sb ch wrote: > Hello all. > > I have used spamassassin well. > But I have some problem, about spam mail. > > Some spammer have been sending lots of spam mails through > /usr/sbin/sendmail via web interface(form mail cgi) from my server. > Surely, I can't delete form mail cgi for some reason. > > I know that Spamassassin acts against incoming spam mails, But is it > possible that acts against outgoing spam mails with spamassassin or > other system? > > Thanks in advance.
Hi, Remove FormMail.pl and replace it with a secure version or another script. As another poster noted there might be a secure version available (although all versions I have seen to date are exploitable). It may hurt to have 50 or 500 websites update to replace the hole but it is worth it. Regards, Rick
