2

Recently there have been noticed a sudden surge in Jabber/XMPP spammers activity. Spammers not only manage to send a regular messages to users, like this:

Message

but also a some kind of announcement message, each of which opens in a separate window, which is frustratingly annoying. Here is one of such windows:

Announcement

It is been suggested by a user here, that these are just a regular messages, but with a subject. Is there a way to disable such messages server wide?

Neurotransmitter
  • 468
  • 1
  • 6
  • 17

1 Answers1

2

This is not announcement. It seems to be standard message with subject. You simply need to find the abuse user and block their account and tighten control and validation on account registration. It is for example a good idea to block in-band registration and handle registration through a web form.

  • There are plenty of such malicious users with disposable usernames. Are there a method to disable such messages with subject server wide? – Neurotransmitter Oct 05 '15 at 16:00
  • Message with subject are just standard XMPP messages. Please see the XMPP RFC, subject is a valid optional field: http://xmpp.org/rfcs/rfc6121.html#message-syntax-subject Even if you write a custom module, spammers will still be able to send messages without subject. You need to tighten your control on account registration. – Mickaël Rémond Oct 05 '15 at 16:07
  • I am okay for now for regular spam messages, what I seek is to how to disable these annoying spam messages in separate windows. By the way, there is nothing to do with account registration on my server, since all spammers are from other servers. On the screenshot provided it is shown, that this particular one came from `kdetalk.net`. I've blocked this JID of course, but it is just a disposable one. – Neurotransmitter Oct 05 '15 at 19:43
  • What I am saying, is that it is a regular spam message. – Mickaël Rémond Oct 06 '15 at 11:51
  • I understood. But seems it is not as regular as a _true_ regular, since it has a subject (even empty) and always opens in a separate window. What I (and probably others since the question is already upvoted and starred) seek is a way to disable such _messages with subjects_ server wide. – Neurotransmitter Oct 06 '15 at 13:17
  • There is not such feature to block message with subject in ejabberd. You need to write a plugin to filter out message based on ejabberd packet_filter API. – Mickaël Rémond Oct 06 '15 at 13:45
  • Okay, Mickaël, thanks for your answers, as far as I understood, you are a major contributor to `ejabberd`, may I ask a question in this regard? The spam problem arose couple of months ago, and the particular _messages with subject_ are already a pain to many users. They are used **only** by spammers to distract users. The problem is hot and it is keep getting worse. Should we, `ejabberd` administrators wait for the official possibility to disable these kind of messages in ejabberd's config? Or the only option is to wait till someone write a filter, which you suggested in the previous comment? – Neurotransmitter Oct 06 '15 at 14:15
  • 1
    yes, you need someone to write it. I may give it a go when I have some time but do not hold your breath, not sure when I can do it – Mickaël Rémond Oct 07 '15 at 16:11
  • Okay, thanks, if you'll find time to do it eventually, that'll be great. – Neurotransmitter Oct 07 '15 at 16:14