Targeting Spam > Blocking access based on referrer...?
[Ask MetaFilter | Community Weblog] Note that you should only ever exclude certain referrers, not make a certain referrer a condition of entry. So it's fine to block 'posting.php?mode=newtopic', for example, but don't set it so that everyone coming there has to have a referrer from 'www.yoursite.com/[whatever]', as that will block legitimate traffic that has decided not to send you a referrer for some reason.
Some related posts from Technorati and Google.
[Unknowngenius.com] Dr Dave » Referrer Karma: anti-comment-spam plugin Spam Karma to block spambots before they even reach your comment page (note that you do not need to be running either SK or WP in order to use RK: this feature is entirely optional).
[Codex.wordpress.org] Combating Comment Spam/Denying Access « WordPress Codex: You have the ability to add a simpler IP address to your comment spam word list by dropping one or more of the IP numbers, thusly: 192.168 -- in this way, any IP address that starts with 192.168 will be screened as spam regardless of the numbers that appear with this "wildcard". It saves you having to type in lots of individual numbers.
[Ilovejackdaniels.com] ILoveJackDaniels.com: Block Referrer Spam: The decision made by these short-sighted bloggers was to display, on their site, a list of recent referrers to each page. I can't imagine any reason why a visitor might be in the least bit interested in seeing this, but nevertheless many sites now display referrers on every page.
[B2evolution.net] b2evolution: b2evo User Manual - How to control referrer spam hits ...: Referrer spammers use a couple of methods to find you, and a big one is using the search engines. They look for "top referrer" and "recent referrer" and "disp=stats" knowing that if you have those then you are a b2evolution user and that they can spam you.
[Dancho Danchev - Mind Streams of Information Security Knowledge] Wild Wild Underground: In my recent Future trends of malware research, I mentioned how open-source malware would inevitably dominate, and how the concept will put even more pressure on AV vendors to figure out how to protect from unknown malicious code -- proactively. What I came across to was, customer-centric malware propositions, special features increase or decrease the final price, botnet sources for free download/purchase if modifications are made, free advices coming with the purchase, on demand vulnerabilities, spamming or spam harvesting services on demand, price comparison for malware samples, rootkits-enabled pieces of malware indeed show an increase of growth, DDoS on demand services are usually proposed with 30 mins of service "demo".
[Xerdoc Together] Dissect Spam Karma: Karma - å¡é©¬(éé¬ä¸ç²¾å¯çº§)ï¼æ¯ä¸ç§åº¦éåä½ãSKä¸ï¼ç¨Karmaæ¥è¡¨ç¤ºä¸ä¸ªçè¨ç"Spamç级"ï¼æåæ ¹æ®... SKæ¬èº«æ¯ä¸ä¸ªWPçæä»¶ï¼èä¸ºäºææ´å¥½çæ©å±æ§ï¼SK2乿¯éç¨æä»¶ç形弿¥å·¥ä½çãå½ç¶ï¼å®çæä»¶å·¥ä½...
[Frank Mash] Banning abusing bots using mod_rewrite,... : Here are the currently blocked user agents as per my /etc/modsecurity/useragents.conf file: # http://www.gotroot.com/mod_security+rules # Gotroot.com ModSecurity rules # # Created by The Prometheus Group (http://www.prometheus-group.com) # # User Agent Security Rules # # Download from:
[ Incoherent Babble] Exactly What Data Are You Sending to Akismet?: The easiest way to do this was to simply spit out the data right before it’s sent to the Akismet server to be processed there. I load up my test blog, put in a cheeky comment, hit the big red button, then wait for snoopy goodness to get dumped to my newly created logging table in the WP database.
Reflected tags on Technorati: Blog, Referrer Spam, Targeting Spam