<?xml version="1.0"?>
<rss xmlns:dc="http://purl.org/dc/elements/1.1/" version="2.0">
  <channel>
    <title>Transition Technology: Ticket #819: Trac anti-spam measures</title>
    <link>http://localhost:8080/trac/ticket/819</link>
    <description>&lt;p&gt;
Today we had our first item of Trac spam, &lt;a class="new ticket" href="http://localhost:8080/trac/ticket/818" title="defect: For watch lovers. superwatches (new)"&gt;ticket:818&lt;/a&gt;, since the open email interface was enabled almost 2 years ago on &lt;a class="closed ticket" href="http://localhost:8080/trac/ticket/494" title="maintenance: Email account for TRAC (closed: fixed)"&gt;ticket:494&lt;/a&gt;.
&lt;/p&gt;
&lt;p&gt;
This ticket has been created to investigate and implement some anti-spam measures.
&lt;/p&gt;
</description>
    <language>en-us</language>
    <image>
      <title>Transition Technology</title>
      <url>/trac/chrome/site/TransitionNetwork-Logo-Web-Small.jpg</url>
      <link>http://localhost:8080/trac/ticket/819</link>
    </image>
    <generator>Trac 0.12.5</generator>
    <item>
      
        <dc:creator>chris</dc:creator>

      <pubDate>Fri, 19 Dec 2014 11:23:50 GMT</pubDate>
      <title>hours, totalhours changed</title>
      <link>http://localhost:8080/trac/ticket/819#comment:1</link>
      <guid isPermaLink="false">http://localhost:8080/trac/ticket/819#comment:1</guid>
      <description>
          &lt;ul&gt;
            &lt;li&gt;&lt;strong&gt;hours&lt;/strong&gt;
                changed from &lt;em&gt;0.0&lt;/em&gt; to &lt;em&gt;0.77&lt;/em&gt;
            &lt;/li&gt;
            &lt;li&gt;&lt;strong&gt;totalhours&lt;/strong&gt;
                changed from &lt;em&gt;0.0&lt;/em&gt; to &lt;em&gt;0.77&lt;/em&gt;
            &lt;/li&gt;
          &lt;/ul&gt;
        &lt;p&gt;
There is the &lt;a class="ext-link" href="http://trac.edgewall.org/wiki/SpamFilter"&gt;&lt;span class="icon"&gt;​&lt;/span&gt;SpamFilter&lt;/a&gt; plugin but that is for spam bots editing via the web interface.
&lt;/p&gt;
&lt;p&gt;
Following &lt;a class="ext-link" href="https://oss.trac.surfsara.nl/email2trac/wiki/Email2tracConfiguration#Spam"&gt;&lt;span class="icon"&gt;​&lt;/span&gt;https://oss.trac.surfsara.nl/email2trac/wiki/Email2tracConfiguration#Spam&lt;/a&gt; there is the option to look for spam headers added by the mail server, however the mx.webarch.net server adds headers in this format:
&lt;/p&gt;
&lt;pre class="wiki"&gt;X-elderberry.rat.burntout.org-Spam-Score: 5.6 (+++++)
&lt;/pre&gt;&lt;p&gt;
Where as email2trac &lt;em&gt;"Email2trac counts the number of * characters in the spam_header line"&lt;/em&gt;, so without either changing the email2trac regex or the manner in which the mailserver flags spam we can't use this option.
&lt;/p&gt;
&lt;p&gt;
Looking at the other &lt;a class="ext-link" href="https://oss.trac.surfsara.nl/email2trac/wiki/Email2tracConfiguration#Configuration"&gt;&lt;span class="icon"&gt;​&lt;/span&gt;config options&lt;/a&gt; we can whitelist so I have changed this settings in &lt;tt&gt;/etc/email2trac.conf&lt;/tt&gt;:
&lt;/p&gt;
&lt;pre class="wiki"&gt;white_list_registered_users: 1
&lt;/pre&gt;&lt;p&gt;
We can also add additional email addresses, in the case where someone sends a email to Trac using a different email address, via &lt;tt&gt;white_list&lt;/tt&gt;.
&lt;/p&gt;
&lt;p&gt;
Sorry this took a while to track down this setting, hopefully this will do the job!
&lt;/p&gt;
      </description>
      <category>Ticket</category>
    </item><item>
      
        <dc:creator>ed</dc:creator>

      <pubDate>Fri, 19 Dec 2014 11:25:43 GMT</pubDate>
      <title></title>
      <link>http://localhost:8080/trac/ticket/819#comment:2</link>
      <guid isPermaLink="false">http://localhost:8080/trac/ticket/819#comment:2</guid>
      <description>
        &lt;p&gt;
good work chris - whitelist the best thing - can't wait to get on for TNv3
&lt;/p&gt;
      </description>
      <category>Ticket</category>
    </item>
 </channel>
</rss>