<div>Jim, <br></div><div><br></div><div>Thanks, you are the only person to give me something beside the directory. The directory are fine. As I example we don't use .forward. For now I have switch to postfix, which fixed the issues. I am now looking at the rpm also running rkhunter, this is very strange. This box is behind a sonic firewall and there no access to it. Anyway mail is flowing again. </div>
<br><div class="gmail_quote">On Wed, Oct 24, 2012 at 4:47 PM, Jim Kinney <span dir="ltr"><<a href="mailto:jim.kinney@gmail.com" target="_blank">jim.kinney@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
double-check the directories it gripes about. If they are present AND<br>
you didn't make them, wipe the box and restore from backups after<br>
reading the new .forward files.<br>
<br>
If it's a RHEL or other rpm-based system, run rpm -Va > {some file}<br>
and look for changed md5sums on binaries. If you find any, wipe and<br>
reinstall and restore data from backups.<br>
<div><div class="h5"><br>
On Wed, Oct 24, 2012 at 12:40 PM, Chuck Payne <<a href="mailto:terrorpup@gmail.com">terrorpup@gmail.com</a>> wrote:<br>
> Guys,<br>
><br>
> It's been years for me to work with sendmail. I have an issue there I don't<br>
> know if it's sendmail or Google.<br>
><br>
> A bit of history to help better understand<br>
><br>
> We use Google for our mail. We have a server in our datacenter that sends<br>
> log watch, nagios alerts, cron job, and so forth. This would then send be<br>
> forward to Google.<br>
><br>
> Everything was working until the other day, no files have been changed, but<br>
> now I am get the following errors on my server and no messages are being<br>
> sent to Goggle.<br>
><br>
><br>
> Oct 24 16:36:39 post sendmail[13666]: q9OGadCV013666:<br>
> from=<<a href="mailto:nagios@rosetta.performancematters.com">nagios@rosetta.performancematters.com</a>>, size=634, class=0, nrcpts=1,<br>
> msgid=<<a href="mailto:201210241454.q9OEsV4h024162@rosetta.performancematters.com">201210241454.q9OEsV4h024162@rosetta.performancematters.com</a>>,<br>
> proto=ESMTP, daemon=MTA, relay=rosetta [10.0.0.7]<br>
> Oct 24 16:36:39 post sendmail[13667]: q9OGadCV013666: forward<br>
> /mnt/nas-sgd2/home/chuck.payne/.forward.post: World writable directory<br>
> Oct 24 16:36:39 post sendmail[13667]: q9OGadCV013666: forward<br>
> /mnt/nas-sgd2/home/chuck.payne/.forward: World writable directory<br>
> Oct 24 16:36:39 post sendmail[13667]: q9OGadCV013666:<br>
> to=<<a href="mailto:chuck.payne@performancematters.com">chuck.payne@performancematters.com</a>>, delay=00:00:00, xdelay=00:00:00,<br>
> mailer=local, pri=30861, dsn=2.0.0, stat=Sent<br>
><br>
><br>
> It says the message is sent, but what got me worried is this<br>
><br>
> Oct 24 16:36:39 post sendmail[13667]: q9OGadCV013666: forward<br>
> /mnt/nas-sgd2/home/chuck.payne/.forward.post: World writable directory<br>
> Oct 24 16:36:39 post sendmail[13667]: q9OGadCV013666: forward<br>
> /mnt/nas-sgd2/home/chuck.payne/.forward: World writable directory<br>
><br>
> We don't have any .forward, this started just a couple days ago. No clue why<br>
> sendmail is saying that<br>
><br>
> Also I am seeing this alot<br>
><br>
> Oct 24 16:38:37 post sendmail[14153]: q9OGcbUF014153:<br>
> <a href="http://post.performancematters.com" target="_blank">post.performancematters.com</a> [10.0.0.53] (may be forged) did not issue<br>
> MAIL/EXPN/VRFY/ETRN during connection to MTA<br>
><br>
> This is also new...<br>
><br>
> Can someone that is a Sendmail guru help. Please note, production box, can<br>
> change to postfix. Tried that fight already.<br>
><br>
><br>
><br>
> --<br>
> Terror PUP a.k.a<br>
> Chuck "PUP" Payne<br>
><br>
> <a href="tel:%28678%29%20636-9678" value="+16786369678">(678) 636-9678</a><br>
> -----------------------------------------<br>
> Discover it! Enjoy it! Share it! openSUSE Linux.<br>
> -----------------------------------------<br>
> openSUSE -- <a href="http://en.opensuse.org/User:Terrorpup" target="_blank">en.opensuse.org/User:Terrorpup</a><br>
> openSUSE Ambassador/openSUSE Member<br>
> Community Manager -- Southeast Linux Foundation (SELF)<br>
> skype,twiiter,identica,friendfeed -- terrorpup<br>
> freenode(irc) --terrorpup/lupinstein<br>
> Register Linux Userid: 155363<br>
><br>
> Have you tried SUSE Studio? Need to create a Live CD, an app you want to<br>
> package and distribute , or create your own linux distro. Give SUSE Studio a<br>
> try. <a href="http://www.susestudio.com" target="_blank">www.susestudio.com</a>.<br>
> See you at Southeast Linux Fest, June 8-10, 2012 in Charlotte, NC.<br>
> <a href="http://www.southeastlinuxfest.org" target="_blank">www.southeastlinuxfest.org</a><br>
><br>
</div></div>> _______________________________________________<br>
> Ale mailing list<br>
> <a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
> <a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
> See JOBS, ANNOUNCE and SCHOOLS lists at<br>
> <a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
><br>
<br>
<br>
<br>
--<br>
--<br>
James P. Kinney III<br>
<br>
Every time you stop a school, you will have to build a jail. What you<br>
gain at one end you lose at the other. It's like feeding a dog on his<br>
own tail. It won't fatten the dog.<br>
- Speech 11/23/1900 Mark Twain<br>
<br>
<a href="http://electjimkinney.org" target="_blank">http://electjimkinney.org</a><br>
<a href="http://heretothereideas.blogspot.com/" target="_blank">http://heretothereideas.blogspot.com/</a><br>
_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
</blockquote></div><br><br clear="all"><br>-- <br>Terror PUP a.k.a<br>Chuck "PUP" Payne<br> <br>(678) 636-9678<br>-----------------------------------------<br>Discover it! Enjoy it! Share it! openSUSE Linux.<br>
-----------------------------------------<br>openSUSE -- <a href="http://en.opensuse.org/User:Terrorpup" target="_blank">en.opensuse.org/User:Terrorpup</a><br>openSUSE Ambassador/openSUSE Member<br>Community Manager -- Southeast Linux Foundation (SELF)<br>
skype,twiiter,identica,friendfeed -- terrorpup<br>freenode(irc) --terrorpup/lupinstein<br>Register Linux Userid: 155363<br> <br>Have you tried SUSE Studio? Need to create a Live CD, an app you want to package and distribute , or create your own linux distro. Give SUSE Studio a try. <a href="http://www.susestudio.com" target="_blank">www.susestudio.com</a>.<br>
See you at Southeast Linux Fest, June 8-10, 2012 in Charlotte, NC. <a href="http://www.southeastlinuxfest.org" target="_blank">www.southeastlinuxfest.org</a><br>