MailScanner and FormMail Exploits
Rick G
rgutlon at YAHOO.COM
Sat Dec 13 17:13:00 GMT 2003
I've noticed in our maillog that when web-based email forms are submitted
they do not pass through MailScanner.
I bring this up as a site I host recently had a spammer exploit (what was
reported to be) a hack-proof perl based FormMail script. I became aware of
this when the bounces and rejections started to arrive in the postmaster
mailbox. In looking at the content of the spam message, it would have been
caught as spam had it been intercepted by MailScanner.
Is there a way to configure MailScanner and/or any of the rulesets so that
submitted web-based forms run through the typical MailScanner checks?
Rick
More information about the MailScanner
mailing list