Black List Plugin

1. 1. Points for view raw
   2. Threshold to add to BANLIST
   3. Measured over time (in seconds)

• • Your current score: 5 for IP address

• Message for users on BLACKLIST and BANLIST:

• • Current list:

• Public wiki-spam list: Big list of wiki-spam patterns, retrieved from external web site (thanks to MoinMoin's wiki-spam list)
  • Set SPAMLISTURL =

• Wiki-spam filtering for HTML attachments works in TWiki 01-Sep-2004 and later.
• With TWiki 4.0.2 on some platforms, notably Solaris, attached files are uploaded with a zero file size. This is because there is a bug in how TWiki 4.0.2 handles the beforeAttachmentSaveHandler. If affected, upgrade TWiki or apply bug fix

Plugin Info

Black List Plugin

• • Set LOGACCESS = 1

• Access restriction:

WHITELIST, BLACKLIST and BANLIST settings

• WHITELIST: Comma delimited list of IP addresses; possible to use partial addresses ending in a dot

• • Set BLACKLISTMESSAGE = Your IP address is black listed at the AVR32 Linux web site due to excessive access or suspicious activities. Please contact site administrator _email1 if you got on the list by mistake.

Wiki-spam filtering settings

• • Set FILTERWIKISPAM = 1

• • Set SPAMEXCLUDETOPICS =

• Make sure pub/TWiki/BlackListPlugin/ is writable by the CGI user (typically nobody)

• From TWiki 4.0 release on: Run the configure utility in your browser to enable the Plugin
• Test if the installation was successful:
  1. Using above form, add the IP address of one of your workstations to the BANLIST

• • • else, you should get an 500 Internal Server Error for other scripts
  1. On a different workstation, remove the IP address of the test workstation from the BANLIST

Plugin Info

Black List Plugin

Plugin Info

Black List Plugin

• Write protect this Plugin topics by removing the # hash sign from the ALLOWTOPICCHANGE setting
• Make sure pub/TWiki/BlackListPlugin/ is writable by the CGI user (typically nobody)

• Test if the installation was successful:
  1. Using above form, add the IP address of one of your workstations to the BANLIST
  2. Access TWiki from that workstation

Plugin Info

Black List Plugin

Plugin Info

Black List Plugin

• BANLIST configuration, comma delimited list of:

1. 1. Points for each save and upload

1. 1. Threshold to add to BANLIST
   2. Measured over time (in seconds)
   • Set BANLISTCONFIG = 20, 5, 1, 20, 120, 300

• • Set WIKISPAMMESSAGE = Wiki-spam detected: "%WIKISPAMWORD%" is a banned word and cannot be saved. Your IP address is black listed at the AVR32 Linux web site due to suspicious activities. Please contact site administrator _email2 if you got on the list by mistake.

Registration protection settings

• • Set REGEXPIRE = 0
  • If enabled, a magic number is protecting the registration process. TWiki expects a form field with a magic number. An error message is shown if not valid or if expired. This makes it harder to register a user by a script. A hidden field needs to be added to the registration form:
    

Plugin Info

Plugin Settings

Plugin settings are stored as preferences variables. To reference a plugin setting write %_%, i.e. %INTERWIKIPLUGIN_SHORTDESCRIPTION%

• One line description, is shown in the TextFormattingRules topic:
  • Set SHORTDESCRIPTION = Utility to keep malicious users away from a public TWiki site

• Access restriction:
  • #Set ALLOWTOPICCHANGE = TWikiAdminGroup

• WHITELIST: Comma delimited list of IP addresses; possible to use partial addresses ending in a dot
  • Set WHITELIST = 127.0.0.1

• Message for users on BLACKLIST and BANLIST:
  • Set BLACKLISTMESSAGE = Your IP address is black listed at the AVR32 Linux web site due to excessive access or suspicious activities. Please contact site administrator _email3 if you got on the list by mistake.

• Filter wiki-spam on topic save based on SPAMLIST: (0 or 1)
  • Set FILTERWIKISPAM = 1

• Message for users trying to save text with wiki-spam:
  • Set WIKISPAMMESSAGE = Wiki-spam detected: "%WIKISPAMWORD%" is a banned word and cannot be saved. Your IP address is black listed at the AVR32 Linux web site due to suspicious activities. Please contact site administrator _email4 if you got on the list by mistake.

