Re: formmail.pl

2003-02-03 Thread David Hardne
Mike Barushok wrote on Feb 03, 2003 at 01:03:32 AM: > > Correction on my earlier reply, to find the location of all the > formmail files, use: > find /home/ -name formmail* > Better yet, use: find /home -iname "form*ail*" I regulary see files named Formmail, FormMail and formail etc.. -ina

Re: formmail.pl

2003-02-03 Thread David Hardne
Mike Barushok wrote on Feb 03, 2003 at 01:03:32 AM: > > Correction on my earlier reply, to find the location of all the > formmail files, use: > find /home/ -name formmail* > Better yet, use: find /home -iname "form*ail*" I regulary see files named Formmail, FormMail and formail etc.. -ina

RE: formmail.pl

2003-02-03 Thread Jean-Marc V. Liotier
On Mon, 2003-02-03 at 07:56, Patrick Bucher wrote: > > There is a security-bug in the formmail.pl-script from matt wright. You > can use this script as an kind of "smtp-relay-server". I've found an > secure one located at ftp://ftp.monkeys.com/pub/formmail/ . No need to go that far : there formmai

Re: formmail.pl

2003-02-03 Thread Mike Barushok
Correction on my earlier reply, to find the location of all the formmail files, use: find /home/ -name formmail* (If all your sites are under /home/ ) On Mon, 3 Feb 2003, Stefaan Teerlinck wrote: > Hi, > > I have a server with a lot of name-based virtual hosts. On one of those > sites the fo

RE: formmail.pl

2003-02-03 Thread Patrick Bucher
Hi Stefaan, > I have a server with a lot of name-based virtual hosts. On > one of those sites the formmail.pl script is being abused, > a client is using an unsecure script. How can I find out > on what site this is? There is a security-bug in the formmail.pl-script from matt wright. You can us

Re: formmail.pl

2003-02-03 Thread Mike Barushok
something along the lines of: grep -r "formmail.pl" /var/log/apache/access/*.log | less will show the attempts on all the [domain_name].log files if they are in /var/log/apache/access/ grep -r "formmail.pl" /var/log/apache/access/*.log | grep -v 40 | less will filter out those that are 40X

RE: formmail.pl

2003-02-02 Thread Jean-Marc V. Liotier
On Mon, 2003-02-03 at 07:56, Patrick Bucher wrote: > > There is a security-bug in the formmail.pl-script from matt wright. You > can use this script as an kind of "smtp-relay-server". I've found an > secure one located at ftp://ftp.monkeys.com/pub/formmail/ . No need to go that far : there formmai

Re: formmail.pl

2003-02-02 Thread Mike Barushok
Correction on my earlier reply, to find the location of all the formmail files, use: find /home/ -name formmail* (If all your sites are under /home/ ) On Mon, 3 Feb 2003, Stefaan Teerlinck wrote: > Hi, > > I have a server with a lot of name-based virtual hosts. On one of those > sites the fo

RE: formmail.pl

2003-02-02 Thread Patrick Bucher
Hi Stefaan, > I have a server with a lot of name-based virtual hosts. On > one of those sites the formmail.pl script is being abused, > a client is using an unsecure script. How can I find out > on what site this is? There is a security-bug in the formmail.pl-script from matt wright. You can us

Re: formmail.pl

2003-02-02 Thread Mike Barushok
something along the lines of: grep -r "formmail.pl" /var/log/apache/access/*.log | less will show the attempts on all the [domain_name].log files if they are in /var/log/apache/access/ grep -r "formmail.pl" /var/log/apache/access/*.log | grep -v 40 | less will filter out those that are 40X