laburke

Okay, good to know. Thanks so much to both of you!

Okay, thanks. So is it likely that the 256 IPs would be individuals in my geographic area using the same ISP that I do?

Thank you, Bruce. You mean I would be excluding 255 addresses (as in number of), or IPs that start with 255? Sorry, I am unclear about this stuff.

Hi. Thanks to this forum, I see how to use skiphosts to exclude my own IP: # to exclude your own IP address 123.123.123.123, use SkipHosts="123.123.123.123" That's no problem, but since my IP does change occasionally, would the code below exclude any other IPs I might be assigned? # to exclude the whole subnet 123.123.123.xxx, use SkipHosts="REGEX[^123\.123\.123\.]" Basically, what am I excluding if I exclude the whole subnet? Does that filter out everyone with the same ISP? Thanks in advance!

Thanks, Bruce, I don't have one to post now. She did say it has finally dwindled to very few, so I think we're okay now. If they come back full-force, I'll come back and post headers. Thanks everyone!

Just now saw this - I guess I don't have e-mail notification enabled! Anyway, yes, I'm quite sure it's gone from the server. It was only one file.

Thanks very much! I obviously missed that. I appreciate the help.

I discovered there are almost 3 years' worth of e-mail still on the server for one of my clients because apparently they don't have the option checked to delete from server after downloading. I need to remove most of the backlog but I can't figure out a way to do it without going page by page. Is there a way in Squirrel Mail or Horde to do this? Or do I just open a ticket and ask them to do it? Thanks for your help.

I'm sorry, Bruce, I thought you were giving instructions that I just wasn't grasping. Happens to me all the time Yes, the subject is always "Ink Order Form" which was the title of the original form, although the IP addresses vary. Which means ... thank you, Steve, for the info on filters in cPanel. I didn't know (or forgot) that you could do that in cPanel. I really appreciate the time you took to post the info! I am saving it for future needs as well.

Okay, so ... forgive me, but when I find the originating IP address, what do I do with that information? I'm just not getting it ...

So I just block IPs individually? (Not that I know how anyway.)

I forgot to check back here and just now saw your answer, Steve. That helps to explain it. If you're still watching this topic, I'm wondering, what do I look for in the headers? Should I post a couple samples here, or can you tell me what I could do? Thanks in advance for any further help you can give.

Maybe it will dwindle to nothing after a while...

Well, I admit that's not what I wanted to hear. I set it up a few years ago when I knew even less than I know now, which is frightening. Although, now that I think about it, I wasn't really clear in my original post. What I mean is that they keep getting spammed forms, filled out with nonsense and obscene stuff, not just general spam e-mails. So does that make a difference in the answer?

I had put an order form on one of my clients' sites, and she got gazillions of spam through it, so much so that she had me take it off. It was from Matt's Script Archive. However, even a week or so after I deleted the order form page and formmail.pl itself from the server, she's still getting it, not as much as before, but still. How does that happen, and is there anything I can do about it? Thanks for your help.