From owner-freebsd-amd64@FreeBSD.ORG Tue May 8 16:38:30 2007 Return-Path: X-Original-To: freebsd-amd64@freebsd.org Delivered-To: freebsd-amd64@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 40C3C16A400 for ; Tue, 8 May 2007 16:38:30 +0000 (UTC) (envelope-from torfinn.ingolfsen@broadpark.no) Received: from osl1smout1.broadpark.no (osl1smout1.broadpark.no [80.202.4.58]) by mx1.freebsd.org (Postfix) with ESMTP id F2C8B13C43E for ; Tue, 8 May 2007 16:38:29 +0000 (UTC) (envelope-from torfinn.ingolfsen@broadpark.no) Received: from osl1sminn1.broadpark.no ([80.202.4.59]) by osl1smout1.broadpark.no (Sun Java System Messaging Server 6.1 HotFix 0.05 (built Oct 21 2004)) with ESMTP id <0JHQ00790BG0GTC0@osl1smout1.broadpark.no> for freebsd-amd64@freebsd.org; Tue, 08 May 2007 17:38:24 +0200 (CEST) Received: from kg-work.kg4.no ([80.202.72.184]) by osl1sminn1.broadpark.no (Sun Java System Messaging Server 6.1 HotFix 0.05 (built Oct 21 2004)) with SMTP id <0JHQ007FSBFZRVE1@osl1sminn1.broadpark.no> for freebsd-amd64@freebsd.org; Tue, 08 May 2007 17:38:24 +0200 (CEST) Date: Tue, 08 May 2007 17:38:25 +0200 From: Torfinn Ingolfsen X-Face: "t9w2,-X@O^I`jVW\sonI3.,36KBLZE*AL[y9lL[PyFD*r_S:dIL9c[8Y>V42R0"!"yb_zN,f#%.[PYYNq; m"_0v; ~rUM2Yy!zmkh)3&U|u!=T(zyv,MHJv"nDH>OJ`t(@mil461d_B'Uo|'nMwlKe0Mv=kvV?Nh@>Hb<3s_z2jYgZhPb@?Wi^x1a~Hplz1.zH In-reply-to: <405942B8-7714-4F57-914F-24F12DFB206A@axis.nl> To: freebsd-amd64@freebsd.org Message-id: <20070508173825.457d46c9.torfinn.ingolfsen@broadpark.no> MIME-version: 1.0 X-Mailer: Sylpheed 2.4.0 (GTK+ 2.10.11; i386-portbld-freebsd6.2) Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT References: <2BEB30C2-C9C5-43AB-9DCA-5C9A1B0AC2C0@axis.nl> <20070504111105.GA13599@kzdoos.xs4all.nl> <405942B8-7714-4F57-914F-24F12DFB206A@axis.nl> Subject: Re: How to make Apache (2.2.4) less greedy, or Sendmail less polite? [semi-solved] X-BeenThere: freebsd-amd64@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting FreeBSD to the AMD64 platform List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 May 2007 16:38:30 -0000 On Tue, 08 May 2007 14:51:45 +0200 Olaf Greve wrote: > commercial spam, referring to vi*gr* websites, etc. I think this is > known as "forum spam" (or so), but my site uses custom scripts, so > someone must have found the URL, and made use of it by manually > figuring out the parameters and it's functionality. Not necessarily. They just use the brute force approach; any input field on a web page will be tried to see if they can input the spam message in there. They just don't care if it works or not. Thus, today, any web page with an inut field needs either a) validation of input b) anti-spam measures (like CAPTHCA or something) or preferably both. -- Regards, Torfinn Ingolfsen, Norwat