[Mimedefang] OT: Don't let this happen to you

Atanas atanas at asd.aplus.net
Tue Feb 21 16:06:50 EST 2006


Richard Laager said the following on 02/20/06 23:46:
> On Thu, 2006-02-16 at 11:50 -0800, Atanas wrote:
>> a sendmail log monitoring script that shuts down web sites 
>> immediately (notifying both parties - the web site owner and the shared 
>> server administrator) in case a web site starts sending suspicious 
>> amounts of outgoing emails for a given period of time.
> [ snipped ]
>> I'm running 
>> it through a modified version of mod_fastcgi that forks dynamic 
>> PHP-fastcgi workers on demand and runs them with the privileges of the 
>> script owner.
> 
> Are either of these available online -- especially the modified
> mod_fastcgi?
> 
None of these were available online. These are just custom hacks for 
custom configurations.

The sendmail log monitoring script in particular (if you have the proper 
CGI/PHP/firewall hooks in place of course) is a pretty trivial thing to 
implement. Mine works, but is not perfect. I don't like the way it 
parses the logs resulting in some spam passing through, so now it sits 
in my TODO list waiting for a major rewrite.

The mod_fastcgi mods however seem pretty stable (running in production 
for about 2 years already), so now I feel more confident in sharing 
them. I just made a simple page with the patches and a short description 
here: http://apache.asd.aplus.net

Regards,
Atanas



More information about the MIMEDefang mailing list