<?xml version="1.0" encoding="utf-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	>
<channel>
	<title>Comments on: TarPit update</title>
	<atom:link href="http://dougal.gunters.org/blog/2004/10/26/tarpit-update/feed" rel="self" type="application/rss+xml" />
	<link>http://dougal.gunters.org/blog/2004/10/26/tarpit-update</link>
	<description>Random musings of a Southern geek</description>
	<pubDate>Sun, 23 Nov 2008 11:05:43 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.7-beta3-9841</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Jeff</title>
		<link>http://dougal.gunters.org/blog/2004/10/26/tarpit-update/comment-page-1#comment-162931</link>
		<dc:creator>Jeff</dc:creator>
		<pubDate>Wed, 06 Aug 2008 02:09:55 +0000</pubDate>
		<guid isPermaLink="false">http://dougal.gunters.org/blog/2004/10/26/tarpit-update#comment-162931</guid>
		<description>Dougal, what happened to the code for your tarpit plugin? I go to http://dougal.gunters.org/blog/2004/08/25/spammer-tar-pit, and then from thereon, to http://dougal.gunters.org/tarpit.txt&#124;phps, but guess what, "Apologies, but we were unable to find what you were looking for. Perhaps searching will help." ...</description>
		<content:encoded><![CDATA[<p>Dougal, what happened to the code for your tarpit plugin? I go to <a href="http://dougal.gunters.org/blog/2004/08/25/spammer-tar-pit" rel="nofollow">http://dougal.gunters.org/blog/2004/08/25/spammer-tar-pit</a>, and then from thereon, to <a href="http://dougal.gunters.org/tarpit.txt" >http://dougal.gunters.org/tarpit.txt</a>|phps, but guess what, &#8220;Apologies, but we were unable to find what you were looking for. Perhaps searching will help.&#8221; &#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Five Acres with a View</title>
		<link>http://dougal.gunters.org/blog/2004/10/26/tarpit-update/comment-page-1#comment-41061</link>
		<dc:creator>Five Acres with a View</dc:creator>
		<pubDate>Wed, 01 Mar 2006 00:28:03 +0000</pubDate>
		<guid isPermaLink="false">http://dougal.gunters.org/blog/2004/10/26/tarpit-update#comment-41061</guid>
		<description>&lt;strong&gt;TarPit...&lt;/strong&gt;

I don&#8217;t know if it was due to Dougal&#8217;s TarPit plugin, but the comment spammer seems to have gone away for now.  He is not missed.

......</description>
		<content:encoded><![CDATA[<p><strong>TarPit&#8230;</strong></p>
<p>I don&#8217;t know if it was due to Dougal&#8217;s TarPit plugin, but the comment spammer seems to have gone away for now.  He is not missed.</p>
<p>&#8230;&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: MiG</title>
		<link>http://dougal.gunters.org/blog/2004/10/26/tarpit-update/comment-page-1#comment-36491</link>
		<dc:creator>MiG</dc:creator>
		<pubDate>Sun, 15 Jan 2006 15:52:25 +0000</pubDate>
		<guid isPermaLink="false">http://dougal.gunters.org/blog/2004/10/26/tarpit-update#comment-36491</guid>
		<description>Hi there, I just downloaded and installed your plugin since I also am a target for the damn crap bots. My Q ( ignorant and stupid as it might be )is how/where do I add the ip's I want to block? How is it supposed to look like when I add them?

