Bottle vs Mail Queues by PBCI

Bottle is a bot throttling plugin. It consists of a set of tools that can be used to reduce server load when excessive bot requests are made to a website. It works by performing a variety of checks on each HTTP request made to WordPress, and throttling sessions or IPs when thresholds are exceeded. These include: Too many sessions per IP. Since some bots don’t bother with cookies, Bottle sets a JWT session cookie for each request. If a single IP address creates too many new sessions within a given timeframe, it is likely a bot, and will be throttled. Too many requests per session. Bottle calculates a request rate for each session. Bots that exceed that rate will be throttled. Too many requests per IP. Bottle calculates a request rate per IP. For bots that don’t process cookies (and therefore sessions), this can throttle abusive IPs. Too many requests per bot. Bottle calculates a request rate per bot (based on user agent reported). Since malicious bots forge user agents, this should be combined with other throttling mechanisms. Bot verification check. Bottle checks bots such as Google, Bing, Meta, etc. against authoritative lists of IP addresses, when possible. Bottle allows for a higher verified bot rate than non-verified rate with the idea that verified bots are likely better behaved. Overall request rate. Bottle can throttle specific sections of a website that are being abused by bots. (For instance, the courses catalog.) This is useful when a large website is being scraped by a bot network with rotating IPs. Excessive 404s. If bots are scanning a website, or are misconfigured, excessive 404s can be time-consuming for WordPress to process. Bottle can either throttle all 404 requests, or can block 404s for static files (i.e. images) only. Exclusions. Bottle can exclude certain URLs, IP addresses, or infrastructure (such as Stripe and Pingdom) from processing to prevent false positives. When a client is throttled, Bottle can outright throttle it with a 429 response, or can serve a JavaScript-based cryptographic puzzle. If a client is legitimate, it will automatically compute the puzzle’s solution and submit it to the server for verification. (No user input is required.) After it has proven its human-ness, Bottle will permit that user entry to the site. At the moment, some bots, but not all, will solve these puzzles. When a throttle condition is reached, Bottle terminates WordPress processing, which substantially reduces server load when under attack. Throttles end automatically at the end of their respective measurement windows. Bottle is not a firewall and will not block or sanitize malicious attacks. However, since such attacks are typically performed in large quantities, Bottle can be effective at slowing such attacks and reducing server load, keeping the website operational for legitimate users. Overall, Bottle is a set of tools designed to reduce server load with minimal disruption to real users.

Send mail using SMTP without exceeding the the rate allowed by your mail provider(s). Mail can be sent using multiple user logins/passwords to give fault tolerance and make each mail message somewhat unique so that it is less likely to be flagged as SPAM/UCE by either your or the downstream mail providers. Messages can be automatically resent when the plugin detects Non-delivery messages (NDRs) returned from mail sent by the plugin. Email can be throttled per outbound SMTP account. Limits can be set for maximum number of recipients per hour and per day. Features Sends mail via SMTP Send mail no faster than the configured number of recipients per hour and day. Keeps you in complience with your providers email sending limits. Configure multiple SMTP accounts to use for sending messages (Gmail, MSN, Go-daddy, etc) Process non-delivery messages and automatically resend messages Keep record of sent mail messages so that you can prove to your provider you didn’t send SPAM Automatically stops sending email when errors encountered, auotmatically restarts after configured period of time Mail sending statistics display Benefits Using multiple email accounts makes it less likely that your email will be incorrectly flagged as SPAM by downstream providers Use in combination with other email newsletter, sending and formatting WordPress plug-ins Reduces non-delivered mail due to invalid SPAM flagging or exceeding near or downstream provider sending/receiving limits More information can be found on our web site. Notes Non-Delivery Processing Non-Delivery (NDR) messaging processing note: plugin should recognize common non-delivery formats. But, because non-deliveries are free form, and can be highly customized or specifically localized the plugin may not recognize the message. If you provide a sample non-delivery message we can make the plug-in a little smarter.