How do you get the recipient address?

a) via the form (this opens spam)
b) via the script (hardcoded/database/file)

I used to hardcode the recipient address into formmail.pl for every customer as a quick hack to avoid abuse. It works fine.

Another approach could be entering all possible recipients into a file or database and let formmail check that. It will reduce administration effort.

Sorry, no other idea at the moment.

p.s.: I noticed some spammers check our formmail for open relaying by sending a mail to some obscure hotmail (or other) account. I got that mail as I overwrote the recipient, but those spammers never tried again.

alex pleiner <alex@zeitform.de>
zeitform Internet Dienste