Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

/cgi/addon_csf.cgi and the formmail log

Discussion in 'E-mail Discussion' started by AndyB78, Feb 7, 2009.

  1. AndyB78

    AndyB78 Well-Known Member

    Joined:
    Oct 7, 2003
    Messages:
    45
    Likes Received:
    0
    Trophy Points:
    156
    Location:
    Romania
    Hello,

    I have a spammer situation on a server and PSM installed a formmail logger. However most entries have some connection to a "/cgi/addon_csf.cgi". There is an addon_csf.cgi in /usr but why would this appear so frequently in the formmail log?

    I have searched the entire /home folder plus the /tmp for this (for the case when this was the spamming script) but there is none...

    Regards!
     
  2. rhenderson

    rhenderson Well-Known Member

    Joined:
    Apr 21, 2005
    Messages:
    785
    Likes Received:
    1
    Trophy Points:
    166
    Location:
    Oklahoma
    cPanel Access Level:
    Root Administrator
    Check in /usr/local/cpanel/whostmgr/docroot/cgi/ it is part of CSF firewall.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. AndyB78

    AndyB78 Well-Known Member

    Joined:
    Oct 7, 2003
    Messages:
    45
    Likes Received:
    0
    Trophy Points:
    156
    Location:
    Romania
    Yes, I know but why would it appear in my formmail.log like it sent mail?!
     
  4. rhenderson

    rhenderson Well-Known Member

    Joined:
    Apr 21, 2005
    Messages:
    785
    Likes Received:
    1
    Trophy Points:
    166
    Location:
    Oklahoma
    cPanel Access Level:
    Root Administrator
    You might ask over at configserver.com forums. I would assume it is a check CSF is making to be able to notify you if some kind of spam script is running.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice