[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] WARN - handler "cgi-wrapper" not found for ...



On Mon, 28 Jan 2002, Jeff Lasman wrote:

> flash22@xxxxxxx wrote:
>
> > > upgraded the FormMail to version 1.9 due to hackers) .
> >
> > About time, that exploit is only a year and a half old ;P
>
> There's a new one... 1.9s...

Gee...so new it's not on Matt's site...or is it my tired old eyes?

There is one other very simple thing one can/should do with the
formmail script....most of the spammers look for/expect to see
formmail.*

I installed Apache Guardian to find my own dumb broken links...and
it tells me on a regular basis about folks attempting to access
formmail.pl

So, even tho I've installed version 1.9, I still smile a bit, since the
script is NEVER named formmail.pl or anything close to it on the server.

I suppose one could write a script that tells the spammer to buzz off, or
some other pleasentry...and have that one named formmail.pl (g)

thom

baltimoremd@xxxxxxxxxxxxxxx             Thom LaCosta K3HRN Webmaster
               http://www.baltimoremd.com/cobaltfacts/
Home of the CobaltFacts Web Ring - cobalt-ot and hosting-biz mailing lists