I have a job in place on the server now that tests the load every few minutes, and if necessary, adds additional access rules to stop comment-spammers from submitting their junk to the web server.

The results are pretty good: when the job ran at 06:40 GMT, the load average was 76; and one minute after the blocking rules were updated, the load fell to 24. Three minutes later, when I logged in to check, the load had dropped to under 6, on the way down to the normal (under 1).

Not bad!

When I succeeded in logging in -- which isn't always possible during these episodes -- a host in Taiwan was trying to post comments into the system. It made 400 attempts in just a few minutes. I assume it was a spammer's system gone haywire. Since two other hosts from the same ISP have shown the same behavior in the recent past, I've blocked all comments from that ISP. That may help reduce the occurrences of such problem, but I'm sure other spammer-systems at other internet locations will misbehave as wildly. I'll look for some further measures to hold off the effect of such comment-onslaughts.

--RC

If you haven't logged in to the web site, every blog entry page will have this notice at the bottom:

Leave a comment
Sign in to comment on this entry, or comment anonymously.

1. If those two links don't appear, or
2. If clicking the "comment anonymously" link doesn't give you an empty comment form,

flush the browser cache, delete all cookies for the web site mt.stblogs.org, and refresh the page in your browser. (You might find it easier to delete all cookies, if you like.)

3. If you want to authenticate, click the "sign in" link. which takes you to a login form. You can use an OpenID identifier, or a LiveJournal or Typepad username. You can also log in with a username you've created on our Movable Type system, if you have gone through the process of creating one and acting on the confirmation e-mail. (If you created a username but didn't see a confirmation e-mail in response, check your spam folder.)

If the measures above don't resolve your difficulties, try using a different browser (Firefox, Chrome, Opera, Safari).

Recently some commenters on the various weblogs here have reported troubles trying to log in to the Movable Type system with a username they've created.

This usually happens because the person's username never completed the registration process. When someone creates a username, the system sends a confirmation e-mail message immediately to verify that the e-mail address given by the person is valid. If the person doesn't see the message or doesn't click the link in it, the username never becomes "enabled" for posting comments.

In some cases, the confirmation e-mails may be mistaken for spam by a user's e-mail system, so the user may not see them.

The e-mails will have the subject "Movable Type Account Confirmation". Users can search their mail (including the spam folder) for that subject line and find any old confirmations they haven't acted on. Once you do that, your username will be enabled, and you should be able to comment with joy.

Paul has been until recently a prep school teacher; he studied theology at Weston School of Theology (now part of Boston College) and liturgy at Notre Dame. I look forward to the fruits of his contemplations!

Update (July 20): I just want to say how pleased I am with the new version of MT.

There was a sacrifice involved in upgrading, because some of the new features in MT4 -- such as the CAPTCHA number-test for comments -- required scrapping old templates. I tossed all the old templates and styles people were using, since using CAPTCHA is just indispensable. I'm sure that losing the custom work was a not-so-pleasant surprise for the bloggers, but I'm happy to help them save material from the old MT3 installation and use it in their new designs.

The new drag-and-drop interface for "widgets" makes it quite a bit easier to add defined chunks of content to the sidebars of blogs and to rearrange the order in which those units appear. Bobbi of RevolutionofLove.com got to work on her own ahead of me, but I sent out a how-to instruction for everyone else, and have been getting good feedback.

The StyleCatcher plugin optional for MT3 is now standard and makes it easy to apply out-of-the-box designs to a blog, with no rebuilding required. I still have to work through how to customize a style with graphics replacing a plain-text header; then there will be a how-to instruction on that as well.

So, readers, be patient while the visuals of these fine blogs remain under renovation or restoration, and feel free to comment as usual.

I've been improving the anti-spam rules on the stblogs.org web server this week, so if you've been seeing many spam trackbacks and comments on any of the blogs here lately, that nuisance should be noticeably diminished, at least for a while.

Things are busy for me now (school work), but I hope to upgrade the blog software this summer and migrate the blogs -- at least, the active ones -- to an external server (i.e., not here at home). That should make the whole operation a bit more reliable for the bloggers and for readers.

From: "Lee Anderson"
Subject: Stblogs.com - A new home for Catholic writers
To: leeanderson2000@hotmail.com
Dear Friend,

Please accept a special invitation for a sneak peek to a new community for Catholic writers -- Stblogs.com.

