Spam Prevention and Management Best Practices for Your Community

Version 2

    1. Prevent spam before it happens

    Stop spam before it starts with these proactive measures.

     

    #PreventionBenefitAdmin Path URL / Settings
    1
    Utilize the "Free" Spam Prevention Micro-Service for your community*

     

    • Moderate all non-English posts if the community is set to English
    • Moderate all posts by user accounts < 24 hours
    • Moderate all posts that are repetitive

    * NOTE: To gain the benefits of the Spam prevention micro-service, you must first create a Jive Support case requesting the Spam Prevention Service be turned on for your community. 

     

    Need help to create a Jive Support Case, see How to Create Support Cases

    Configure the Spam Prevention Micro-Service settings*The Jive Spam Prevention Service filters all new or edited content on the community. Content that is flagged as spam will be placed into the moderation queue.

     

    * NOTE:  Page and options available after service turned on by Jive.

    PAGE SETTINGS

    yourcommunityurl.com/admin/spam-service-configuration.jspa

     

    Spam Prevention Service integration enabled=Check to enable

     

    Basic Configuration Section

    Request Timeout=4000 ms

    Moderate on Error=Select the first radio button, "If the spam prevention service is unreachable or reports an error, place the scanned content into moderation"

    Moderator Message Enabled=Check to enable

     

    Mollom Configuration section

    Strictness="Normal" (only setting here)

     

    Non-English Character Detector Configuration Section

    In communities where English is the defined language, moderate posts using other character sets=Check to enable

     

    Suspicious User Detector Configuration

    Moderates posts by users who fit a spam account profile = Do not check enable

    (unless your community can afford to have accounts which are 24 hours new have all their content go into moderation.)

     

    Repetitive Post Detector Configuration

    Moderates posts with a high proportion of repeated words or phrases=Check to enable

    2Registration ValidationAdditional verification that the registrant is an individual and not a robot.yourcommunityurl.com/admin/settings-registration.jspa
    3Create Keyword InterceptorsPrevents content from being created at all. Prompts user with a message stating "Sorry this content is not allowed."

    yourcommunityurl.com/admin/interceptors.jsp?communityID=1

    Configuring Interceptors

    4Change Open Groups to MembersChange Open groups to Members Only so that users need to join the group in order to post content. This creates a barrier for the spammers to post.In your Group, Manage > Settings > Select Public Group > Restricted

     

    2. Spam management after an attack

    Best practices dealing with spam removal after an attack. If you are under Spam attack, Social Edge recommends performing the following steps:

    1. Perform #1 and #2 in section 1. Prevent Spam Before it Happens and then
    2. Perform #1 through #7 in this section
    #PreventionBenefit/Expected ResultsAdmin Path URL
    1Deactivate User Immediately

    This will stop the user from continuing to post in the community. By deactivating and not deleting the user prevents the user from recreating the same account.  *Do not delete the user.

    yourcommunityurl.com/admin/user-search.jspa
    2Create Spam Secret Quarantine Group

    The Secret Spam Quarantine group benefits are to:

    • house all spam content for investigation.
    • keeps spam content hidden from all members
    • promote less noise in the community
    • have a place to work while cleaning up the spam secretly
    Create a Secret Spam Quarantine Group in your community.
    3Move spam content into a Secret Quarantine group

    Keeping the content will help you/Jive better understand the contents of the spam and set-up the appropriate spam filters accordingly.

    Content is moved into the secret Quarantine group and only visible to this team.

    When the spam attack is over, the content can be deleted

    Create > Spam Quarantine

    4Verify content didn't bypass the Keyword Interceptors *

    This will confirm that the content didn't bypass an already created keyword interceptor.

     

    No text found on the extended properties page of the admin console after conducting a search (ctrl f / cmd f) for specific content strings taken from the spam content. If highlighted content appears, this means that the keyword interceptor text matches the text in the new spam content. Further investigation would need to be done to identify how it made it through.

    Take the subject string and strings of content from the body and do a search on the extended properties page of the admin console under spaces > extended properties.

     

    yourcommunityurl.com/admin/community-xprops.jsp?communityID=1&community=1

    * Note: This step can only be performed if Keyword Interceptors already exist in your community.

    5Setup new or additional Keyword Interceptors
    • This will stop future spam content from actually being created in the community.
    • No content will post in the community with these interceptor keywords immediately from the date the interceptor is created.
    • The user will see a message stating "Sorry this content is not allowed" making it impossible for the user to save the content.

