banning email registrations from specific top level domains?

[john2k]

Is it possible to ban email registrations from users with email addresses under a specific top level domain?

For example, a country code top level domain as ".xy" (with emails like [email protected] or [email protected]) - can all email addresses ending in ".xy" be banned?

I have this setup, but it doesn't seem to be working. What am I supposed to add to the ban list to make this work? ".xy" or can I use a wildcard character such as "*.xy" ?

Thanks,

- John

[SloppyGoat]

I'm having the same problem with .biz email accounts. How the hell can I ban all emails that end in the .biz extension?

[SloppyGoat]

Bump! I think I have some kind of bot registering random names. They put 1's in all the fields, and it's always a [email protected] email address.

[criscokid]

Bump! I think I have some kind of bot registering random names. They put 1's in all the fields

I've had this as well. I'm not sure if it's a robot or not or just someone typing in a 1 out of habit so as to satisfy those feilds that require input.

There's a thread (don't remember the URL or title) where someone had compiled a list of domain names that they didn't want people to register with emails from those domains. The list included yahoo, hotmail etc... I'm happy for people with those sort of email addresses it's the @cheapflightdeals.com @bigbreastchicks.net etc email addresses as these kind of people often only register to include a URL to a porn website or similar.

[Steve Machol]

I'm having the same problem with .biz email accounts. How the hell can I ban all emails that end in the .biz extension?

Just all this to the Banned Email Addresses list:

.biz

[musicat]

I'm having the same problem. Five bot registrations so far over a few weeks, using these domain names:

lacedwhitepanties.biz
lightblondevagina.biz
bagelsandcreamcheese.biz
hottamlideals.biz

(plus one other I did not save from .info, so banning .biz wouldn't fix this one)

Same characteristics as others have reported in this thread: "1" in all personal data fields.

Using whois, I find that all these sites are registered under the same name in Cyprus: Byard Johnson, Oster Eating Monoploly Inc. [sic] registered Dec 2004.

What puzzles me is what this dude hopes to accomplish. There have been no posts by these accounts, so what's the point? I deleted two accounts and emailed him (he gives his email as [email protected]), but as expected, got no response.

His IP is always 200.73.174.183.

Rather than block a whole domain, I'd rather ban the accounts, but I don't see a way to do this in vB 2.x. The manual says, "To prevent a user from viewing any page of your board, go to Users > Ban User," but this option does not appear on my admin page. Is there another way?

Meanwhile, I will be blocking that IP at the router level if I can.

[criscokid]

What puzzles me is what this dude hopes to accomplish. There have been no posts by these accounts, so what's the point?

These sort of people hope to get traffic from the website link detailed in their profile and search engines see these links which could improve SEO and Google PR on their site.

SOmething maybe worth considering is a number of 'banned users' blacklists (various categories) centrally adminstered by vBulletin that users of vBulletin could make use of via their control panel. This woulkd be another selling feature for vBulletin.

lacedwhitepanties.biz, lightblondevagina.biz, bagelsandcreamcheese.biz &
hottamlideals.biz could say be added to the 'bot blacklist' - the guy that's behind these domains probably knows a fair bit to have created this bot that he's got going around - I've had users created with email addresses from all of those domains that were listed in the previous email.

With the help of vBulletin hopefully we can try stay ahead of users like this.

[musicat]

These sort of people hope to get traffic from the website link detailed in their profile and search engines see these links which could improve SEO and Google PR on their site.

I really don't understand this. Their web page is shown as "1" -- that's all -- no "http://," no nothing. And if you try to access the actual domain name extracted from the email address or even the IP, it is not public. How can this benefit the source?

Your idea of some management improvements in vB are interesting, like a centrally-administered blacklist. Certainly the need for security will not be diminished in the future.

[SloppyGoat]

Just all this to the Banned Email Addresses list:

.biz

Tried it. It doesn't work. Also tried all kinds of variations of wildcards:

*@*.biz
*.biz
@*.biz

Nothing works. You can still register a *@something.biz email account.

[Steve Machol]

Tried it. It doesn't work.

It works on my unhacked 3.0.7 test forum. I tested this out before posting this.

[SloppyGoat]

Well, .biz is in my ban list, and I can register .biz emails all day long, if I want to.

His IP is always 200.73.174.183.

Same IP I last recorded. I already banned it. Hopefully there will be no more of those.

[randychase]

I can't get these to stop either, even after putting .biz and .ru in the banned email. It just means they can't post, but they don't seem to want to. I want to stop them from registering in the first place.

[SloppyGoat]

I just added that IP to my blacklist. You can do the same with Apache. I'd still like to know how to ban .biz accounts, though.

[Steve Machol]

As I said, entering .biz in the Banned Email box works for me. I tried registering with .biz address and it rejects them.

I suspect this problem is either from a hack you've installed, or there is a hard return in your Banned Email list. You need to make sure there are no hard returns and only spaces.

[SloppyGoat]

Nope, double and triple checked it. Others are having the same problem. We couldn't possibly all have the same hack, even if it was a hack. Banning email domains does not work. Only banning exact addresses seems to work.

Thank you for registering, testingblah. An email has been dispatched to [email protected] with details on how to activate your account.