> That's really too bad! My wiki sends me an email whenever 
> anyone posts,

As does piclist.com, and it does not post the post until I approve it. I
also have developed triggers for the common wiki-spam engines. E.g. there is
one that always includes "hhfgdgdf" and another always uses the name of a
state (e.g. Oregon, Washington, Texas, etc...) on a separate line. Anything
with [URL= or [b] gets canned. Also any reference to blogspot.com or
hometown.aol.com. And of course it blocks anything with the standard
erection or diet pills.

> and I haven't (yet) suffered wiki spam.

I went for a long time without any and then all of a sudden it just started
rolling in. Very sharp curve. Nothing one day, then 20 or so a day and
climbing to the current 70 or so daily.

> I do 
> have scripts watching the ssh log and blocking IP addresses 
> that have several failed logins, watching the mail log and 
> blocking IP addresses sendmail reports as break in attempts 
> and those IP addresses that hit a bunch of nonexistant email 
> addresses (old users deleted users, etc.), and watching the 
> web server log and blocking the IP address of those 
> requesting some Microsoft file (from a Linux system!), 
> includes xmlrp in the URL, or includes "echo" in the URL. I 
> now have a few hundred IP addresses blocked. They stay 
> blocked for about a month, then are given another chance. 

I do the same. I was blocking for 3 months but now I block for 7 days
because my list was in the thousands.

> Again, luckily, I haven't had to deal with wiki spam.

And here is hoping you will not ever. The pages that they started targeting
first were short and all had the word ADD in them, maybe knowing that will
help keep you off the radar.

> Good luck!

Thanks. Good luck to us all.

---
James Newton: PICList webmaster/Admin
mailto:jamesnewton@piclist.com  1-619-652-0593 phone
http://www.piclist.com/member/JMN-EFP-786
PIC/PICList FAQ: http://www.piclist.com


-- 
http://www.piclist.com PIC/SX FAQ & list archive
View/change your membership options at
http://mailman.mit.edu/mailman/listinfo/piclist