StBlogs.com is currently in Beta, and has not yet been launched publicly. We are still working on exciting new features and free services to raise the profile of Catholic writers and cover breaking Catholic news.

But right now we are pleased to offer you and a select group
of others a chance to register yourName.stBlogs.com and claim your space and place in the newest community of Catholic writers on the web.

If your involvement in the blogosphere has been limited so far to lurking or commenting, you will want to open a blog at Stblogs.com immediately.

Isn’t it time you contributed your thoughts, insights or expertise to the Great Catholic Conversation? Stblogs.com gives you the means to do so...quickly, easily and at no charge.

But what if you already own a blog? That's ok. Let me share 3 reasons why you will want to start a Stblogs.com blog too.

First, Stblogs.com is a Powerful Domain -- For years Catholic bloggers have affectionately called their community "St. Blog’s." Today St. Blog’s has entered the lexicon, with Google indexing nearly half a million references on the web!

When readers search for Catholic bloggers, chances are good they’ll end up at Stblogs.com. Shouldn’t you be there too?

Second, Stblogs.com offers Powerful Tools -- Don’t take my word for it. Spend a few minutes opening a Stblogs.com blog today, and discover how easy and fun it can be. Choose your own template. Reserve your own Stblogs.com blogname. Publish your thoughts and even upload video effortlessly. Our suite of blogging tools is intuitive yet powerful (and more features are being added daily!)

Best of all, as a member of Stblogs.com, your recent posts and your popular posts may be featured on the Stblogs.com homepage, in addition to our homepage blogroll. This is just one of several free promotional tools Stblogs.com has planned exclusively for our members.

Finally, StBlogs.com is Free -- Blogging at Stblogs.com is easy and free...so what do you have to lose? Find new readers by reserving your Stblogs.com blogname and uploading at least a selection of your writings. You are already an established member of the St Blog’s community. That's all the more reason to become a member of Stblogs.com too!

As a voracious Catholic reader and sometime-writer myself, I’m very excited about the launch of Stblogs.com. I’m looking forward to helping cultivate one of the most intellectually stimulating and invigorating Catholic communities on the web.

I'm writing especially to you today because I believe your particpation will help make StBlogs.com all the more invigorating and vibrant. I hope you’ll join us there!

Sincerely,
Lee Anderson

P.S. Opening your free Stblogs.com blog, can be done with a few simple keystrokes by going here http://stblogs.com/wp-signup.php/ And if you have any questions, comments, concerns (or words of encouragement!) you’d like to share with me directly, please respond to this email or write to me at leeanderson2000@yahoo.com

It appears to be an effort by book publisher Rick Rotondi. I wish him all the best in his work, but there does seem to be a strong possibility of confusion between stblogs.org -- a non-profit group domain for Catholic blogs, active since June 2003 -- and his stblogs.com -- a new project that runs ads and looks like a commercial venture -- so I'd have preferred he choose some other domain name. Pff.

If you get a "410" error on a comment, drop me a note, and please include the text of your attempted comment. Also, if you can provide your IP address and the time of your attempt, it'll help me find information in the server's error log. Once I find which pattern is triggering the error message, I can fine-tune the pattern rule to avoid this "false positive".

For somebody as attached to job security and money as me, this is quite a move, but I expect that I'll be able to do all right with some short-term work and some income from my savings. That on-call status means the company can call me if there's some particular need during the transition, but I don't expect it to be an ongoing thing.

So it's time for me to get in some travel, some housecleaning, maybe some school or some training, some back-to-the-basics spiritual renewal, and some exercise (e.g., walking the mile to the parish for daily Mass: thank Heavens they have one at 11:30!)

I have to get one of those guide books to "offbeat" attractions. :-)

After a researcher at Indiana University drew attention to a weakness in airport security, Markey (D-MA) didn't thank him for performing a public service, but called for his arrest. Now, this does give Soghoian some extra publicity, which serves his purpose, but really it's not a good idea for public officials to give out such a message as Markey (D-MA) is giving: that public ignorance about security weaknesses should be maintained. The public is more likely to approve security improvements and their costs if they know that the changes really are needed.

Update: As the folks at BoingBoing report, the congressman (D-MA) has seen the error of his ways, after getting complaints from tech-industry constituents like myself.