[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] [RAQ 4] [Neomail] [open relay]



On Thu, 16 May 2002 10:33:53 -0500, Jay Summers wrote:
>>> Maybe FormMail ?
>>
>> wouldnt i have to have root privalages to open up the relay?
>> .pkgs are the only thing i have installed as admin/root
>
>No. I think Gerald was suggesting one of your customers might be
>using Matt
>Wrights FormMail script which is very easy to exploit and send tons
>of spam
>through. Shell into your box and do a locate FormMail. Also, try
>digging
>around the Apache logs for signs of FormMail.
>
>HTH,
>j

arha.. locate FormMail does produce 2 finds.
perhaps this is the culprit?

-- 
Sean Chester, sean.chester@xxxxxxxxxxxxxx on 16/05/2002