Re: [exim] Acl to help prevent spam from insecure php mail f…

On Tue, Feb 07, 2006 at 02:46:30PM +0000, Terry wrote:
> Date: Tue, 07 Feb 2006 14:46:30 +0000
> From: Terry <terry@???>
> To: exim-users@???
> Subject: [exim] Acl to help prevent spam from insecure php mail forms
>
> Does any one have any ideas to help block insecure php mail forms. Lots
> of spammers some how to seem to inject a flood of address into the bcc.
> I have set a bcc limit but was wondering if there was any thing else to
> be done rather than depend on the writers of such forms.
> It would also give less over head than using mod_security on apache.
> Thanks

Fix the PHP page.

Have a hard coded TO address and only allow them to put one address in a
FROM field, then don't accept email addresses in any other field.

Steven.

--
Somebody ought to cross ball point pens with coat hangers so that the
pens will multiply instead of disappear.