RE: [cobalt-users] [OT] [RAQ4] Formmail 1.9

["Andy Brown" <andy.brown@xxxxxxxxxxxxx>]

<snip>
> l:/2000:http:/ HTTP/1.1" 200 2489 "-" "Microsoft URL Control - 
> 6.00.8862"
> Im *still* seeing the spammer.. does anyone have any suggestions on
> how to close this hole?
</snip>

Are you *sure* that the spammer is still succeeding, it may just be the requests still being made.
Have a look at the http request, so for the one above, the last bit is of interest:

>> :/2000:http:/ HTTP/1.1" 200 2489 "-" "Microsoft URL Control - 6.00.8862"

Look and see if the 200 has changed to a 404 (page not found)

Or, also check your mail queue and mail log files
mailq
and
tail /var/log/maillog

it may be that there are quite a few emails still in your queue waiting to strike!

Regards,

Andy
andy@xxxxxxxxxxxxxxx
http://www.raqpak.com/ <-- Raq/Qube unofficial PKGs and support advice 
http://www.linuxnetworking.co.uk