I've found scripts to auto-populate the blocking lists with the Spamhaus and other blocklists, but running the last handful of IPs coming through on the notifications shows them all to still be clean on Spamhaus (in other words, it wouldn't block them then, and it still wouldn't block them now). Captcha for login is not directly available; which is a little surprising, as it is available for registration, posting, contact us, searching, etc. Just not as a requirement for each login. There was a mod for 3.6 to add it, but it hasn't been updated for years and isn't compatible with this version.
While this is annoying, I don't know of 1 user who has had their account taken over yet, assuming that the first thing someone would do is start posting up spam of some sort.
|