IntakeShield – community package for spam sign-ups and spam tickets (Zammad 7.x)

Lobby
1

Hi all, wanted to share a package I’ve been building for my own on-prem Zammad instance: IntakeShield.

It tackles two recurring headaches — fake sign-ups and spam tickets — with whitelist/blacklist handling, an optional signup allow list, optional inbound drop for blacklisted domains, and scoring based on keywords, disposable domains, and gateway spam-engine headers (Rspamd/SpamAssassin/MS SCL). Cleanup runs with a configurable delay through Zammad’s own Data Privacy pipeline, so nothing gets deleted blindly, and there’s an optional self-hosted ALTCHA for the registration form too.

Happy to hear feedback, bug reports, or feature ideas if anyone gives it a try!

2

I’m also interested in this approach, especially the separation between scoring and the delayed Data Privacy cleanup. The combination of domain lists, disposable-domain checks, and existing gateway headers looks practical for keeping false positives manageable on an on-premise setup.

3

@Jessie.Turner64 why do all your responses to threads sound so much like bot and microwave activity?