OrbiterWiki:Admin tools

From OrbiterWiki
Jump to navigation Jump to search

Spam filter[edit]

Our new spamfilter can be upgraded by admins on OrbiterWiki:SpamBlacklist. Please do so if you observe spam patterns, not covered by the filter. Try to make the rules as general as neccessary, but not too specialized - one line for each spam URL should be avoided, if they occur in patterns.

Vandalism management and vandal categories[edit]

For dealing with Spam and vandalism, OrbiterWiki uses a simple system of vandalism warning levels and bans. This system gets also used for IP numbers, regardless that the vandal might return with a new one. If a special network appears to be home of very active vandals, its OK to rate anonymous troublemakers one level higher in the vandalism scale, than usually.

{{VAND1}}
Lists the user in the Category:listed vandals
{{VAND2}}
Lists the user in the Category:final warning
{{VAND3|duration|reason}}
Lists the user in the Category:temp-ban, after he got banned by an Administrator.
{{VAND4|reason}}
Lists the user in the Category:indefinite bans, after he got banned forever by an Administrator.

Special customers[edit]

Some networks are only existing for the purpose of Spam. When encountering such a pattern, administrators are encouraged to assume that such activity is not the result of a zombie in a Spambot network, but actually the business model of this company.

Factors which are indicating a dedicated Spambot network:

  • Repeated Spambot activity from within a small /8 network (The first three numbers of the IP are equal, but only the final forth number changes).
  • Spambots from same network with final IP component increasing in succession (130, 131, 132, ...)
  • IP range is not assigned to a larger provider, but actually to a dubious company.
  • Other factors (like conceiled origin of the network owner), which speak for a criminal intend.

Networks in this category of vandals are:

  • Category:Spambot from RBNET - RBusiness Network, a company pretending to come from Panama, but using european IP numbers managed by RIPE. Contact email addresses are from inbox.ru. Identified to be part of the Russian Business Network, a major cybercrime organization.
  • Category:Spambot from Telenet Network - Used for a small group of reoccuring Spambot activity, which comes from increasing IPs. Not the whole Telenet (/19) Network is identified as spam source.