Re: Attempts to POST to web server mail 'cgi's

[John Myers <psumba@xxxxxxxxx>]

Any suggestions on how to combat this?  

We can't ban POST transactions because our site has a lot of CGI
scripts (none of them mail-related).  I guess that we could ban
specific POST requests at the firewall level.

Anyone have other ideas?

John

On Fri, 16 Jul 2004 12:58:33 -0500, Hall, Philip <phall@xxxxxxxx> wrote:
> >
> > Has anyone else noticed a sudden increase in the number of
> > unsuccessful POST instructions in their web logs lately?  All appear
> > to be attempts to access a web interface of a mail server.
> >
> > Ours have gone up tremendously in the past 5 days.  Here's a sample
> > "attack":
> >
> 
> It's spammers looking for an alternative to an open/relay SMTP server. They, 
> the spammers, use these web based contact forms - usually found in common 
> website template code - as a method to relay spam.
> 
> --phil