Extension:SpamBlacklist/ja

「SpamBlacklist」拡張機能は、指定されたファイルまたはウィキ ページで定義された正規表現パターンと一致するドメインを持つ URLを含む編集と、指定された電子メール アドレスを使用するユーザーによる登録を防ぎます.

誰かがページを保存しようとすると、この拡張機能は、不正なホスト名の (潜在的にとても巨大な) リストに対してテキストをチェックします. マッチするものがある場合、拡張機能は利用者に対してエラーメッセージを表示してページの保存を拒否します.



インストール


ブラックリストの設定
追加のソースがリストされていても、次のローカル ページが常に使用されます:
 * MediaWiki:Spam-blacklist
 * MediaWiki:Spam-whitelist
 * MediaWiki:Email-blacklist
 * MediaWiki:Email-whitelist

URLのブロックリストのデフォルトの追加ソースは、m:Spam block listにある Meta-Wiki のウィキメディアスパムブロックリストです. デフォルトでは、拡張機能はこのリストを使用し、10～15 分ごとに再読み込みします. 多くのウィキでは、このリストを使用するだけでほとんどのスパム行為をブロックできます. ただし、ウィキメディアのブロック リストは、数十万の外部リンクを持つ大規模なウィキの多様なグループによって使用されているため、ブロックするリンクは比較的保守的です.

ウィキメディアのスパム ブロック リストは、管理者のみが編集できます. ただし、m:Talk:Spam blacklist でブロック リストの変更を提案できます.

自分のウィキに他の悪いURL を追加することができます. のグローバル変数 にそれらをリストします. 以下の例を参照してください.

は2レベルの配列です. 最上位のキーは または です. URL、ファイル名、またはデータベースの場所のいずれかを含む各値の配列を取ります.

If you use  in "LocalSettings.php", the default value of " Spam blacklist " will no longer be used - if you want that block list to be accessed, you will have to add it in manually, see examples below.

Specifying a database location allows you to draw the block list from a page on your wiki.

The format of the database location specifier is ">DB: [db name] [title]". [db name] should exactly match the value of  in. You should create the required page name [title] in the default namespace of your wiki. If you do this, it is strongly recommended that you protect the page from general editing. Besides the obvious danger that someone may add a regex that matches everything, please note that an attacker with the ability to input arbitrary regular expressions may be able to generate segfaults in the PCRE library.

例
If you want to, for instance, use the English-language Wikipedia's spam block list in addition to the standard Meta-Wiki one, you could call the following in, AFTER  call:

Here is an example of an entirely local set of block lists: the administrator is using the to generate a local file called "wikimedia_blacklist" that holds a copy of the Meta-Wiki blacklist, and has an additional block list on the wiki page "My spam block list":

Logging
By default, the extension does not log hits into the spam blacklist log. To enable logging set. You can use the  user right to control access to the logs. Every signed-in user can view the logs by default.

Backtrack Limit
If you encounter issues with the block list, you may want to increase the backtrack limit. However on the other hand, this can reduce your security against DOS attacks, as the backtrack limit is a performance limit:

Hardened Wikis
The SpamBlacklist will not allow editing if the wiki is hardened. Hardening includes limiting  so that   is not on-path, and setting   in.

In the hardened case, SpamBlacklist will cause an exception when Guzzle attempts to make a network request. The Guzzle exception message is, GuzzleHttp requires cURL, the allow_url_fopen ini setting, or a custom HTTP handler.

User Filtering
The SpamBlacklist will filter all users by default, including Sysops, administrators and bots. Also see Phabricator issue T36928.

Safe list
A corresponding safe list can be maintained by editing the MediaWiki:Spam-whitelist page. This is useful if you would like to override certain entries from another wiki's block list that you are using. Wikimedia wikis, for instance, sometimes use the spam block list for purposes other than combating spam.

It is questionable how effective the Wikimedia spam block lists are at keeping spam off of third-party wikis. Some spam might be targeted only at Wikimedia wikis, or only at third-party wikis, which would make Wikimedia's blacklist of little help to said third-party wikis in those cases. Also, some third-party wikis might prefer that users be allowed to cite sources that are not considered reliable on Wikipedia, or that Wikipedia has considered so ideologically offensive as to warrant blocking. Sometimes what one wiki considers useless spam, another wiki might consider useful.

Users may not always realize that, when a link is rejected as spammy, it does not necessarily mean that the individual wiki they are editing has specifically chosen to ban that URL. Therefore, wiki system administrators may want to edit the at MediaWiki:Spamprotectiontext and/or MediaWiki:Spamprotectionmatch on your wiki to invite users to make suggestions at MediaWiki talk:Spam-whitelist for pages that should be added by a  to the safe list. For example, you could put, for MediaWiki:Spamprotectiontext:


 * The text you wanted to save was blocked by the spam filter. This is probably caused by a link to a blacklisted external site. maintains its own block list ; however, most blocking is done by means of Meta-Wiki's block list, so this block should not necessarily be construed as an indication that  made a decision to block this particular text (or URL). If you would like this text (or URL) to be added to the local spam safe list , so that  users will not be blocked from adding it to pages, please make a request at MediaWiki talk:Spam-whitelist . A sysop will then respond on that page with a decision as to whether it should be listed as safe.

