malformed recipient address

ellijay

Active Member
Dec 3, 2002
38
0
156
Hello. We started getting these messages the other day. I've checked, and formmail isn't installed on that domain (or any domain on the server).

Is this an attempt at spamming by someone ot there? What log files should I check?


-----Original Message-----
From: Mail Delivery System [mailto:[email protected]]
Sent: Thursday, May 22, 2003 1:13 AM
To: [email protected]

A message that you sent contained one or more recipient addresses that were incorrectly constructed:

[email protected]: domain missing or malformed

This address has been ignored. There were no other addresses in your message, and so no attempt at delivery was possible.

------ This is a copy of your message, including all the headers. ------

Received: from databroo by webhost.databrook.net with local (Exim 3.36 #1)
id 19IiNz-0007N8-00; Thu, 22 May 2003 01:13:03 -0400
To: [email protected]
From: [email protected]
Subject: 14907!#~ http://DATABROOK.net/cgi-sys/formmail.plbcc:[email protected]: multipart/mixed; boundary=----------E012B13923CE406Chttp://DATABROOK.net/cgi-sys/formmail.pl.
Message-Id: <[email protected]>
Date: Thu, 22 May 2003 01:13:03 -0400
WHM 6.4.2
Cpanel 6.4.2-R16
RedHat 2.1
 
Last edited:

Tom Pyles

Well-Known Member
Apr 26, 2002
254
0
316
I tend to see this with users running some sort of script, such as a message board. The user puts their address in incorrectly, but instead of the bounce going to the webmaster, it comes back to us...

cPanel.net Support Ticket Number:
 

Curious Too

Well-Known Member
Aug 31, 2001
432
1
318
cPanel Access Level
Root Administrator
Originally posted by ellijay
Hello. We started getting these messages the other day. I've checked, and formmail isn't installed on that domain (or any domain on the server).

Is this an attempt at spamming by someone ot there? What log files should I check?




WHM 6.4.2
Cpanel 6.4.2-R16
RedHat 2.1
This is someone trying to exploit the formmail scripts in /usr/local/cpanel/cgi-sys

cPanel.net Support Ticket Number: