Home  |  Forums  |  914 Info  |  Blogs
 
914World.com - The fastest growing online 914 community!
 
Porsche, and the Porsche crest are registered trademarks of Dr. Ing. h.c. F. Porsche AG. This site is not affiliated with Porsche in any way.
Its only purpose is to provide an online forum for car enthusiasts. All other trademarks are property of their respective owners.
 

Welcome Guest ( Log In | Register )

 
Reply to this topicStart new topic
> admin help request, email scammers
r_towle
post Dec 14 2004, 07:54 PM
Post #1


Custom Member
***************

Group: Members
Posts: 24,574
Joined: 9-January 03
From: Taxachusetts
Member No.: 124
Region Association: North East States



we have a forum run by kids running php.
We have been having a problem with several email scammers loading up the email server and these guys have no time to monitor it every day...

What are the simple solutions, we have already turned off email, simple enough.

Thanx in advance
Rich
site is www.first.comclub.org
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
McMark
post Dec 14 2004, 07:56 PM
Post #2


914 Freak!
***************

Group: Retired Admin
Posts: 20,179
Joined: 13-March 03
From: Grand Rapids, MI
Member No.: 419
Region Association: None



I'm not sure I understand the problem? Are people getting email spam or are people posting spam in the forum?
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Brando
post Dec 14 2004, 07:58 PM
Post #3


BUY MY SPARE KIDNEY!!!
****

Group: Members
Posts: 3,935
Joined: 29-August 04
From: Santa Ana, CA
Member No.: 2,648
Region Association: Southern California



more details.

is this a website your company hosts? If you are hosting a client and they have fraudulent or illegal activity, you can shut them down. disable mod_php and tell them to get rid of any form-mailers or vulnerable PHP scripts.

This includes upgrading their forum software.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
r_towle
post Dec 14 2004, 08:50 PM
Post #4


Custom Member
***************

Group: Members
Posts: 24,574
Joined: 9-January 03
From: Taxachusetts
Member No.: 124
Region Association: North East States



apparently the kids got an emailfrom someone stating that they were receiving bulk email from this forum.

the email did not originate from that forum, it was just used as a hop, or a forwarding remailer.

Please take a look at the site.

Rich
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
McMark
post Dec 14 2004, 09:00 PM
Post #5


914 Freak!
***************

Group: Retired Admin
Posts: 20,179
Joined: 13-March 03
From: Grand Rapids, MI
Member No.: 419
Region Association: None



Who's got control of the server? Do they know what they're doing? If there's a mail server running, does there need to be? What OS is the server running? What web server?

There's no easy answer.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Brando
post Dec 14 2004, 09:13 PM
Post #6


BUY MY SPARE KIDNEY!!!
****

Group: Members
Posts: 3,935
Joined: 29-August 04
From: Santa Ana, CA
Member No.: 2,648
Region Association: Southern California



ERRARZ!!@!@12OneonEOn!@!1
"www.first.comclub.org could not be reached..."

ping says:
Ping request could not find host www.first.comclub.org....
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
McMark
post Dec 14 2004, 09:17 PM
Post #7


914 Freak!
***************

Group: Retired Admin
Posts: 20,179
Joined: 13-March 03
From: Grand Rapids, MI
Member No.: 419
Region Association: None



take off the www
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Brando
post Dec 14 2004, 09:26 PM
Post #8


BUY MY SPARE KIDNEY!!!
****

Group: Members
Posts: 3,935
Joined: 29-August 04
From: Santa Ana, CA
Member No.: 2,648
Region Association: Southern California



also denied.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
McMark
post Dec 14 2004, 09:28 PM
Post #9


914 Freak!
***************

Group: Retired Admin
Posts: 20,179
Joined: 13-March 03
From: Grand Rapids, MI
Member No.: 419
Region Association: None



[Sisal:~] markd% ping first.comclub.org
PING first.comclub.org (67.18.133.226): 56 data bytes
64 bytes from 67.18.133.226: icmp_seq=0 ttl=52 time=75.835 ms
64 bytes from 67.18.133.226: icmp_seq=1 ttl=52 time=75.426 ms
64 bytes from 67.18.133.226: icmp_seq=2 ttl=52 time=73.153 ms
64 bytes from 67.18.133.226: icmp_seq=3 ttl=52 time=75.367 ms
User is offlineProfile CardPM
Go to the top of the page
+Quote Post
Brando
post Dec 14 2004, 09:37 PM
Post #10


BUY MY SPARE KIDNEY!!!
****

Group: Members
Posts: 3,935
Joined: 29-August 04
From: Santa Ana, CA
Member No.: 2,648
Region Association: Southern California



figures. it's a website for a bunch of COUNTER-STRIKE players.

EDIT: Nevermind. Not a CS clan. they're using PHP Nuke. I believe forums are integrated into that CMS and they should disable the forum on it until they upgrade to the latest version.

I'm not familiar with PHP nuke, but I have heard it's one of the most flexible PHP CMS's available and there are a ton of plugins to add features, as well as hacks to exploit it's holes.
User is offlineProfile CardPM
Go to the top of the page
+Quote Post

Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 



- Lo-Fi Version Time is now: 11th May 2024 - 11:13 AM