注記
If you are using memcached, you will also have to delete the  key (for example, using  ).
 * この拡張機能はウィキエディタが新規に導入したリンクのみ検証します. To check user agents, add Akismet As the various tools for combating spam on MediaWiki use different methods to spot abuse, the safeguards are best used in combination.
 * The Extension:SpamBlacklist/update script is a cron script that can automate updates from shared block lists.
 * Users with the  can override the block list and add blocked links to pages.

Block list syntax
If you would like to create a block list of your own, or modify an existing one, here is the syntax:

Everything on a line after a '#' character is ignored (for comments). All other strings are regex fragments which will only match inside URLs.


 * 注記:

By giving "www\." explicitly one can match specific subdomains. The regular anchor  won't be of any use.
 * Do not add "http://"; this would fail, since the regex will match after "http://" (or "https://") inside URLs.
 * Furthermore "www" is unneeded, since the regex will match any subdomains.
 * The  and   anchors match the beginning and end of the domain name, not the beginning and end of the URL.
 * Slashes don't need to be escaped by backslashes, this will be done automatically by the script.
 * The spam blacklist functions prior to abuse filters, so blacklisted domains will not show in the entries in abuse filter log (special:abuselog), and will only show in (special:log/spamblacklist).


 * 例:

The following line will block all URLs that contain the string "example.com", except where it is immediately preceded or followed by a letter or a number.

\bexample\.com\b

These are blocked:


 * http://www.example.com
 * http://www.this-example.com
 * http://www.google.de/search?q=example.com

These are not blocked:


 * http://www.goodexample.com
 * http://www.google.de/search?q=example.commodity

パフォーマンス
The extension creates a single regex statement which looks like  (where all slashes within the lines are escaped automatically). It saves this in a small "loader" file to avoid loading all the code on every page view. Page view performance will not be affected even if you're not using a bytecode cache although using a cache is strongly recommended for any MediaWiki installation.

The regex match itself generally adds an insignificant overhead to page saves (on the order of 100ms in our experience). However, loading the spam file from disk or the database, and constructing the regex, may take a significant amount of time depending on your hardware. If you find that enabling this extension slows down saves excessively, try installing a supported bytecode cache. This extension will cache the constructed regex if such a system is present.

If you're sharing a server and cache with several wikis, you may improve your cache performance by modifying getSharedBlacklists and clearCache in SpamBlacklist_body.php to use (or a specific DB if you do not have a shared upload DB) rather than. Be sure to get all references! The regexes from the separate MediaWiki:Spam-blacklist and MediaWiki:Spam-whitelist pages on each wiki will still be applied.



外部のブロック リスト サーバー (RBL's)
In its standard form, this extension requires that the block list be constructed manually. While regular expression wildcards are permitted, and a block list originated on one wiki may be re-used by many others, there is still some effort required to add new patterns in response to spam or remove patterns which generate false-positives.

Much of this effort may be reduced by supplementing the spam regex with lists of known domains advertised in spam email. The regex will catch common patterns (like "casino-" or "-viagra") while the external block list server will automatically update with names of specific sites being promoted through spam.

In the filter function in SpamBlacklist_body.php, approximately halfway between the file start and end, are the lines:

Directly above this section (which does the actual regex test on the extracted links), one could add additional code to check the external RBL servers:

This ensures that, if an edit contains URLs from already blocked spam domains, an error is returned to the user indicating which link cannot be saved due to its appearance on an external spam block list. If nothing is found, the remaining regex tests are allowed to run normally, so that any manually-specified 'suspicious pattern' in the URL may be identified and blocked.

Note that the RBL servers list just the base domain names - not the full URL path - so http://example.com/casino-viagra-lottery.html will trigger RBL only if "example.com" itself were blocked by name by the external server. The regex, however, would be able to block on any of the text in the URL and path, from "example" to "lottery" and everything in between. Both approaches carry some risk of false-positives - the regex because of the use of wildcard expressions, and the external RBL as these servers are often created for other purposes - such as control of abusive spam email - and may include domains which are not engaged in forum, wiki, blog or guestbook comment spam per se.

Other spam-fighting tools
There are various helpful manuals on mediawiki.org on combating spam and other vandalism:


 * - includes link to the built-in anti-spam mechanism.

Other anti-spam, anti-vandalism extensions include:


 * System messages
 * System messages



関連項目

 * Compatible blocklist (this is just a tiny sampling; there are many more)
 * Meta-Wiki block list


 * その他のリソース