Thanks for your time

/Michael</description>
		<content:encoded><![CDATA[<p>Hi there, I just downloaded and installed your plugin since I also am a target for the damn crap bots. My Q ( ignorant and stupid as it might be )is how/where do I add the ip&#8217;s I want to block? How is it supposed to look like when I add them?</p>
<p>Thanks for your time</p>
<p>/Michael</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Un Cielo Provvisorio &#187; Blogware</title>
		<link>http://dougal.gunters.org/blog/2004/10/26/tarpit-update/comment-page-1#comment-23486</link>
		<dc:creator>Un Cielo Provvisorio &#187; Blogware</dc:creator>
		<pubDate>Fri, 01 Jul 2005 21:32:51 +0000</pubDate>
		<guid isPermaLink="false">http://dougal.gunters.org/blog/2004/10/26/tarpit-update#comment-23486</guid>
		<description>[...] Il secondo livello &#232; formato da una versione modificata di SpamTarPit con un meccanismo d&#8217;una astuzia letale: interroga in continuo un rpc che lista gli open proxy e se un ip che ha visitato il blog &#34;Match&#34; ossia combacia, lo aggiunge nella blacklist. Questo ha uno svantaggio, per un po&#8217; si &#232; dentro il blog, ma non dura: entro 5/10 minuti l&#8217;indirizzo ip &#232; out, quindi &#232; anche difficile lasciare un messaggio, dato che la gestione di essi &#232; affidata ad un sistema a doppia validazione ed infine, il terzo livello &#232; Spam Karma II: l&#8217;ideale presidio se per caso le prime due difese siano varcate. Quindi spiacevoli episodi a base di cassamortari e minacce non dovrebbero presentarsi. [...]</description>
		<content:encoded><![CDATA[<p>[...] Il secondo livello &egrave; formato da una versione modificata di SpamTarPit con un meccanismo d&#8217;una astuzia letale: interroga in continuo un rpc che lista gli open proxy e se un ip che ha visitato il blog &quot;Match&quot; ossia combacia, lo aggiunge nella blacklist. Questo ha uno svantaggio, per un po&#8217; si &egrave; dentro il blog, ma non dura: entro 5/10 minuti l&#8217;indirizzo ip &egrave; out, quindi &egrave; anche difficile lasciare un messaggio, dato che la gestione di essi &egrave; affidata ad un sistema a doppia validazione ed infine, il terzo livello &egrave; Spam Karma II: l&#8217;ideale presidio se per caso le prime due difese siano varcate. Quindi spiacevoli episodi a base di cassamortari e minacce non dovrebbero presentarsi. [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Artois</title>
		<link>http://dougal.gunters.org/blog/2004/10/26/tarpit-update/comment-page-1#comment-20224</link>
		<dc:creator>Artois</dc:creator>
		<pubDate>Fri, 27 May 2005 20:59:09 +0000</pubDate>
		<guid isPermaLink="false">http://dougal.gunters.org/blog/2004/10/26/tarpit-update#comment-20224</guid>
		<description>and if i want to ban a subnet, like 82.55.x.x-82.59.x.x how i do?</description>
		<content:encoded><![CDATA[<p>and if i want to ban a subnet, like 82.55.x.x-82.59.x.x how i do?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Five Acres with a View</title>
		<link>http://dougal.gunters.org/blog/2004/10/26/tarpit-update/comment-page-1#comment-2755</link>
		<dc:creator>Five Acres with a View</dc:creator>
		<pubDate>Mon, 01 Nov 2004 02:33:41 +0000</pubDate>
		<guid isPermaLink="false">http://dougal.gunters.org/blog/2004/10/26/tarpit-update#comment-2755</guid>
		<description>&lt;strong&gt;Death to All Comment Spammers&lt;/strong&gt;

I am now trying Dougal's Tarpit plugin to see if I can discourage the video gambling spammer who is flooding my comments.</description>
		<content:encoded><![CDATA[<p><strong>Death to All Comment Spammers</strong></p>
<p>I am now trying Dougal&#8217;s Tarpit plugin to see if I can discourage the video gambling spammer who is flooding my comments.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dougal Campbell</title>
		<link>http://dougal.gunters.org/blog/2004/10/26/tarpit-update/comment-page-1#comment-2718</link>
		<dc:creator>Dougal Campbell</dc:creator>
		<pubDate>Sun, 31 Oct 2004 22:01:36 +0000</pubDate>
		<guid isPermaLink="false">http://dougal.gunters.org/blog/2004/10/26/tarpit-update#comment-2718</guid>
		<description>However, you would run the risk of blocking innocent bystanders who are in the same subnet.

