Perhaps I've squashed the spammers at FOB for the moment…
I've upgraded Drupal to the latest released version, 4.6.5, freeing it up from tracking Debian in the process (for better or worse). That permitted me to install the Drupal captcha module, to try to protect against anonymous comment spam.
On the one hand, I'm not so convinced that the captcha module I've installed is secure. On the other hand, the upgrade was kind of complex, and I'm not sure I've got it really right. Further, Drupal 4.7.0 is supposed to be out of beta very soon now, so I'll get to do some of this again at some point.
Between spammers and Drupal, I'm not so sure I shouldn't just give up and move the whole thing to a blog site. The reasons I am sticking with this site are severalfold:
But boy I need to find time to get real work done, and this thing isn't helping.
Thanks much to everyone who has helped out in getting me going again. Also, curses to those who spam. May all spammers fall victim to sophisticated variants of the Nigerian scam.