smtp filter daemon/proxy?

From: Pat Farrell (pfarrell_at_nospam.com)
Date: 11/23/05 

Date: Wed, 23 Nov 2005 15:38:10 -0500

One of my servers was used to spam, which really bummed me out,
as it was reasonably solid, no relaying, etc. I think
one of the php pages had an email-able form that could be
mail-injected. Not sure, but that's the best I can tell from the
logs.

Anyway, The ecommerce site on my server really needs some outgoing
email ability, confirmation of orders, etc. Probably
no more than one or two an hour.

So I've been doing the obvious things, getting the
latest versions of PHP and the ecommerce code,
checking the logs, etc.

My first thought was that if I put a daemon/proxy between the
webpage/php and my postfix server, I could check for high
volume, or lots of messages to xyz@aol.com, etc. and
drop them, call my cell, etc.

It doesn't look all that hard to change the code to
even write the messages to files, put a filespec
into a mysql table, and have a separate daemon
look in the table.

Got pointers to a generic smtp proxy?
or other ideas?

Thx 

-- 
Pat

Relevant Pages

  • Re: PHP Instalation problems. Browser doesnt know what to do
    ... This is loaded and run as a local server (for class ... PHP 5.2.0 from php-5.2.0-win32-installer.msi ... # configuration directives that give the server its instructions. ...
    (comp.lang.php)
  • Re: PHP Instalation problems. Browser doesnt know what to do
    ... This is loaded and run as a local server (for class ... PHP 5.2.0 from php-5.2.0-win32-installer.msi ... # configuration directives that give the server its instructions. ...
    (comp.lang.php)
  • RE: phpBB Worm
    ... the getpwent function is not supported on Windows. ... it probably depends on the web server ... I looked at the decoded Perl script, ... was invoked by PHP, which should have the Web server's permissions, ...
    (Bugtraq)
  • Re: [PHP] Out source files
    ... Is it considered as secure? ... Assuming you control the other server, you can make it as secure as ... Or you could use PHP ftp functions to shuffle them around. ... securing or the PHP script is so badly-written that jumping through ...
    (php.general)
  • Re: IIS 6.0 on Windows Server 2003
    ... If PHP insists on using CMD.EXE to execute the shellcommand on the ... server, then no, you have no choice -- you must give read permissions to the ... this would be a security vulnerability caused by PHP. ...
    (microsoft.public.inetserver.misc)