Re: [cobalt-users] Dodgy formmail.pl?

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

Joe Quinn wrote:

> Just having a look around the various sites on the server after seeing a
> posting about formmail and found this one that looks a bit dodgy as there
> isn't a referrer field. Could anyone please comment, should I disable this?
> What about chmod 777 to one of the files?

There's a safe copy of FormMail.pl available via anonymous ftp at
ftp.nobaloney.net.  It's never been breached though many try every day. 
It reports tries so you can block the bad guys if you want.

It even manages to block trials designed to fool it, for example:

To: you@xxxxxxxxxxxxxx <badguy@xxxxxxxxxxxxxxxxxx>

Gets blocked.

There are some "fixes" out there that will let the above through, but
this one won't.

It does require that the webmasters make a small change to their html.

It works well.

Jeff
-- 
Jeff Lasman, nobaloney.net, P. O. Box 52672, Riverside, CA  92517 US
Internet & Unix/Linux/Sun/Cobalt Consulting +1 909 778-9980
Our jblists address used on lists is for list email only
To contact us offlist: "http://www.nobaloney.net/contactus.html";