Download & Extend

Appeal!: Explain what a user should do if "Your submission has triggered the spam filter and will not be accepted."

Project:Mollom
Version:6.x-1.x-dev
Component:User interface
Category:support request
Priority:major
Assigned:Unassigned
Status:active

Issue Summary

Mollom seems to rather regularly flag things that are not spam as spam. (See http://randyfay.com/node/69)

The user gets:

Your submission has triggered the spam filter and will not be accepted.

Could we add to this message something that offers some recourse to the poor user? Contact Mollom? Contact the site owner? Something? This message, when incorrect, is simply rude and annoying.

Comments

#1

A related suggestion: http://randyfay.com/node/69#comment-123

Here's an idea for Dries: When your post gets rejected, provide a little link that says "Really, i'm not spam, honest!" that takes you to a form on mollom.com to report the issue (validate this form with recaptcha?) This way mollom can investigate false-positives reported directly from end-users.

#2

Thanks for reporting this, Randy. You can be sure that this is a top priority for Mollom. Some feature enhancements closely related to this suggestion are actively discussed and developed currently.

However, please understand that this is quite a complex problem space, as spammers can (and will) eventually abuse any possibility that allows end-users to report an invalid filter decision. The issue would likely get worse if end-users were able to report and take additional steps, but the data that Mollom gets wouldn't be usable due to abuse, so it reasonably couldn't do anything about it, and thus, end-users would be annoyed even more, because they "even did the additional steps, but still nothing changed."

I'm still trying wrap my head around the whole scenario, brainstorming ideas that may lead to less abuse. It's possible that I'll use this very issue to implement the improvement we come up with though.

#3

Thanks, @sun.

Just a note, others have chimed in saying that they avoid commenting on sites that run mollom.

I do suspect that just making a way to either moderate or report false positives would resolve the annoyance factor here.

#4

Isn't entering the captcha enough? I've been getting this message frequently on mollom enabled sites.

I've just recently found out that if I don't enter my homepage then the comment goes through? My homepage domain isn't live due to maintenance. Is that why or is my domain flagged or something? My last attempt was at 2bits - http://2bits.com/drupal-performance/reducing-size-and-io-load-apaches-we.... Where I used this info:

Your name: Dale Dude
E-mail: me@gmail.com (fake name, real provider)
Homepage: http://www.daledude.com
Subject left blank
Comment: Turn BufferedLogs on as well.

#5

The more I think about this it isn't a "feature request" but rather a "critical bug". Many others have responded as I have in http://randyfay.com/node/69 saying that they just don't bother commenting on a site that has mollom running any more.

#6

Subscribing. This happened to a user on my mollom-enabled site today as well, this is how I came across this thread.

Is it safe to post the Mollom session-id here -- if that can help to track down the problem.

#7

Category:feature request» task
Priority:normal» major

FYI: As a first measure, I'm working on #881534: Allow to unpublish spam posts instead of rejecting, which is close to RTBC already. Any feedback would be appreciated.

As mentioned earlier, any front-end improvements need more brainstorming and careful in-depth discussion, from which not all details can be publicly posted here.

#8

I think a great fix would be a feature to disable mollom's refusal of a form that passed the captcha. I once tried typing a comment with mention of viagra into my site, and after passing the captcha mollom blocked me and it became impossible for me to post anything (apparently my IP was blocked). I had to reconnect to change my IP before being able to post on my site again.

Considering that a simple CAPTCHA gets rid of about 99.9% of spam on my site (mollom gets rid of 100% plus half of my legitimate posts), it really begs the question whether mollom's nazi filtering is the right way to go...

#9

Got this msg day when submitting "Would you be open to help from India based team of Drupal experts?" http://groups.drupal.org/user/169053/contact while following posting guidelines http://drupal.org/node/308792

#10

It would be nice, at the very least, to make the message that's displayed be configurable, with support for tokens. Support for rules would also be nice so that we could build our own custom workflows when content is flagged as spam.

#11

I am still getting this error message on my site. Surprised that it hasn't been resolved for such a long time!
Where can I find the Session ID of my Mollom? I only see Public and Private keys.

