[plug] nasty spammer

Leon Brooks leon at brooks.fdns.net
Wed Mar 27 22:14:30 WST 2002


On Wednesday 27 March 2002 15:17, Ben Jensz wrote:
> I've received some more reports from spamcop.net today about more
> apparently coming from our mail server.  I've investigated Postfix's logs
> after having received the message headers in the email report, and it
> appears that there is nothing in the logs at all to match up with those
> message headers at all.

Check your webserver logs for references to /cgi-bin/formmail.pl - the 
security of which sucks like a lamprey on caffeine.

Cheers; Leon



More information about the plug mailing list