dissallow usage of all cgi-sys scripts

[eter4]

I have a customer that is being attacked. What the people are doing is trying to spam using the cgi-sys formmail in his hosting server.

Is there a way to remove these scripts from the users directory or the server alltogether??

Thanks

JD

[DJ_Max]

Originally posted by eter4
I have a customer that is being attacked. What the people are doing is trying to spam using the cgi-sys formmail in his hosting server.

Is there a way to remove these scripts from the users directory or the server alltogether??

Thanks

JD

You can remove this from the Reseller WHM control panel.
Packages >>Feature Manager


Then on the packages creation/edit page there's an checkbox for "Email Scripts (cgiemail,formmail)"
uncheck that.

[eter4]

Will this just remove the link from CPANEl or actually remove the scripts from the server?

[DJ_Max]

Originally posted by eter4
Will this just remove the link from CPANEl or actually remove the scripts from the server?

I'm not for sure.
I'll try it.

[Jabberwocky]

I've just actually done this... and it's pretty simple.

Find your apache config (usually /etc/httpd/conf/httpd.conf

and open it up in an editor on your shell (I reccomend pico/nano)

Find the line that says

ScriptAlias /cgi-sys/ /usr/local/cpanel/cgi-sys/

and change it to

# ScriptAlias /cgi-sys/ /usr/local/cpanel/cgi-sys/

Now use WHM to restart Apache and voila! no more