Re: Attempts to POST to web server mail 'cgi's

["Jim Franz" <franz400@xxxxxxxxxxxx>]

Is your current site doing anything more that pushing it to
an error log?
jim
----- Original Message ----- 
From: "John Myers" <psumba@xxxxxxxxx>
To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
Sent: Friday, July 16, 2004 2:26 PM
Subject: Re: Attempts to POST to web server mail 'cgi's


> Any suggestions on how to combat this?
>
> We can't ban POST transactions because our site has a lot of CGI
> scripts (none of them mail-related).  I guess that we could ban
> specific POST requests at the firewall level.
>
> Anyone have other ideas?
>
> John
>
> On Fri, 16 Jul 2004 12:58:33 -0500, Hall, Philip <phall@xxxxxxxx> wrote:
> > >
> > > Has anyone else noticed a sudden increase in the number of
> > > unsuccessful POST instructions in their web logs lately?  All appear
> > > to be attempts to access a web interface of a mail server.
> > >
> > > Ours have gone up tremendously in the past 5 days.  Here's a sample
> > > "attack":
> > >
> >
> > It's spammers looking for an alternative to an open/relay SMTP server.
They, the spammers, use these web based contact forms - usually found in
common website template code - as a method to relay spam.
> >
> > --phil
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>