Stop Comment spams with IP Blacklist Cloud

Comment spams is the bane of any website operator that rely on real human interaction. Stopping comment spams by hand is a tedious process especially when comment spam attacks are sophisticated and are launched from Botnet. There are several techniques that can be employed to fight comment spams including behavioral analysis and also IP analysis.

In maintaining WordPress and Joomla sites, I myself has analyzed several web logfiles and Cloudflare logs to learn that most comment spam originated from certain ip blocks and countries. Therefore, I decided to completely deny access from those affected ip block through firewall (which keep the comment spam low and saves web server resources!)

ipblc_server

However, recently I found a new service IP Blacklist Cloud which list the top most blacklisted ip address through collaborative effort. Normally I find blacklisting by ip address is tedious and probably harmful to legitimate visitors, however after conforming the ip addresses that I found inside my spam logs, I decided the list is legitimate and decided to firewall-block some of the worst offenders in the list.

IP Blacklist Cloud free WordPress plugins, which I personally does not use due to my policy of keeping my installation lean with minimal (to no plugins!), however I see that there’s no harm giving a shot!

Ubuntu One cloud storage discontinued

Read this: The once-hyped Ubuntu One cloud storage service has been discontinued. Canonical through its Ubuntu One website has stated that Ubuntu One file services will be shut down permanently effective 1 June 2014.

ubuntuone

Users are being given time until 31st July 2014 to download and backup files from Ubuntu One before they will be permanently deleted. Additionally, the service shutdown will also affect Ubuntu One content and music store.

However, according to Canonical Blog, the shutdown will not affect Ubuntu One Single Sign On service, Ubuntu payment service or the U1DB database service.

My thoughts:
Personally, as I suspected early on – Ubuntu One is unable to compete with other Cloud storage competitors and thus decided to focus their efforts on other projects such as Ubuntu Phone project.

Additionally, I also won’t hold my breath on the Ubuntu Phone project as I find it quite hard for Canonical to find manufacturers that will carry Ubuntu OS on their phone. In my opinion, Ubuntu Phone depends too much on Android backend/platform which may risk legal entanglement in the future, or platform incompatibility should there are significant changes in Android platform in the future.

How to send Email with SMTP using Telnet in GNU/Linux

SMTP is a protocol to send email over the internet and it is documented in RFC821. Sending email using Telnet is straight-forward if you know how to do it.

telnet smtp.example.com 25
MAIL FROM: <example_from @ example.com>
RCPT TO: <example_to @ example.com>
DATA
From: [John Doe] <example_from @ example.com>
To: [Jane Doe] <example_to @ example.com>
Subject: This is a test message....

This is an example email content to demonstrate email sending using Telnet.

.

QUIT
[/pre]

Note that you need to type "." and QUIT after you've finished writing the email content. You should change the SMTP server domain and the email used in the example accordingly.



Backup your Gmail account in Ubuntu Linux with gmvault

This is a follow-up of my previous post “What to do when your Google disabled your Gmail account?“.

Here’s how to download all emails from your GMail account with Gmvault:

Download and setting up gmvault

1. First you need to install python-pip
[bash]
sudo apt-get install python-pip
[/bash]

2. Then using ‘pip’, install gmvault
[bash]
sudo pip install gmvault
[/bash]

3. Finally you can sync and backup GMail accounts with ‘gmvault
[bash]
gmvault sync your_username @ gmail.com
[/bash]

4. gmvault will ask you to authenticate yourselves with GMail, and after that, the syncronization process starts. gmvault stores all the gmail backup in the ‘gmvault-db‘ directory.

p/s: Some users encounters error telling that the “All Mail folder is not visible”. You can enable All Mail folder visibility by checking the “Show in IMAP” box in Settings->Labels. Also, IMAP access should also be enabled for this to work.

p/s 2: It might not be obvious right now why you need to backup your emails when Gmail has gigabytes of storage. But according to Gmail discussions group, Google can and might disable access to all of its services, locking the users out from their emails forever.

What to do when your Google disabled your Gmail account?

Recently I managed to get my gmail account disabled by Google. At first, I didn’t think that it would be a big deal since free email account can be registered every now and then, if it managed to get disabled/suspended.

gmail disabled

But…. It turns out I WAS WRONG.

See, when Google disabled a Gmail account, it also disabled all other accounts that associates with that account, including (but not limited to) :

  • Youtube (your videos will be inaccessible)
  • Blogger (all your blogs will be made inaccessible)
  • Google+
  • Google Play / Android Market (partially affects your Android phone and contacts, your paid apps will not be available)
  • Google Drive / Google Docs (you won’t be able to access your files /documents)
  • Google Code (loose access to your code repo)
  • And anything that is related to Google service

How does a Gmail account gets disabled ?

Officially Google states that each accounts holder must comply with Google Terms of Service.

Unofficially, there could be tons of reasons why Google disable a particular Google account, which includes:

  • Suspected partaking in spamming activity
  • Age factor (based on D.O.B data entered, those under 13yrs old aren’t allowed to use Google
  • Suspected using illegal credit card (in case of purchasing through Google Wallet or Google Pay)
  • When Google suspect that your account has been compromised
  • etc…

Anyway, they didn’t tell me exactly what I did and why they disabled my account (they tell me that they won’t disclose details to avoid their automated system from being compromised by hackers).

What they do is ask me when the last time I access my account, using which browser and what are the things that I do with my Google account recently before my account being disabled.

After that, within 24 hours, my account has been restored! So if you find yourselves in similar situation, then you should try get some help from Google Products (Gmail) forums. The people there are helpful, as long as you don’t get too emotional and push them too much.

Note that you should understands the Google Product Terms & Policy when you are using any Google Products. Because from what I’ve seen from the forum, there are also those who aren’t as lucky as I am, getting their accounts permanently disabled. Once it is permanently disabled, there are absolutely *ZERO* chances of recovering your precious data.

Be warned.

Mypapit GNU/Linux blog is now served with CloudFlare!

After long and careful consideration, I decided to enable CloudFlare for my blog.

CloudFlare is a content delivery network which aims to enhance website security and performance. CloudFlare CDN offers protection againts many forms of malicious activity including: spammers, email harvesters, SQL Injection, XSS, denial-of-service attack and suspicious web requests. Therefore saving valueable bandwidth from the web hosting machine.

My Personal Experience with CloudFlare
After a while using CloudFlare, I’ve notice that:

  • My site uses less bandwidth
  • The php-fcgi uses less (valueable RAM)
  • Less comment spam received from blogs
  • Site loads faster, not prone to being bogged down during peak hour

So far, so good, I love using CloudFlare…