The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

/cgi/addon_csf.cgi and the formmail log

Discussion in 'E-mail Discussions' started by AndyB78, Feb 7, 2009.

  1. AndyB78

    AndyB78 Active Member

    Joined:
    Oct 7, 2003
    Messages:
    35
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Romania
    Hello,

    I have a spammer situation on a server and PSM installed a formmail logger. However most entries have some connection to a "/cgi/addon_csf.cgi". There is an addon_csf.cgi in /usr but why would this appear so frequently in the formmail log?

    I have searched the entire /home folder plus the /tmp for this (for the case when this was the spamming script) but there is none...

    Regards!
     
  2. rhenderson

    rhenderson Well-Known Member

    Joined:
    Apr 21, 2005
    Messages:
    785
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Oklahoma
    cPanel Access Level:
    Root Administrator
    Check in /usr/local/cpanel/whostmgr/docroot/cgi/ it is part of CSF firewall.
     
  3. AndyB78

    AndyB78 Active Member

    Joined:
    Oct 7, 2003
    Messages:
    35
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Romania
    Yes, I know but why would it appear in my formmail.log like it sent mail?!
     
  4. rhenderson

    rhenderson Well-Known Member

    Joined:
    Apr 21, 2005
    Messages:
    785
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Oklahoma
    cPanel Access Level:
    Root Administrator
    You might ask over at configserver.com forums. I would assume it is a check CSF is making to be able to notify you if some kind of spam script is running.
     

Share This Page