Re: [cobalt-users] Spammer sending from httpd on our RaQ3

[Lillith Lesanges <lillith@xxxxxxxxxx>]

On Wednesday, December 12, 2001, at 10:37 AM, Scott w wrote:
> <paul said>
> Someone is sending spam via one of our RaQs, they've apparently found a
> way to send mail as if it were coming from the http daemon.  Not sure
> just how to disable this, particularly in a way that the GUI won't
> re-enable next time we add an email account.  Any ideas?
> </paul said>
>
> Do you or any of your users have Matt's Formmail script running?  There 
> is an exploit with older versions.  You should upgrade any old versions 
> as soon as possible...

Or just not use stuff from Matt's Script Archive, since they aren't 
exactly the best or most secure scripts out there.

For drop-in replacements which are more secure, check out the NMS 
project at Sourceforge (http://nms-cgi.sourceforge.net/).  These free, 
drop-in replacements are written by a team of folks who are well-known 
and active in Perl communities, such as Perlmonks 
(http://www.perlmonks.org/), and are dedicated to increasing the level 
of security out there in the Web.

Lillith K. Lesanges
(amelinda on Perlmonks)
Sysadmin/Programmer, MIS, Inc.				http://www.misinc.net/