The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

mod_security blocking formmail... and formmail SPAM

Discussion in 'Security' started by wilfried, Jun 8, 2006.

  1. wilfried

    wilfried Active Member

    Joined:
    Aug 23, 2003
    Messages:
    33
    Likes Received:
    0
    Trophy Points:
    6
    Hello
    I got a problem with the formmail. I keep getting these SPAM emailed to me via formmail:
    Code:
    name: Jennifer
    
    phone: 164482114
    
    subject-0: Jennifer
    
    body: Hello. See that i found yesterday:
    
    <h1><strong>     <a href=http://crutop.mpage.jp/xanaxaddiction.htm>xanax addiction </a>       [url=http://crutop.mpage.jp/xanaxaddiction.htm]XANAX ADDICTION[/url]  </strong></h1>
    
    Best Regards, Jennifer
    [url]http://crutop.mpage.jp/xanaxaddiction.htm[/url]
    I assume I am the only one getting them since formmail won't send to outside domains.

    I had the jitp.conf for mod_sec but that just blocked ALL request to formmail, even legit one.
    Spam.conf did not help either and slow down the server to a crawl.

    Any suggestions besides not using formmail?

    Thanks.
    W.B
     
  2. ramprage

    ramprage Well-Known Member

    Joined:
    Jul 21, 2002
    Messages:
    667
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Canada
    I can find the source fo the spammer and setup rules to prevent this from happening again, just contact me.
     
  3. wilfried

    wilfried Active Member

    Joined:
    Aug 23, 2003
    Messages:
    33
    Likes Received:
    0
    Trophy Points:
    6
    Well I know the source already. It's a form that use formmail. I know the IP too but that's useless as it changes every other hour...
    I've also checked and no other emails are sent. No BCC etc...

    Anyway just to clarify... you offering me this as a paying service?
     
Loading...

Share This Page