[Tickets #5669] Re: spam protection needed

[bugs at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/?id=5669
-----------------------------------------------------------------------
 Ticket             | 5669
 Updated By         | zoli at polarhome.com
 Summary            | spam protection needed 
 Queue              | IMP
 Version            | 4.0.4
 Type               | Enhancement
 State              | Rejected
 Priority           | 3. High
 Owners             | 
-----------------------------------------------------------------------


zoli at polarhome.com (2007-08-24 01:43) wrote:

Hello,

> Even whups doesn't have a captcha for authenticated users, and I 
> don't think adding one to IMP is a good idea. However, IMP 4.2 
> includes options for the maximum number of recipients that a user can 
> send do at once, and in a configurable period.

I am aware of that  option and this is also set, regardless the IMP is
abused several times at polarhome.com (this is the reason why I have been
forced to disable for all 100k+ users)

As I can see the abuser sends in a well defined URL  that Horde/IMP
accepts with current authentication allowing sendig out many thousands of
mails in few hours.

An explicit spam protection that would require the user to use the compose
page through web inteface and enter a unique combination of letters would
prevent automatic URL submissions - what might be the case here.

If you have any other workaround please tell us now.

Thank you in advance.

Regards,
Zoltan Arpadffy