#12

What ever happened to the text analysis and CAPTCHA! Why was this removed. I think it was a great fall back that would eliminate this issue here. If the text analysis fails then the user is presented with a CAPTCHA.

#13

@Jason Sale: That should already be the case -- if Mollom is unsure and presents a CAPTCHA, and the user solves that CAPTCHA, then the user should be able to post, regardless of how spammy the post may be.

@Vako: As of now, you can find the session ID for particular post attempts in Drupal's log messages (admin/reports/dblog), which you can filter by category "mollom".

@Funke-Tom: The functionality/behavior still exists and won't be removed. It is automatically applied to all forms protected via text analysis. However, not all forms support text analysis, so some forms can be protected with a CAPTCHA only.

#14

My experience as a user, @sun, is still this: If you put a link in a form on a site protected by mollom, you will be summarily excluded. So 1) I don't use mollom on any site I have anything to do with because of the extremely negative impact on visitors and 2) If I place a comment on a site that has mollom on it, I just don't put a link in.

Mollom boasts about how many spams it's blocked, but still has never dealt with or built a way to deal with false positives, which means it has no idea how many spams it has blocked, just how many posts it has blocked. Mollom thinks "If I block it, it must be spam". Which I think is a problem :-)

It would be great if Mollom's reaction could be modified and people who have just posted a thorough response to an article and get the "your response has triggered the spam filter" could have a way to either report it to the site or report it to mollom, so mollom could at least get some kind of handle on these false positives. Since I can personally get about 80% false positive just by including a link on a mollom-protected site, I think it could be a good exercise.

#15

When I goto admin/reports/dblog, I see the following list of options:

* Broken links
* Mollom statistics
* Public Download Count
* Recent hits
* Search engine referers
* Security review
* Statistics Pro
* Top referrers
* Top search phrases
* Top pages
* Top visitors
* Access log settings
* Browscap
* SWF Tools status
* Available updates
* Getclicky Stats Dashboard
* Status report
* Graphs

I tried all of the above, still couldn't find any Session ID...:(

#16

One of my clients got a wave of registrations and lots of them couldn't register because of Mollom - now she has a really bad impression of it, and I'm probably going to have to swap it out for Akismet + Antispam or something similar.

#17

I also have the impression that the latest official release for Drupal 6 is unusable owing to constant false positives. Not sure whether Mollom is faulty or the module.

#18

Title:Explain what a user should do if "Your submission has triggered the spam filter and will not be accepted."» Appeal!: Explain what a user should do if "Your submission has triggered the spam filter and will not be accepted."
Category:task» feature request

After all this time, a false positive (not uncommon at all) still is non-negotiable with Mollom, preventing valuable feedback for site owners and community members, and frustrating an unknown (and uncounted) number of end users.

Couldn't we have an "appeal this judgment" link? That way the end user could say something about why it shouid be approved.

#19

Mollom would be the ideal option only if it works better than what it's doing now. or at least the bugs get fixed.

#20

Category:feature request» support request

In my test it is the same problem with 6-x-1.6 or 7-x-1.1. I did manage to post a comment when logged in. Settings are to allow comments when Mollom servers are unreacahble. I have never seen a Captcha form, and almost never been able to leave a comment.

So where is the problem? There is a long thread http://randyfay.com/node/69 about mollom false positives, on post about false negatives. It seems clear that the problem is with the Mollom service, not with the module. Is this because I am running low traffic sites where non-spam comments are rare? Maybe Mollom learns to reject almost every comment on my sites? In case anyone from Mollom is looking, my latest failed comment had session_id = '1108209fa4108e0960'. On Drupal 6 I have switched to Trick Question module, on Drupal 7 to Honeypot module.

#21

@John_B: Thanks for the session_id - I'm forwarding that to the Mollom backend engineering team to analyze. Upfront, based on a quick inspection, the post was blocked due to an extremely bad reputation of the IP address it was posted from. This means that the IP has been (ab)used by spammers or a spambot very shortly before. In case you have a static IP address that doesn't change, you might want to check your system for viruses or trojans. In case you have a dynamically assigned IP, then this particular case is one of Mollom's worst-case, edge-case scenarios - Mollom automatically adjusts ("heals") the IP reputation as soon as the spam abuse stops, but this process might not have been fast enough. As mentioned, I'm going to forward this session info to the engineers.

