Have recently been getting emails, four or five a day, of what is obviously someone trying to use the included formmail script to spam. They all come from and to an address at one of my domains. The subject line will read something like this:

http://www.mydomain.com/cgi-sys/formmail.pl (myipaddress:80) bcc: bagnallb@aol.com y F65 A4LTy 7PtUV9R vyXOuxkXI z0NP2ovi Jp h3zvWfm72O2M R1vQbcqPBO6qtIkJAL KeF VhGSYmmPpExTHzÿFFFFCCabcdefghijklmnopqrstuvqxyzABCDEFGHIJKLMN.

Obviously the person trying to do this is using an AOL email account - bagnallb@aol.com - and I have sent numerous messages to their abuse / TOS department but with no response.

My question is this... How can I disable the formmail script that he is trying to use? It isn't even installed to the domain he uses but it still finds the script - I can't even find it on my server (although I haven't looked all that hard yet).

Any help would be appreciated!

1) The best thing to resolve this issue is make the permissions of the Formmail.pl in the /cgi-sys/ to 000 which is at /usr/local/cpanel/.

2) Secondly download a formmail from www.scriptarchive.com/formmail.html and then rename it to something like ff.pl or .cgi or any other name other than formmail and upload it to the cgi-bin folder of your domain in ASCII mode with permission 755.

The problem will be resolved.

the spamming occurs due to this bug in the CPanel which will be resolved in the next version of Cpanel.

Thanks for the help! I will just handle it with # 1 as you suggested - problem solved!

Thanks again!