• Add a rel="nofollow" parameter to external URLs. Use this is to fight Wiki-spam. Search engines will not follow the link if a URL has a nofollow parameter, such as . Specify topic age in hours for which the nofollow parameter should appear (set it to a value that gives you enough time to remove spam); set it to -1 to add the nofollow parameter unconditionally to external URLs; or 0 to disable: (-1, 0, 1...N)
  • Set NOFOLLOWAGE = -1

Plugin Info

Black List Plugin

This is a simple utility to keep black sheep away from a public TWiki site. The site can be protected against excessive page access (e.g. by bad robots), suspicious activities of users, such as multiple registrations or rapid topic updates indicating Wiki:WikiSpam, or saving text with wiki-spam.

• BANLIST configuration, comma delimited list of:

1. 1. Threshold to add to BANLIST
   2. Measured over time (in seconds)
   • Set BANLISTCONFIG = 20, 5, 1, 20, 120, 300

• Message for users on BLACKLIST and BANLIST:
  • Set BLACKLISTMESSAGE = Your IP address is black listed at the AVR32 Linux web site due to excessive access or suspicious activities. Please contact site administrator _email5 if you got on the list by mistake.

• Public wiki-spam list: Big list of wiki-spam patterns, retrieved from external web site (thanks to MoinMoin's wiki-spam list)

• • Set SPAMREGEXREFRESH = 10

• Message for users trying to save text with wiki-spam:

• Add a rel="nofollow" parameter to external URLs. Use this is to fight Wiki-spam. Search engines will not follow the link if a URL has a nofollow parameter, such as . Specify topic age in hours for which the nofollow parameter should appear (set it to a value that gives you enough time to remove spam); set it to -1 to add the nofollow parameter unconditionally to external URLs; or 0 to disable: (-1, 0, 1...N)

Plugin Info

Black List Plugin

• WHITELIST: Manually maintained list of users who should never get on the BANLIST
• BLACKLIST: Manually maintained list of malicious users
• BANLIST: Automatically updated list of users with suspicious activities

To fight Wiki-spam, the Plugin can also add a rel="nofollow" parameter to external URLs. Search engines will not follow links that have this parameter, taking away the incentive to add spam to TWiki.

• One line description, is shown in the TextFormattingRules topic:
  • Set SHORTDESCRIPTION = Utility to keep malicious users away from a public TWiki site

• Debug plugin: (See output in data/debug.txt)
  • Set DEBUG = 0

• WHITELIST: Comma delimited list of IP addresses; possible to use partial addresses ending in a dot
  • Set WHITELIST = 127.0.0.1

• Message for users on BLACKLIST and BANLIST:
  • Set BLACKLISTMESSAGE = Your IP address is black listed at the AVR32 Linux web site due to excessive access or suspicious activities. Please contact site administrator _email8 if you got on the list by mistake.

Plugin Installation Instructions

• Write protect this Plugin topics by removing the # hash sign from the ALLOWTOPICCHANGE setting
• Make sure pub/TWiki/BlackListPlugin/ is writable by the CGI user (typically nobody)
• Dakar release only: Run the configure utility in your browser to enable the Plugin

Plugin Info

Black List Plugin

This is a simple utility to keep black sheep away from a public TWiki site. The site can be protected against excessive page access (e.g. by bad robots) and suspicious activities of users, such as multiple registrations or rapid topic updates indicating Wiki:WikiSpam.

• BLACKLIST: Comma delimited list of IP addresses; possible to use partial addresses ending in a dot
  • Set BLACKLIST =

• BANLIST: Automatically updated list of IP addresses based on BANLIST configuration

• • Current list:

• • Set BANLISTCONFIG = 20, 5, 1, 20, 120, 300
  • Your current score: for IP address

• Message for users on BLACKLIST and BANLIST:

• Add a rel="nofollow" parameter to external URLs. Use this is to fight Wiki-spam. Search engines will not follow the link if a URL has a nofollow parameter, such as . Specify topic age in hours for which the nofollow parameter should appear (set it to a value that gives you enough time to remove spam); set it to -1 to add the nofollow parameter unconditionally to external URLs; or 0 to disable: (-1, 0, 1...N)
  • Set NOFOLLOWAGE = -1

• • Set LOGACCESS = 1

• Access restriction

Plugin Installation Instructions

• Test if the installation was successful:
  1. Using above form, add the IP address of one of your workstations to the BANLIST
  2. Access TWiki from that workstation

• • • else, you should get an 500 Internal Server Error for other scripts
  1. On a different workstation, remove the IP address of the test workstation from the BANLIST

Plugin Info