Forum Moderators: phranque

Message Too Old, No Replies

I keep getting a email spammer on my server

Im going nuts here

         

zeus

4:32 pm on May 26, 2008 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Now first I will say I have NO idea how such spamming works, how a punk can get on my server and sent emails out.

I have had a team to look at it they also did something, but now it happens again for the 5th time, what can i do, are there any software or tools one can use like a antivirus to check the server and how can I avoid such sh..

Terabytes

5:12 pm on May 26, 2008 (gmt 0)

10+ Year Member



you're sure its coming from your server....not just emails with your reply address on them?

londrum

5:24 pm on May 26, 2008 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



they might just be sending some stuff through a form on your site. they don't have to get into the server at all.

do you have any contact forms or stuff like that on your site?

maybe you just need to spruce up the protection on it, so it's properly validating everything that passes through it.

zeus

5:38 pm on May 26, 2008 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



contact forms : YES I have that, but never thought that could be a problem, how can I protect that, captcha?

Yes its coming from my server I get warnings from spamcop.

londrum

6:35 pm on May 26, 2008 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



yeah that's right... if your form is sending it out, then it's going to seem like it's coming from your server.

but -- here is the wierd thing -- the spammers don't actually have to send stuff from your site at all.
if your form is very unsecure, then they can just use their OWN form, and send it to you to be processed.

the first line of your form will look something like this...

<form action="example.html" method="post">

which sends the form to example.html to be processed.

all they have to do is write their own form (on their own site), and send it to be processed by the page on YOUR site, like this

<form action="http://www.yoursite.com/example.html" method="post">

if your form doesn't bother checking what it is sending out, then everything they send through your form will appear to come from your site.

does your form have any checking on it? because if it doesn't, then that's likely to be your problem.

zeus

8:03 pm on May 26, 2008 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



no checking, hmm what can I then do

londrum

8:08 pm on May 26, 2008 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



there are a couple of posts in the library about this sort of stuff which you can have a look at...

http://www.webmasterworld.com/forum88/5531.htm [webmasterworld.com]

http://www.webmasterworld.com/forum88/13199.htm [webmasterworld.com]