    Create multiple keyword interceptors containing a variety of combinations of the spam content subject lines and the content within it  Create the display message presented to the user if they click post on content created with spam matching the interceptor.  A message similar to "Sorry this content is not allowed." The user is forced to change the context of the title and/or body before posting. Choose one or many types of interceptors to use Configuring Interceptors

     

    yourcommunityurl.com/admin/interceptors.jsp?communityID=1

    6Bulk delete user content

    Allows admins to view and delete the spam content all at once or selectively under a specific username.

    For Jive 8: Delete user content in bulk from with the admin console.

    1. Go to the People > User Search
    2. Search for the user and click the users' name to enter the person document
    3. Click one of the views available; view discussion messages, view documents, view blogs, at the top of the page
    4. Select all content or specific items, and click delete selected or delete all messages

    For Jive Cloud: Delete user content in bulk from the Manage > Settings of the Quarantine Secret group

    7Moderate Content with External Links
    • This will stop future spam content from actually being created in the community.
    • No content will post in the community from the date the interceptor is created.
    • The user will see a message stating "Sorry this content is not allowed.
    yourcommunityurl.com/admin/spam-link-prevention-config.jspa

     

    3. Additional prevention methods

    Use any or a combination of these features to further refine your community needs to keep spam out. NOTE: Click the "" in the top right corner of your screen while on any Admin Console page will open help documentation for that specific page.
    #PreventionBenefitAdmin Path URL
    1New account moderation
    1. Message Governor Interceptor:  This limits the rate at which users can post messages. The rate is no more than once every {0}> seconds. The user receives a rejection message if they attempt multiple posts within the post interval.
    2. Spam Prevention Service-Moderate all posts by user accounts < 24 hours old.
    3. Link moderation: all content by users who do not have a certain amount of status points is automatically moderated if the content includes external links. Prevent posting too many pieces of content by the number of points the user has. *Permission groups can be whitelisted
    1. yourcommunityurl.com/admin/interceptors.jsp?communityID=1
    2. yourcommunityurl.com/admin/spam-service-configuration.jspa
    3. yourcommunityurl.com/admin/spam-link-prevention-config.jspa
    2Blocking embargoed countries

    Prevents users from creating accounts and content from these countries: Iran, North Korea, Sudan, Syria.

     

    NOTE: There are several ways to set this up. Some options are more advanced and you may need to try several different combinations based on your Community's business needs and requirements.

     

    1. IP interceptor = yourcommunityurl.com/admin/interceptors.jsp?communityID=1
    2. Ban settings which cover banning: users, email addresses, and IP addresses = yourcommunityurl.com/admin/settings-ban.jsp?type=1 Note: The Ban User interceptor is designed to prevent a specified user from posting content. Whereas, the Ban settings are designed to ban users from logging in at all.
    3. Registration Moderation based on a required field like country = yourcommunityurl.com/admin/settings-registration.jspa
    4. Domain White and Black lists = yourcommunityurl.com/admin/settings-registration.jspa

    NOTE: Click the "" in the top right corner of your screen while on any Admin Console page will open help documentation for that specific page.

    3ProfanityPrevents users from saving content with x-rated wordsyourcommunityurl.com/admin/settings-filter!input.jspa
    4Adding a domain blacklistStops users from listed domains from registering in the community.  This should be filled with disposable email domains (Do not block these domains: gmail.com, hotmail.com, etc. should still be allowed.)

    Admin Console: People > Settings > Registration Settings

    Here is a list of disposable and temporary email address domains often used to register dummy users in order to spam/abuse some services.

    5Ban Users/IPPrevents the user from registering into the Community to post content.yourcommunityurl.com/admin/settings-ban.jsp?type=1
    6Moderation Controller

    Enable a set of users and groups that always or never require moderation.

    Modify the Moderation Controller. Add users into necessary fields.

    yourcommunityurl.com/admin/interceptors.jsp?communityID=1
    7

    *Moderate Content

    Moderate the Community, Social Groups, and/or Spaces as a whole or individually

    *Note: This will override the Jive Advanced Micro-Service Link feature because the Moderate content feature is set on the community, space or group and will send all content to moderate.

           
    yourcommunityurl.com/admin/community-moderation-settings.jspa?communityID=1&community=1

    Print Recommendations

    Recommend using the Click CTRL + P to print from Windows or CMD + P to print from MAC option to print this document. Clicking "View PDF" on this page and then printing is not recommended as the layout will not format nicely for a final print.

     

    Parent Blog

    Spam 101: How to Prevent and Manage it in Your Community

     

     

    Visit us for more helpful tips and tricks Welcome | Social Edge

    Subscribe to our Blog the Inside Edge | Social Edge