[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [cobalt-users] formmail.pl



> -----Original Message-----
> From: cobalt-users-admin@xxxxxxxxxxxxxxx
> [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of David Lucas
> Sent: Tuesday, April 16, 2002 10:20 AM
> To: cobalt-users@xxxxxxxxxxxxxxx
> Subject: [cobalt-users] formmail.pl
>
>
> Does this log file entry mean someone used my formmail.pl or attempted to
> use it?
>
> 66.19.187.34 - - [12/Apr/2002:11:08:03 -0500] "GET
> /cgi-bin/formmail.pl?recipient=piezzaha@xxxxxxx&subject=http://www
> .yetiservices.com/cgi-bin/formmail.pl&email=mumu7@xxxxxxxx&=http:/
/www.yetiservices.com/cgi-bin/formmail.pl
> HTTP/1.1" 404 657 "-" "Microsoft URL Control - 6.00.8862"

I have seen this before, I would say yes, someone did, or at least tried to
use your formmail, most probably to send spam.

I would suggest making sure that your formmail is the most recent version,
that or rename formmail.pl to somethingelse.pl and then edit any pages that
use formmail to reflect the new name. That's what I had to do before the new
version of formmail come out.

Bob G.