@all: In case you have a concrete case, ideally but not necessarily with Mollom session IDs (like @John_B), it's going to be way faster to contact Mollom support directly, by creating a ticket on http://mollom.zendesk.com or sending an e-mail to support@mollom.zendesk.com.

/me will clarify that on the project page as well now

#22

I have the problem a lot. I use mobile broadband with dynamically assigned IPs which change very often (sometimes even 'spin' without disconnecting! you know it happens when you are kicked out of online banking or cPanel for no apparent reason, cPanel returns 'your IP address has changed'). Maybe mobile broadband IPs should be whitelisted?

#23

Nice. Love how that support site is not mentioned on the Mollom website.

#24

@ebeyrent: It's the same as using http://mollom.com/contact - sorry for the confusion.

#25

Why Captcha is not enough? ever since I moved to my new house, I was forced to fill captcha field. I don't understand why I should do it forever? and now I simply can't comment anywhere! it's easy to build a spam filter that blocks all the spammers and people, isn't it? a good spam filter recognises humans after 100th captcha I filled? instead I got blocked all together.

I think it's more a bug rather than a feature request
PS: Thank god d.o doesn't use mollom!

#26

PS: Thank god d.o doesn't use mollom!

Is it true that drupal.org does not use Mollom?

But I don't agree that it is a bug with the module since the problem seems to be stemming from Mollom's own servers rather than the module.

There was no followup to the session ID I provided for a false positive, though sun was kind enough to say thanks for it. It is very depressing as a loyal and enthusiastic Drupalista to have to face the fact that (for my purposes at least, and quite a few others) Mollom is broke. Although complaints of false positives have been around on the web for some time (eg a comment on Dries' own blog http://buytaert.net/mollom-2010-retrospective) there are few signs that it is going to be fixed. I have been using Honeypot module with good success to block spam on low traffic Drupal sites.

#27

Drupal.org does not use mollom, but groups.drupal.org does.

#28

I guess the default setting can be altered to accept suspicious comments. Dries did that oh his blog you referred to. I tried to comment on that post days ago and was blocked. now I get into approval queue

#29

Hi,

Can you confirm that Mollom still makes problems for you also ?

And did you find a better solution ? Using Captcha module is IMPOSSIBLE as pages with a CAPTCHA are not cached...

Thanks.

#30

Given that many people have had problems, and there is no clear statement from Mollom that things have changed, I personally would not use it. I use Honeypot for anti-spam. For for a large busy site, it is not clear whether Honeypot would be enough, and a more sophisticated solution such as Mollom may be needed. I am guessing that for big corporate customers, who are paying for Mollom, it must be working fine. But for small users of the free service, it seems best avoided on the basis of my experience.

#31

My Mollom worked fine for several months and suddenly started to capture legit comments as spam and I lost a lot of them.
I contacted Mollom and opened a case. Their response is very slow (several days if you are lucky!) and with no solution. They are just saying that the posts are spam because the IPs are tagged as spammers!! they are not, they are mine and my friend's IPs that I personally know.
There is a bug in their code and they are not looking into it seriously.
Currently I switched back to the Captcha module.
I wish Mollom works though, it's much easier for my visitors.

#32

I still find it amazing that the Mollom service allows the false positives it does. I think if site owners were aware of how many frustrated users try to post comments they'd all cease to use it. It seems that the people who run the service just don't understand what happens to real people (like me) out there.

Here's a concrete example. I just posted a very simple comment, with no links at all, and got rejected (with no appeal possible, of course):
rfay_dell_Selection_119.png

rfay_dell_Selection_118.png

AttachmentSizeStatusTest resultOperations
rfay_dell_Selection_119.png104.87 KBIgnored: Check issue status.NoneNone
rfay_dell_Selection_118.png155.33 KBIgnored: Check issue status.NoneNone

#33

Yes, I contacted Mollom support and their answer was that the people who are posting are tagged as spammers!!
I'm one of the posters and the others are friends that I know.
I tried hard to make it work by sending them session IDs and more and eventually gave-up and back to the ugly CAPTCHA / BOTCHA combination.
If anyone has other solutions, please let us know.

nobody click here