Re: Since we talking about Formmail.........

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Ronx (ronx917_at_hotmail.com)
Date: 03/23/04 

Date: Tue, 23 Mar 2004 14:23:06 -0000

I have tried it successfully.
The changes listed below are correct.
Your form must have fields named
email the users email address
recipient the address the form is sent to. The domain here must be
one in the @referers variable. 

-- 
Ron
Reply only to group - emails will be deleted unread.
"Orlando Gondar" <www.gondarelectronics.com> wrote in message
news:eBYhpNNEEHA.1604@TK2MSFTNGP11.phx.gbl...
> Here is the link Ronx: http://www.gorski.net/~darrin/scripts/formmail/
>
> "Ronx" <ronx917@hotmail.com> wrote in message
> news:unSKWvLEEHA.2804@tk2msftngp13.phx.gbl...
> > I could only find security warnings regarding Formmail-SMTP (and these
> were
> > all directed to the Formmail script in general) in Google.  Could you
post
> a
> > URL where you found the script?
> > I have looked at Formmail 1.92 (which does not have the $mailhost
> variable),
> > so I am making educated guesses here.
> > See inline below.
> > --
> > Ron
> > Reply only to group - emails will be deleted unread.
> >
> > "Orlando Gondar" <www.gondarelectronics.com> wrote in message
> > news:OHwN6kHEEHA.3412@TK2MSFTNGP10.phx.gbl...
> > > Well, still "Nada", nothing, this are te variables on the scripts....
> > >
> > > #!perl.exe
> > > #!D:\PERL\bin
> >
> > These lines should only be one line - the very top line in the script.
> > Ignored by IIS, but required on Unix servers to point to Perl.exe on the
> > server.  The usual line is
> > #!usr/sbin/perl
> > or
> > #!usr/bin/perl
> > but this may vary.
> >
> > >
> > > use Net::SMTP;
> > >
> > >
> > > $mailprog = '/usr/lib/sendmail -i -t';
> > >
> > > # $mailhost defines the name or address of your mail relay. If
defined,
> > > #
> > > # overrides $mailprog and sends mail directly to $mailhost using
> Net::SMTP
> > > #
> > >
> > > $mailhost = '127.0.0.1';
> >
> > Check that SMTP service is configured to accept connections from
127.0.0.1
> >
> > >
> > > # @referers allows forms to be located only on servers which are
defined
> > > #
> > > # in this field.  This security fix from the last version which
allowed
> > > #
> > > # anyone on any server to use your FormMail script on their web site.
> > > #
> > >
> > > @referers = ('localhost');
> > Change this to
> > @referers = ('127.0.0.1','localhost','somealiasdomain.com')
> >
> > The "somealiasdomain" should be set up on the SMTP service as an alias.
> > This enables you to test using an email address of (for example)
> > fred@somealiasdomain.com
> > If you try using an address like fred@localhost - it may not work at
all,
> > because localhost does not contain a dot, but fred@127.0.0.1 should.
> > You also need to set up the SMTP service to accept connections from
> > 127.0.0.1 and localhost.
> > Also your POP3 service should be configured for these domains.
> > >
> > > # @recipients defines the e-mail addresses or domain names that e-mail
> can
> > > #
> > > # be sent to.  This must be filled in correctly to prevent SPAM and
> allow
> > > #
> > > # valid addresses to receive e-mail.  Read the documentation to find
out
> > how
> > > #
> > > # this variable works!!!  It is EXTREMELY IMPORTANT.
> > > #
> > > @recipients = &fill_recipients(@referers);
> > >
> > > # ACCESS CONTROL FIX: Peter D. Thompson Yezek
> > > #
> > > # @valid_ENV allows the sysadmin to define what environment variables
> can
> > > #
> > > # be reported via the env_report directive.  This was implemented to
fix
> > > #
> > > # the problem reported at http://www.securityfocus.com/bid/1187
> > > #
> > >
> > > @valid_ENV =
> > ('REMOTE_HOST','REMOTE_ADDR','REMOTE_USER','HTTP_USER_AGENT');
> > >
> > >
> > > "Ronx" <ronx917@hotmail.com> wrote in message
> > > news:#pdPAQCEEHA.1544@TK2MSFTNGP09.phx.gbl...
> > > > You probably have a line in the script similar to
> > > > $mailhost = "mailhost";
> > > > I would change it to
> > > > $mailhost = "127.0.0.1";
> > > >
> > > > and don't lose that semi-colon on the end of the line.
> > >
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: Since we talking about Formmail.........
    ... > all directed to the Formmail script in general) in Google. ... > because localhost does not contain a dot, ... > You also need to set up the SMTP service to accept connections from ...
    (microsoft.public.frontpage.client)
  • Re: Have you heard about a MySQL connection leak?
    ... We're using PHP 5 and MySQL 5. ... Can't connect to MySQL: 'Too many connections' ... we connect to the db (script included on every page) ... ...
    (comp.lang.php)
  • RE: Benchmarking Oracle connections on Windoze XP with DBD::ODBCand DBD::Oracle
    ... > like some help interpreting. ... > box comparing: ... > Here is my test script: ... timethese is sadly reporting that I can perform 72.36 connections ...
    (perl.dbi.users)
  • Re: WMI Access from a Service
    ... > When trying to query WMI my script fails, although I cannot trap any kind ... > script also fails when accessing network settings using the windows shell ... > connections when a network connection to a specific network is connected ... > ' Check for Local Area Connections and status ...
    (microsoft.public.scripting.wsh)
  • Re: IWAM out of sync (DCOM error) 10004
    ... Have you been using the synciwam.vbs script in the AdminScripts folder? ... The website runs fine until I try and do Server Side ASP debugging, ... that I cannot debug any pages that use connections with these providers. ... > the same errors occuring on now a weekly basis. ...
    (microsoft.public.inetserver.iis.security)