sendmessage.php spam

If you have a popular vBulletin forum, you’ll find this thread on stopping sendmessage.php spam useful. I’d looked for it before, but somehow I missed the exact setting.