XMPP Service Operators - 2026-01-09

hello

hi

boa noite

tom, sorry for what happened, i dealt with the situation already. and updated my server contacts.

also blocked account creation

based.pt, are you also the admin of nigga.pt?

i am

why did you chose those domains?

same server, diferent domains, no account registration can be done

ugh

> why did you chose those domains? no reason in particular, 5 letter words

sure 🙄

based.pt, do you have any idea who was behind the spam attacks? Some of which were targeted to specific groups and people with different messages.

my muc was spammed by accounts from xmpp.earth the same day i banned an user from it. It could be the same user

after the spam i made it so only memeber could message

ive heard theories that its rewtkid, no evidence to corroborate though

who is rewtkid?

a well known xmpp spammer, kinda known for doing similar things

based.pt, your server is prosody or ejabberd?

prosody

> Has anybody been running a xmpp server without dialback security implemented? The consumer of dialback on my server are compliance checkers testing for it. All actual servers have moved onto SASL tom: yea I haven't had dialback or tls 1.2 enabled for years, zero problems, I didn't know anyone had it enabled ↺

based.pt, I would be open to restoring federation if you would be willing to implement and configure the following protections on your server: https://modules.prosody.im/mod_throttle_unsolicited.html https://modules.prosody.im/mod_report_affiliations.html https://prosody.im/doc/modules/mod_limits Would this be acceptable to you?

i will look into it and then let you know

mod_muc_limits is good too for protecting any mucs you host

tom, do i need extra configuration?

based.pt, the rate limits can be tuned to values for your local site. The defaults work well for most sites. You would need to add nuegia.net and the rtbl service to report_affiliations_trusted_servers =

whats the rtbl service?

having rtbl on a server called nigga.pt is the funniest concept

https://xmppbl.org/

thank you

done

would it be safe to enable public registration again?

you should definitely configure more protections on your public registration that out outside the scope of the requirement I have laid out for federation restoration.

others may be able to help you with that.

ok, i will try and improve on that, meanwhile the server will have registration closed

and again, sorry

you weren't the only one affected, i had another spam report

i assume the same individual spammed on a few more servers

based.pt, do you already have your server configured to forward spam reports to you?

yes

i already have the 3 modules you sent

unsolicited_messages_per_minute = 10 unsolicited_s2s_messages_per_minute = 100 report_affiliations_trusted_servers = { "nuegia.net", "xmppbl.org" }

im adding mod_anti_spam now

and spam_reporting

thank you.

done

everything added

test