yourls / antispam

YOURLS plugin: antispam plugin. Checks URL against major DNS black lists and removes all crap.

Plugin for YOURLS 1.5+: Antispam

What for

This is an antispam plugin that uses major DNS blacklists to detect spam, at link creation time and at visit time :

• URL are checked against the blacklist when short urls are created.
• They are also randomly checked when someone follows a short URL and if the link has been compromised recently, the short URL is deleted.

DNS backlists used: zen.spamhaus.org, multi.surbl.org, bl.spamcop.net, combined.abuse.ch, dnsbl.sorbs.net.

How to

• In /user/plugins, create a new folder named antispam
• Drop these files in that directory
• Go to the Plugins administration page and activate the plugin
• Have fun

Disclaimer - please read

Checking against DNS blacklists may or may not work for you, this may depend on the type of spam you are getting and on other factors such as your server IP, your server ISP, the DNS you are using. It may even result in all domains being blacklisted from your server. Try and see.

If you're not sure what DNS blacklists are, you can check out the DNSBLs list.

If you're still not sure this plugin is for you, we recommend you use another plugin, such as Google Safe Browsing, or a plugin that will add a captcha to your public interface -- see the plugin list at https://github.com/YOURLS/awesome-yourls.

antispam's Issues

Wordpress.com blacklisted

Clearly, having a massive domain ban like this is a bit of an issue. Is there a way to whitelist domains that might be on those blacklists, or will you be adding one?

Edit: Actually, it seems that this plugin is completely broken. I tried adding various random URLs and it just returns them all as blacklisted.

Blacklist EVERY URL!

Not sure what's wrong but even if I try and create a short url for http://www.wikipedia.org/ I am warned that this domain has been blacklisted...

Running yourls 1.7 - any suggestions?

Followed your exact installation instructions but no luck :-/

Dropbox is not spam

Description

Dropbox link is detected as spam, but this is a fairly known enterprise and it is not spam. Thanks

error in README.md?

I don't understand the following part in the README.md, because it makes no sense:

They are also randomly checked when someone follows a short URL and if the link has been compromised recently, the short URL is created.

If the link is compromised, why would a short URL be created? If the link is compromised, the current short URL should be deactivated. Or am I missing something?

All domains are failing

black.uribl.com is failing to return an array object while the other 2 return an empty array. Because of this the record count for the 2 empty arrays is 0 as expected but black.uribl.com is returning a count of 1. Thus all attempts to create short urls are being defined as blacklisted and checks on existing domains are being deleted because they are showing as blacklisted on the 25:5 spot checks.

Allow for exemptions

The blacklists usually kill connections from my ip since in the past people have had **** on their vps, which caused the whole range to be blacklisted. I'd like to see you add a setting that the admin(s) can add IP exemptions so that they don't get blocked by the blacklist, perhaps check for an exemption before you check the blacklists, and bypass the blacklist if there is an exemption

Good url are detected like spam.

I have some url that are erased overtime because they are detected like spam. Sometime i'm not able to create it, other time they are erased later.

The url that are erased have domain like:

https://goo.gl/forms/
https://docs.google.com
https://fr.padlet.com/

I used the lookup for this website:
'dbl.spamhaus.org',
'multi.surbl.org',
'black.uribl.com',
and found that my url erased are not blacklisted. So i'm not sure of what to check right now.

I'm alone with this problem?

Check only http(s)

Every domain is blacklisted if you dont put http:// in the URL

Does the check of existing URLs happen and if yes, when and can I trigger it by hand?

In the description you write:

URL are checked against the blacklist at two different moments ... once in a while after they have been created, to remove URL that have been compromised after creation

When does this happen and can I trigger this by hand? I installed the plugin on two YOURLS installations yesterday but I still see the exact same number of spam URLs in the database.

Everything is blacklisted

I just installed the plugin, activated and every URL shows as being blacklisted (Including yourls.org)

Not sure what's going on, but works OK when I deactivate. Just thought I should let you know.

stored urls randomly deleted upon plugin deactivation/reactivation

I haven't yet found the exact route to reproduce this, but due to the antispam blocking my requests I found myself deactivating it to insert an URL and then reactivate as soon as I'm done.

Later I found out that some recent URL would just disappear from the admin panel, trying to reach them leads to the 404 page, meaning that they got deleted with no user action.

This could be affecting even older entries.

Expected behavior

The plugin should not interfer with already stored entries even if they come from blacklisted IP.

Every domain seems to be blocked

Hi,
Whenever I activate this plugin and insert a URL it's always rejected with the message that the domain is on the blacklist. When I deactivate the plugin, everything works fine. I'd like to give (or check) a log but there isn't one.

requestes are blocked for logged users

If a logged user, even the admin, is browsing YOURLS with an IP that is matched in a blacklist the shortening request will always be blocked.
This happens both in the public frontend and in the backend admin panel.

Expected behavior

any shortening request performed by a logged user shouldn't be filtered by the plugin and be always accepted.

Nice to have

It could be helpful to have more control over the filtering process, some features might be :

• having a panel that display which blacklist are being used, and that allows to remove/add them at will
• having a way to manually blacklist single IP or IPs range
• having a whitelist that will override match in any blacklist being used
• a way to log/record blocked attempts, this could allow analysis to intercept specific IP range responsible for spam and block their traffic at server level or whitelist false positives

Should a whitelist be provided, the filter could register in it any IP that comes from a logged user as trusted.

show black list every where

Hello..
i have add this plugin and show everywhere you are blacklisted,
then i i have removed 'multi.surbl.org', 'black.uribl.com',
any only keep "'dbl.spamhaus.org'," so it is protect to me against anti spam ?

Thanks
Dipen Patel