The tarpit shouldn't be considered a first line of defense in blocking spam. I find that &lt;em&gt;far&lt;/em&gt; more of the spam targeted at my site is blocked by the normal moderation checks than by my tarpit. The tarpit is mainly useful for cases like I was seeing a week or two ago, when an automated program is sending spam after spam after spam from the same address.

I've seen hundreds of spams sent to moderation over the past few days, but only 4 hits have triggered the tarpit.</description>
		<content:encoded><![CDATA[<p>However, you would run the risk of blocking innocent bystanders who are in the same subnet.</p>
<p>The tarpit shouldn&#8217;t be considered a first line of defense in blocking spam. I find that <em>far</em> more of the spam targeted at my site is blocked by the normal moderation checks than by my tarpit. The tarpit is mainly useful for cases like I was seeing a week or two ago, when an automated program is sending spam after spam after spam from the same address.</p>
<p>I&#8217;ve seen hundreds of spams sent to moderation over the past few days, but only 4 hits have triggered the tarpit.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Kitten</title>
		<link>http://dougal.gunters.org/blog/2004/10/26/tarpit-update/comment-page-1#comment-2696</link>
		<dc:creator>Kitten</dc:creator>
		<pubDate>Sun, 31 Oct 2004 19:07:29 +0000</pubDate>
		<guid isPermaLink="false">http://dougal.gunters.org/blog/2004/10/26/tarpit-update#comment-2696</guid>
		<description>you might be able to clean up the regex with something like:
&lt;code&gt;"/^([0-9]{1,3}\.){2}([0-9]{1,3}\.?){1,2}$"/&lt;/code&gt;
That way, the last quad can be dropped for spammers that are working a subnet.</description>
		<content:encoded><![CDATA[<p>you might be able to clean up the regex with something like:<br />
<code>"/^([0-9]{1,3}\.){2}([0-9]{1,3}\.?){1,2}$&#8221;/</code><br />
That way, the last quad can be dropped for spammers that are working a subnet.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: dot-totally.co.uk</title>
		<link>http://dougal.gunters.org/blog/2004/10/26/tarpit-update/comment-page-1#comment-26175</link>
		<dc:creator>dot-totally.co.uk</dc:creator>
		<pubDate>Tue, 30 Nov 1999 00:00:00 +0000</pubDate>
		<guid isPermaLink="false">http://dougal.gunters.org/blog/2004/10/26/tarpit-update#comment-26175</guid>
		<description>&lt;!--%kramer-pre%--&gt;away (aint the blogosphere and its wonders great?) and has put my fears to rest. Iâ€™ve reenabled the plugin, and Iâ€™ll just have to stick it to the spammers. Gerrr! Thanks Dougal for your support and your wonderful plugin!  Update 2: Spammer TarPit Version 1.3  has been released, which makes semantic 403 Forbidden errors. Great work, again.  I donâ€™t know if Dougalâ€™s Spammer TarPit is just going slightly overboard on my weblog. Since the 11th of October (that&lt;!--%kramer-post%--&gt;</description>
		<content:encoded><![CDATA[<p><!--%kramer-pre%-->away (aint the blogosphere and its wonders great?) and has put my fears to rest. Iâ€™ve reenabled the plugin, and Iâ€™ll just have to stick it to the spammers. Gerrr! Thanks Dougal for your support and your wonderful plugin!  Update 2: Spammer TarPit Version 1.3  has been released, which makes semantic 403 Forbidden errors. Great work, again.  I donâ€™t know if Dougalâ€™s Spammer TarPit is just going slightly overboard on my weblog. Since the 11th of October (that<!--%kramer-post%--></p>
]]></content:encoded>
	</item>
</channel>
</rss>
