, but the plugin adds also spamfilter
specific permissions you could use to grant more power to
others. Details here:
https://trac.edgewall.org/wiki/SpamFilter#Permissions

If someone would write these various things on a wiki page and link
the new page from Trac_Instances it would be helpful.

--strk;
_______________________________________________
Sac mailing list
Sac at lists.osgeo.org
http://lists.osgeo.org/mailman/listinfo/sac