User: Password:
Subscribe / Log in / New account

Linux botnets

Linux botnets

Posted Feb 15, 2007 12:09 UTC (Thu) by NAR (subscriber, #1313)
In reply to: Linux botnets by zlynx
Parent article: Linux botnets

PHP applications should not be making outgoing network requests.

Then how should a PHP-based forum software send a "registration succeeded" e-mail to the user? Could connect to the local SMTP server, but spam could be sent out this way too.


(Log in to post comments)

PHP sending mail

Posted Feb 15, 2007 15:17 UTC (Thu) by rfunk (subscriber, #4054) [Link]

The local SMTP server can do its own checking to detect and block outgoing spam.

It can also queue the real messages when the recipient's mail server is temporarily
unavailable; sending directly from PHP can't do that.

Linux botnets

Posted Feb 16, 2007 2:34 UTC (Fri) by smoogen (subscriber, #97) [Link]

The standard way I have seen it done is that the application uses 'local' delivery and that is checked for 'correctness' at the machine and at the border SMTP router. This stops the majority of spambots in a large environment.

Copyright © 2018, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds