XMPP Service Operators - 2023-02-22

ugh

bot is back

trannyplauge <trannyplauge@conversations.im/Conversations.-3SU>

Thanks

yw

This one as well dietrannies@chatterboxtown.us

perhaps account creation on that server should be made pending approval

other servers are used as well, sometimes

*on all servers

I guess that won't work because the accounts will still be created just with innocuous seeming names

I am going to assume that they are using a VPN, but in case they are not, block the IP?

Folks using Prosody's mod_muc_rtbl, it's recommended to update to the new version. If you have the version from last night, the new one fixes a bug.

Compared to the original version, it now also blocks messages even if the blocked JID is already joined to the MUC when they are added to the RTBL

(thanks to jonas’ for implementing this)

Nice! Thanks jonas’

yw! :)

Does snikket server have/implement mod_muc_rtbl , MattJ ?

I think ejabberd does not

riau.sni, it does not

riau.sni, no, generally Snikket isn't made with hosting public channels as a primary use-case

Not saying we'd never add it, but it's not on the priority list - properly hosting and managing public channels requires some effort (for example, I consider the apps currently inadequate for this)

To people suggesting blocking IP. I live in a country where I just have to press a button in the router to get a new IP.

So you're saying we should block your country? ;)

MattJ: I think that is a fine solution to the problem!

That's the fediverse approach. And without hetzner it would be a small ecosystem 😉

One of these days I must figure out loading blocklists into ejabberd. ✏

Indeed

Ellenor Bjornsd.: maybe? https://github.com/mightyBroccoli/bl-imp

A hammer too big

I was wondering if the block list module would be useful for small servers to reduce the chances of direct messages from hostile entities? Or is it mostly intended to keep them out of public mucs?

diane: depends on threat model :) You as a person need to advertise your address somehow, when you join a public channel it's not you that's the target.

Considering the carders sent me spam I don't think my JID was that hard to guess

Common username?

Popular server?

Blocking IP is impossible, the MUC server doesn't have their IP

moparisthebest: you're behind the discussion? :)

Always

He's behind in the discussion

The Illuminati are behind it

If you all wouldn't wake up so early I wouldn't have to respond to hours old messages

You are living in the wrong timezone, only UTC is the right one 😅

Anything but Eastern Time

Licaon_Kter, definitely not a popular server, but was the same as my public email address

moparisthebest [16:52]: > Blocking IP is impossible, the MUC server doesn't have their IP mod_muc_ban_ip would like a word with you 🙃

Wouldn't that ban the users' source server most likely?

No, just the user

It's enforced by their server, not the MUC

Ah okay so it has to be loaded on both servers and there has to be some sort of trust relationship I take ✏

Says both Then says not needed on muc server I confuseh

Yeah, only on the user server. The MUC just sends a normal ban.

Ah, now I got it, user server

i'm antisocial and only in 1 other public muc, so i missed the spam wave

was there any logic to it?

i can't tell because it looks like mam got cleaned up in the other muc i'm in

smooth_op: some sort of shock porn for no reason, then racist spam+porn because they got banned elsewhere...

i don't have open reg or public mucs, but if i did, is there a site that has guidance or best practices for operators?

such as knowing what moderation tools are available and such? e.g., this muc is the first time i'm learning about some prosody modules

Sadly it's not even a good troll, just saying bad words until they are banned now

smooth_op: prosody has such a prosody specific site. https://github.com/JabberSPAM/resources

Menel: There is also the collection which is not prosody specific: https://github.com/JabberSPAM/resources/blob/master/collection-of-server-modules.md

Menel, Martin: thanks. seems this pr needs some love: https://github.com/JabberSPAM/resources/pull/9

You can also use Martins list directly 🙂 https://mdosch.de/xmpp-blocklist.txt

Not sure if you should just use others personal blocklists.

Just block everything! No more spam, ever.

Disable s2s and close registration. 🙂

I thought you put it in the open to be used, the names look ban worthy at least

Rtbl is also kind of other people's list

I put it up to document which servers I block. Other people can decide to follow it, but it's still my personal blocklist without any documented inclusion criteria etc.

:)

💯