{"id":1440,"date":"2012-07-26T12:19:01","date_gmt":"2012-07-26T17:19:01","guid":{"rendered":"http:\/\/bitpost.com\/news\/?p=1440"},"modified":"2013-04-25T09:53:12","modified_gmt":"2013-04-25T14:53:12","slug":"howto-configure-tracspam-to-allow-anonymous-ticket-creation-in-trac","status":"publish","type":"post","link":"https:\/\/bitpost.com\/news\/2012\/howto-configure-tracspam-to-allow-anonymous-ticket-creation-in-trac\/","title":{"rendered":"HOWTO configure TracSpam to allow anonymous ticket creation in Trac"},"content":{"rendered":"

Trac is nice and simple and clean and “suits me well” for now. I was able to quickly add custom fields and use them on the front page of my tracker<\/a>. And it supports the ability for anyone to anonymously add a new ticket, which is the Holy Grail of getting feedback. But getting feedback includes getting spammed. I was getting a few spam tickets every minute, making things unusable. How to fix?<\/p>\n

TracSpam to the rescue. It’s built in to trac, but it required some tweaking…<\/p>\n

    \n
  1. Install trac<\/li>\n
  2. Add this to trac.ini to make sure TracSpam is completely enabled, and restart apache (required). I would remove any other tracspamfilter lines.\n
    [components]\r\ntracspamfilter.* = enabled<\/code><\/pre>\n<\/li>\n
  3. Log in as admin.<\/li>\n
  4. From the Admin -> Permissions page, add the TICKET_CREATE action to the anonymous subject.\u00a0 Crazy, but I’ve gotten spam captured pretty well enough to make this work.<\/li>\n
  5. Select Spam Filtering -> Capture, and make sure [x] Enabled is checked, and captcha type is Recaptcha.<\/li>\n
  6. Go to Google reCAPTCHA<\/a> and get some keys for your site.\u00a0 Add them on the Capture admin page (and save them somewhere else).<\/li>\n
  7. Select Spam Filtering -> Configuration, and enable “logging” purged after 1 day – this should probably be called “monitoring” – you’ll now get feedback on the Spam Filtering -> Monitoring page.<\/li>\n
  8. Take a look at the karma settings on Spam Filtering -> Configuration.\n
    Here’s what I found to be important:<\/p>\n
    No matter what I did, I could not seem to be able to get the recaptcha to display when adding tickets.
    \nEventually I was able to test things out because for some reason, I discovered that the BlogSpam service was marking me as spam.
    \nSo I set BlogSpam karma high enough to force my anonymous tickets to be marked as spam.
    \nI set CaptchaSystem karma slightly higher than BlogSpam to get me past it on a bad score.
    \nI used a clean machine with no cookies to try to create an anonymous ticket.\u00a0 No Recaptcha was displayed when entering the ticket.
    \nAfter hitting Submit, the BlogSpam score marked it as spam, and THEN trac displayed the recaptcha.
    \nI entered the recaptcha correctly, and the ticket was added.<\/p><\/blockquote>\n
    So it appears that a ticket is created anonymously, then the spam score is generated, then if it’s spam, the recaptcha is displayed, then spam is recalced, then the ticket is added or rejected.\u00a0 Even if the recaptcha is done correctly, the ticket will be rejected if the karma doesn’t increase enough.<\/li>\n
  9. With this information, you should now be able to tweak Spam Filtering -> Configuration to get the job done.\u00a0 It may take some monitoring to see what kind of scores you are seeing.\u00a0 You also want to create some anonymous test tickets from some “good” IPs and make sure they get through.<\/li>\n
  10. I would lean heavily on the Akismet score – if Akismet says it’s spam, I mark it as spam even if recaptcha succeeds.\u00a0 And why not make them fill out the recaptcha to find out?\u00a0 Ha, die spammer die.<\/li>\n
  11. Don’t give too much karma to the SessionFilterStrategy.\u00a0 If you browse twice from the same site, you’re in a trac session, which means you’ll get a third of the karma from this one.\u00a0 Keep it low.<\/li>\n
  12. I ended up setting the recaptcha score high enough to make up for 3 other filter failures, but not 4.<\/li>\n
  13. Note that if you want to clear out the monitoring page, and you have tons of spam entries like I did, rework the url to show more tickets per page:\n
    (yourtracsite)\/admin\/spamfilter\/monitor?num=500<\/code><\/pre>\n<\/li>\n<\/ol>\n
    So far so good.\u00a0 It’s so nice to crush spam, isn’t it!?\u00a0 \ud83d\ude42<\/p>\n","protected":false},"excerpt":{"rendered":"
    Trac is nice and simple and clean and “suits me well” for now. I was able to quickly add custom fields and use them on the front page of my tracker. And it supports the ability for anyone to anonymously add a new ticket, which is the Holy Grail of getting feedback. But getting feedback […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"enabled":false},"version":2}},"categories":[19,10],"tags":[161,163,162,160,158,159],"class_list":["post-1440","post","type-post","status-publish","format-standard","hentry","category-opensource","category-tricks-tips-tools","tag-akismet","tag-blogspam","tag-recaptcha","tag-spam","tag-trac","tag-tracspam"],"aioseo_notices":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p9M11L-ne","jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/bitpost.com\/news\/wp-json\/wp\/v2\/posts\/1440","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitpost.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitpost.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitpost.com\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/bitpost.com\/news\/wp-json\/wp\/v2\/comments?post=1440"}],"version-history":[{"count":11,"href":"https:\/\/bitpost.com\/news\/wp-json\/wp\/v2\/posts\/1440\/revisions"}],"predecessor-version":[{"id":1578,"href":"https:\/\/bitpost.com\/news\/wp-json\/wp\/v2\/posts\/1440\/revisions\/1578"}],"wp:attachment":[{"href":"https:\/\/bitpost.com\/news\/wp-json\/wp\/v2\/media?parent=1440"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitpost.com\/news\/wp-json\/wp\/v2\/categories?post=1440"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitpost.com\/news\/wp-json\/wp\/v2\/tags?post=1440"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}