[lug] Re: Email spam

[Peter Hutnick]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thursday 25 April 2002 09:34 am, Justin wrote:
> The userid 80 is for my webserver, apache. I don't have any cgi that
> sends mail, the only cgi scripts I have are Neomail for my webmail.

I think that CGI based webmail would count as a CGI that sends mail . . .

I think that either someone with a Jackmoves Neomail account is sending the 
SPAM, or someone has figured out how to get the neomail.pl CGI to send 
messages without having to log in.  (This wouldn't be surprising.)

BTW, I would seriously consider switching to a webmail that isn't abandoned.  
Who is keeping up with security issues for Neomail?

- -Peter

- -- 
/"\ ASCII Ribbon campaign against HTML e-mail
\ /
 X   Get my PGP key at http://hutnick.com/pgp
/ \  6128 5651 6F23 EC17 6EBD  737D 960A 20E6 76CA 8A59
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8yYnNlgog5nbKilkRAiiqAJsFtdOGARI7+gFOJydTRnSTApMicACfZkBd
R4DQvddS7hu9BFIgfnHRLws=
=jtAc
-----END PGP SIGNATURE-----