The "Go Away" page is not being displayed.

Fix committed

Comments

Anonymous’s picture

Status: Fixed » Closed (fixed)
J V’s picture

Title: Go Away page not displayed » Gotcha Go Away page not displayed
Priority: Normal » Critical
Status: Closed (fixed) » Active

I still get a 403 error when spammer is redirected to gotch-go-away page

I believe its because its not published

Is there a way to fix this?

I would search drupal but they turned off the search function

NancyDru’s picture

Priority: Critical » Normal
Status: Active » Postponed (maintainer needs more info)

Well, to start with, publish it and let me know if that fixes it.

J V’s picture

yes that fixed it

NancyDru’s picture

Status: Postponed (maintainer needs more info) » Fixed

Thanks.

NancyDru’s picture

Status: Fixed » Active

Uh, duh, I guess I should change that in the code. I've got a bunch of other changes in my code, so I'm not sure when this will go in.

hutch’s picture

When you do update the code, you may as well change line 89
'promote' => 1,
to
'promote' => 0,

You don't want to show this on your home page, right? ;-)

I have also commented out lines 256-260 as the spam module has changed the parameters to spam_content_filter() and AFAICT the spam module only supports node, comment and user type inputs. Oh well.

I had a spammer manage to get past gotcha, the script must have been parsing the css so there was nothing to do about that, I tried obfuscating the contact form so there was no mention of gotcha and changed the fieldnames etc but no joy, so I just banned the *******'s ips in the end.

However it has caught quite a few so it works, by and large.

Sending a go away page is probably fruitless, perhaps some way of logging and banning repeated attempts might be better, or some way of temporary banning, the harder they try the longer they wait. I do this on my firewall for certain services, works very well, stops dictionary attacks.

HTH

NancyDru’s picture

Each email should be getting logged, whether successful or not. Adding in delays actually can make it easier for the spammer to create a DOS by tying up sessions. The ones that do get through probably don't have enough URLs to get caught. What I do is add those URLs to the URL filter.

Currently, Gotcha is coded for Spam V1, not V3. That is something I have to get busy on soon.

You can set the Go Away page to anything, including your standard 403 or 404 pages. Personally I want to figure out how to make it send a 412 code, which seems to discourage spammers more quickly.