Add a server setting to disallow private messages to users
-
@kefka I don't see a table flip...below medium I see high but that's a verification level for mods. It's not at all related to dms....I must be misunderstanding something you're saying
0 -
https://i.imgur.com/6f3wHVQ.png
Technically all the settings prevent new DMs from being sent, table flip (or above) is just the only effective one.
1 -
Check out my long post on page 2 for a way to combine this setting with a bot to make spambot protection that actually works. Still, it would be much better to have it as a role permission as suggested here to eliminate the need for complex bot setups to actually make the setting do anything useful.
1 -
@kefka interesting...I didn't know it did that. I retract my original statement. Also weird that yours is table flip but mine just says high
1 -
Kefka Just so you know, discord normalized the moderation setting names a while ago, or at least they did on desktop, I'm not sure why it's still like that on mobile.
(also, unrelated but i wish we had more control over this, such as `must be registered for [input box] minutes`)
1 -
Please add this. I teach at a small high school, and we would love to use discord for distance learning. However, we need to have more control over students sending each other DMs, and student/teacher DMs - having the ability to disable DM's in the server, or make it role-specific, would be ideal. Has this been implemented in any way?
4 -
My question is also similar to this, I want to integrate discord server to my Best Beginner welding helmet website. Can any one please how to integrate this discord server to my website. Is there any official guide or post from where I can get information?
Thanks,
-2 -
Bumping this.
0 -
Having this feature would be neat. We have a server with +20k members, and thus its becoming a target for bots. Being able to prevent users to send DMs to each other without being friends, unless they opt-in, would resolve the problem of bot DM attacks.
1 -
Bump.
The permission should disable private messages except to/from admins on the server.
We are constantly getting hit by these spam bots now. People click on them and they lose their account. Banning 50+ bots every day is a waste of time and doesn't seem to do anything.
This also causes legit users to mass pm admins asking if its a scam or not.
1 -
On a server with more than 100,000 users, 3,000 spam accounts per day send DM spam attacks and leave the server.
Even if you check the log with the bot and block all 3,000 spam accounts, the next day, another 3,000 spam accounts enter the server and repeat DM spam attacks.
Only blocked accounts reach 10,000.
Users leave the server swearing or protesting against the server.Discord can create spam accounts so easily, and even if you keep blocking them, they keep coming in like zombies.
The server verification level is high and the welcome screen is also active.
It would be nice to have a captcha on the welcome screen.I don't know why this is delayed for 3 years.
Even if I send a spam inquiry to the Discord customer center, there is no response.4 -
I don't know why this is delayed for 3 years.
I went around to some large discords, and they said they just use phone verification to stop spammers.
It seems to work but its a very harsh tactic and prevents you from giving people roles or else it won't work.
It would honestly be a simple solution to block users except admins from pming anyone on the server.
1 -
I Agree it.
0 -
Three years later, still nothing that would help...
1 -
Just wanted to bump this, we turned on phone verification in our discord, and somehow a bot with no roles was able to spam our members which means it either had a phone number of the phone verification system was broken.
1 -
This has been an issue for multiple years. Discord clearly isnt going to add this feature. You can successfully block bots by using a captcha system. I use the bot YAGPDB, but Im sure that there are others out there too. For a more detailed description for how to set up a WORKING way to block spambots (including DM spambots), check my long post on page 2 of the comments. Phone verification wont stop anything. Relatively easy to get a temp, disposable phone number.
0 -
bottiger Do you by any chance have a bot that gives users roles? Having any role will bypass discord's verification system.
0 -
Phone verification wont stop anything. Relatively easy to get a temp, disposable phone number.
I'm confused, I read your post and it says to use phone verification with a captcha, but you can see from my screenshot the bot didn't even verify themselves, so having a captcha wouldn't have done anything.
0 -
bottiger Do you by any chance have a bot that gives users roles? Having any role will bypass discord's verification system.
Yes, my skialbot gives a role to anyone that clicks a reaction message, but as you can see from the audit log screenshot, the spam bot was kicked in 2 minutes because it didn't verify itself, thus it didn't have a role, but was still able to pm members.
That means the bot had a phone number or the phone verification system is broken.
0 -
Our use case is not about bots and spam.
Our youth protection rules require that we limit person-to-person messages. Our servers are already invitation only, but we cannot ensure that every person makes this configuration choice.
This one missing feature means Discord is just not a good choice for us. It is the only blocker.
1 -
Well, I use high moderation setting, not highest. Phone verification chases new people away a lot of the time. Do people get a role when they join by chance? Having a role will bypass any moderation setting. Also, what kind of verification are you using?
0 -
bottiger Makes sense, I have seen a few servers that add a role to a user as soon as they join, but before they verify - which kinda defeats the purpose, so I had to be sure.
0 -
Well, I use high moderation setting, not highest. Phone verification chases new people away a lot of the time. Do people get a role when they join by chance? Having a role will bypass any moderation setting. Also, what kind of verification are you using?
I've explained this multiple times already. No people don't get a role when they join.
We are using a simple reaction role verification, and the spam bot didn't even click the reaction role.
0 -
This is the entire audit log for our server during the time we were spammed. If any of our bots gave the spambot rival#0540 a role, it would have showed up here. As you can see our bot gave dzou24 a role.
0 -
Buddy, I only hit refresh so fast. I didnt see those messages. Relax. There is very likely something wrong with your setup. As I said 2 posts ago, its not that hard for spammers to bypass phone verification. If they can do ONLY that, but not verify, and be allowed to DM people, then the verification is doing nothing. They shouldnt be allowed to do anything at all until they verify, and I suggest using a captcha because its not an easy thing to automate, unlike clicking a reaction.
0 -
Kefka
There is nothing wrong with my setup as I've just proven with my screenshots. And again the captcha would do nothing because these bots have a valid phone number and can pm people without even bothering with the captcha.
All you would accomplish with a captcha is piss off real users, so its not a solution.
0 -
I just went and looked at the settings. Set moderation to high, not higest. Phone verification drops the 10 min restriction, which breaks the whole thing. So there *was* something wrong with your setup.
0 -
I just went and looked at the settings. Set moderation to high, not higest. Phone verification drops the 10 min restriction, which breaks the whole thing. So there *was* something wrong with your setup.
According to discord itself, the verification levels stack.
https://support.discord.com/hc/en-us/articles/216679607-What-are-Verification-Levels-
In addition to everything above (verified email, registered user for 5+ minutes, and server member for 10+ minutes) they will also need to have a verified phone number attached to their Discord account.
0 -
> According to discord itself, the verification levels stack.
Then their documentation is wrong.
I speak from experience when I say you don't need to wait 10m when you join a server with that moderation level if you have a phone verified.
1 -
Does the @everyone role have any permissions or channel permissions? I dont know what to tell you man. I went from having hundreds of spambots a day to literally 0. Maybe theres an issue with that moderation setting. They should not be able to initiate a new DM until either they have a role, or 10 min has passed, which is impossible if you kicked it after 2 min. Youre the one that said the bot having a valid phone number could have been how it was able to spam. If discord says that highest moderation also waits the 10 min, then a phone number alone would not be enough to be able to initiate a new DM by their own rules. All I can say for sure is that its working like a charm on my server.
-1
Please sign in to leave a comment.
Comments
138 comments