This post originated from an RSS feed registered with Java Buzz by Russell Beattie. Original Post: Java Blacklist Code Feed Title: Russell Beattie Notebook Feed URL: http://www.russellbeattie.com/notebook/rss.jsp?q=java,code,mobile Feed Description: My online notebook with thoughts, comments, links and more. Latest Java Buzz Posts Latest Java Buzz Posts by Russell Beattie Latest Posts From Russell Beattie Notebook

Along with the comment text in my DB, I also record the IP address, which is presented next to the comments when I sign in. Thus it's pretty easy to see when people are pretending to be several people (happens quite a lot) or when I'm just trying to find abusive people in general. Many times it's just a quick query comparing it against my referrers table (which also records the IP)

Here's the quick code I just implemented:

String sql;
PreparedStatement pstmt = null;

sql="select ipaddress from comment where id = ? limit 1";
pstmt = conn.prepareStatement(sql);
pstmt.setString(1, id);
ResultSet rs = pstmt.executeQuery();
String ipaddress = "";
while(rs.next()){
    ipaddress = rs.getString("ipaddress");
}

rs.close();
pstmt.close();

Runtime rtime = Runtime.getRuntime();
Process child = rtime.exec("sudo /sbin/route add -host " + ipaddress + " reject");
sql="delete from comment where ipaddress = ?";
pstmt = conn.prepareStatement(sql);
pstmt.setString(1, ipaddress);
pstmt.executeUpdate();
pstmt.close();

Yes it's brute force, but there's not much other solution other than moderation - which I'm seriously considering at this point. I'm also adding some comment throttling as well, but I can't figure out what a good number of posts per minute is. 2? 3? 5? I'll have to look out at the MT stuff to see what they do.

-Russ

Later: Hmm. That sudo command doesn't actually work (and is admittedly an unsafe thing to do...) any suggestions? I'm messing with NOPASSWD in the /etc/sudoers file now...