We started seeing spam a few weeks ago, and should find a proper solution if manual deletion doesn't scale. Right now (since Dec 3) self-registration is disabled.
#1 Updated by Beluga Beluga 5 months ago
Did we have a recaptcha plugin for reg yet? https://github.com/cdwertmann/recaptcha I checked the issues and it is reported to work with Redmine 3.4.
Sadly Redmine is lagging way behind in spam blocking. There are no blacklist solutions.
#2 Updated by Florian Effenberger about 2 months ago
With Redmine switching to SSO, is this ticket still relevant, or will we handle things at the auth portal page level?