sslug-teknik team mailing list archive

[Mogens Kjaer <mk@xxxxxx>]

Mogens Kjaer wrote:
...
> fgrep -i formmail /var/log/httpd/access_log
> 200.246.46.189 - - [11/Feb/2003:10:37:33 +0100] "GET 
> /cgi-bin/formmail.pl HTTP/1.0" 200 396535 "http://www.crc.dk/"; "-"
> 63.214.252.57 - - [11/Feb/2003:23:42:43 +0100] "POST 
> /cgi-local/FormMail.cgi HTTP/1.1" 404 295 "-" "Mozilla/4.06 (Win95; I)"
> 198.138.86.134 - - [09/Feb/2003:10:14:51 +0100] "GET 
> /cgi-bin/FormMail.cgi?email=rockstar@xxxxxxxx&realname=rockstar@xxxxxxxx&recipient=qbsfinestnas20@xxxxxxxxx&subject=www.crc.dk/cgi-bin/FormMail.cgi 
> HTTP/1.1" 404 293 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
...

Spøjst, ovenstående triggede følgende fra en
emaillistemodtager:

################################################
      Security warning - computer generated message.
################################################

Your mail with the subject line "Re: [TEKNIK] 
=?ISO-8859-1?Q?N=E5r_man_bruger_FormMail=2Epl?=" has been stopped
by our email gateway, due to your message not conforming
with our current security policies.

Possible reasons for this message being stopped are:

- Hazardous scripting was found.
- Executable programs were detected.
- Misc. entertainment formats, such as movie and music files were found.

To clarify, this message was not delivered to the recipient
and has been put in quarantine.

If you feel that you have received this message in error,
please contact xxx.

Mogens

--
Mogens Kjaer, Carlsberg A/S, Computer Department
Gamle Carlsberg Vej 10, DK-2500 Valby, Denmark
Phone: +45 33 27 53 25, Fax: +45 33 27 47 08
Email: mk@xxxxxx Homepage: http://www.crc.dk