Re: [cobalt-users] [OT] Email spam

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

Joseph R Brennskag wrote:

> The FormMail exploit happened to us last week.  A review of the [raq3]
> /var/log/maillog shows the excessive activity.  A review of
> /home/log/httpd/access will reveal if the formail exploit is being used.
> Also check out the messages sitting in /home/spool/mail/mqueue yet to be
> delivered.  We had thousands of spam messages sitting in there.

You might want to consider the secure version of FormMail you can get
via anonymous ftp from ftp.nobaloney.net.  Aside from being decidedly
spammer unfriendly, it emails you if anyone tries to exploit it.

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
Linux and Cobalt/Sun/RaQ Consulting
nobaloney.net, P. O. Box 52672, Riverside, CA  92517
voice: +1 909 778-9980  *  fax: +1 909 548-9484