Hi all. Working on getting an MU site up and rolling, installed Farm's pack, and have a user that is complaining about still getting spammed.
The trackback validator is catching 'em, but she's still getting emails because the trackback validator is putting them in her moderation queue (which, I understand the reasoning, 'cuase might not be spam and might want to let it through.).
The site is set to only allow registrations from people that have email addys belonging to our domain. And, aside from expanding the word list spam-filter.php and changing the captcha wordlist, Farm's pack is istalled without any mods/changes.
Her blog has the following settings (T=on, F=off):
T - Users must be registered and logged in to comment
F - Attempt to notify any Weblogs linked to from the article (slows down posting.)
F - Allow link notifications from other Weblogs (pingbacks and trackbacks.)
F - Allow people to post comments on the article
F - Anyone posts a comment
F - A comment is held for moderation
T - An administrator must always approve the comment
T - Comment author must fill out name and e-mail
T - Comment author must have a previously approved comment
Sample of spam she is getting:
---------------
[BLOCKED BY STBV] Soma buy soma cheap soma soma online. | archive.org/details/somason | IP: 216.130.161.111
Cheap soma….
Cheap soma watson. Cheap soma. Soma buy soma cheap soma soma online. Watson soma cheap….
---------------
She'd be happy with zero comments allowed (yeah, i know, defeats the whole purpose of a blog - sigh) and she definately doesnt want to have to do any moderation and doesnt want to continue to receive emails about spam.
Aside from expanding the list word filter in spam-filter.php (which i've been working on), is there anything I'm overlooking? And, any ideas as to why she still gets emails with the settings her blog has?
Thanks in advance
edit - i think i found possible reason these are still getting through. Old posts imported from old blog software are individually set to allow pings and comments.