So I am sure if you are running a cPanel server you are having the exact same trouble as we have been having the last week, lots of spam! It appears there is somebody in this world that has decided to write a rather efficient script that searches for webforms then sends spam via php and bcc. The first quick fix was to enable safe_mode but that obviouslly gets a fair amount of webhosting clients pretty bad. I have been working with mod_security and come up with a pretty simple rule that should help:

SecFilterSelective THE_REQUEST "bcc:|Bcc:|BCc:|BCC:|bCc:|bCC:|bcC:|BcC:"

What that will do is search first for the bcc, Bcc, etc then look for com, org, or net in a url. I was trying to filter it looking for an @ symbol but I was having trouble with apache picking it up. I figure if they are not spamming to one of those TDLs it is probably not a very big attack. If you want to protect more simply add to the list, remember all it has to do is catch one and it blocks the entire request.

Enjoy

__________________
Strat with Linux || Optimize, Secure and increase performance of Apache || Already Started
The visionary conceives the impossible, The missionary makes it possible. ...Gita.

hey guys... sorry but how can set a picture in my profile?

__________________
I'm a Doctor Seuss!
Pimpin' Cosmetic Product Testing On Animal

Hi,

Sure. Send us the picture by email at jason@accuwebhosting.com / support@accuwebhosting.com . We will do that for you.

Thanks,

__________________
Jason
---------
Technical Support Group
AccuWebHosting.Com
Windows Website Hosting
Linux Website Hosting

Kinda reminds me of Kerin in that one forum we link to lol

__________________
YEAH OK
Engine Part Vg Wisconsin

ha ha ha ha ha


One more spammer is here.....!!!!!


Please moderator remove this post

__________________
Strat with Linux || Optimize, Secure and increase performance of Apache || Already Started
The visionary conceives the impossible, The missionary makes it possible. ...Gita.