Re: [cobalt-users] [OT] [RAQ4] Formmail 1.9

["alan@" <alan@xxxxxxxxx>]

----- Original Message -----
From: "Andy Brown" Sent: Tuesday, June 25, 2002 4:47 AM
Subject: RE: [cobalt-users] [OT] [RAQ4] Formmail 1.9


> <snip>
> > l:/2000:http:/ HTTP/1.1" 200 2489 "-" "Microsoft URL Control -
> > 6.00.8862"
> > Im *still* seeing the spammer.. does anyone have any suggestions on
> > how to close this hole?
> </snip>
>
> Are you *sure* that the spammer is still succeeding, it may just be the
requests still being made.
> Have a look at the http request, so for the one above, the last bit is of
interest:
>
> >> :/2000:http:/ HTTP/1.1" 200 2489 "-" "Microsoft URL Control -
6.00.8862"
>
> Look and see if the 200 has changed to a 404 (page not found)
>
> Or, also check your mail queue and mail log files
> mailq
> and
> tail /var/log/maillog
>

You could also try hard coding the destination address into the script
itself. Then they can only spam you which is a bit pointless really.

ALan