Lisa, This one is old news. Check these out:
http://groups.google.com/groups?q=formmail+spam&hl=en http://www.google.com/search?q=formmail+spam You can use this site to see what has already been discussed on these newsgroups: http://online.securityfocus.com/search Search for formmail Regards, David > -----Original Message----- > From: Lisa Bogar [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, February 20, 2002 6:09 PM > To: [EMAIL PROTECTED] > Subject: Webserver relaying mail > > > > Someone on campus called me yesterday inquiring about how to > stop relaying > through sendmail. He thought he had configured his sendmail.cf to not > allow relaying, but then got notified he was relaying mail. > Today after > some searching he found some information about FormMail.pl > where it can be > used to cause your webserver to relay mail. He found his > information from > www.8wire.com. Is anyone else familar with this and have you > encountered > it? The logs show attacks targeted at the cgi-bin that sent > out tons of > porno spam. > > Just trying to find out more information and I am surprised if it is > indeed happening why I haven't seen anything on CERT or bugtraq. >
