[users@httpd] securing formmail.pl scripts

["Kayma, Bill" <bk...@cypresscom.net>]

We are an ISP that has a couple of Apache webservers on RH Linux7

I am seeing more and more expolits of formmail.pl scripts on the servers.
Anyone have any ideas on blocking these? (other than not allowing personal
cgi-bin's, which I am considering.)

The problem is there are a couple hundred sites on these servers, and it is
not feasible for myself to go and patch each one of these scripts.

Thanks-

BK






---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org