Add spam filter tool

[lukefretwell]

Source

LF / Pocono

Is your feature request related to a problem? Please describe.

Some governments are getting spam via forms despite CAPTCHA being enabled. We should think of a way to better filter these.

Describe the solution you'd like

Nothing specific.

Describe alternatives you've considered

See @curtismchale suggestions below.

Additional context

• https://wordpress.org/plugins/gf-block-ips/
• https://www.gravityforms.com/add-ons/block-ips/
• https://gravitywiz.com/documentation/gravity-forms-limit-submissions

[curtismchale]

Much of the spam seems to have Cryllic language in it. I know from talking to other major site operators that they blocked some countries from being able to submit forms and almost all of their spam problem went away. We shouldn't see form submissions outside of the US so if we silently failed a form submission from outside the US that may stop the spam.

When a form submission came from an IP outside the US we'd make it appear like we'd taken the data, but simply throw it away in the backend without alerting anyone. The plugins listed above at least provide a basis for code we may want to use, if they don't provide the exact functionality we need.

May be able to use the MaxMind geolite API: https://dev.maxmind.com/geoip/docs/databases?lang=en#official-api-clients

[curtismchale]

I've got this working now, but Kubernetes is not passing the actual IP via Gravity Forms. We get bogon addresses that are internal to k8s instead of the actual IP of the user.

[curtismchale]

Currently waiting on @jlyon to check out the Ingress controller and server headers so we can pass the proper IP address back to the forms as they're submitted.