[ale] Need help with sendmail

[Chuck Payne]

Jim,

Thanks, you are the only person to give me something beside the directory.
The directory are fine. As I example we don't use .forward. For now I have
switch to postfix, which fixed the issues. I am now looking at the rpm also
running rkhunter, this is very strange. This box is behind a sonic firewall
and there no access to it. Anyway mail is flowing again.

On Wed, Oct 24, 2012 at 4:47 PM, Jim Kinney <jim.kinney at gmail.com> wrote:

> double-check the directories it gripes about. If they are present AND
> you didn't make them, wipe the box and restore from backups after
> reading the new .forward files.
>
> If it's a RHEL or other rpm-based system, run rpm -Va > {some file}
> and look for changed md5sums on binaries. If you find any, wipe and
> reinstall and restore data from backups.
>
> On Wed, Oct 24, 2012 at 12:40 PM, Chuck Payne <terrorpup at gmail.com> wrote:
> > Guys,
> >
> > It's been years for me to work with sendmail. I have an issue there I
> don't
> > know if it's sendmail or Google.
> >
> > A bit of history to help better understand
> >
> > We use Google for our mail. We have a server in our datacenter that sends
> > log watch, nagios alerts, cron job, and so forth. This would then send be
> > forward to Google.
> >
> > Everything was working until the other day, no files have been changed,
> but
> > now I am get the following errors on my server and no messages are being
> > sent to Goggle.
> >
> >
> > Oct 24 16:36:39 post sendmail[13666]: q9OGadCV013666:
> > from=<nagios at rosetta.performancematters.com>, size=634, class=0,
> nrcpts=1,
> > msgid=<201210241454.q9OEsV4h024162 at rosetta.performancematters.com>,
> > proto=ESMTP, daemon=MTA, relay=rosetta [10.0.0.7]
> > Oct 24 16:36:39 post sendmail[13667]: q9OGadCV013666: forward
> > /mnt/nas-sgd2/home/chuck.payne/.forward.post: World writable directory
> > Oct 24 16:36:39 post sendmail[13667]: q9OGadCV013666: forward
> > /mnt/nas-sgd2/home/chuck.payne/.forward: World writable directory
> > Oct 24 16:36:39 post sendmail[13667]: q9OGadCV013666:
> > to=<chuck.payne at performancematters.com>, delay=00:00:00,
> xdelay=00:00:00,
> > mailer=local, pri=30861, dsn=2.0.0, stat=Sent
> >
> >
> > It says the message is sent, but what got me worried is this
> >
> > Oct 24 16:36:39 post sendmail[13667]: q9OGadCV013666: forward
> > /mnt/nas-sgd2/home/chuck.payne/.forward.post: World writable directory
> > Oct 24 16:36:39 post sendmail[13667]: q9OGadCV013666: forward
> > /mnt/nas-sgd2/home/chuck.payne/.forward: World writable directory
> >
> > We don't have any .forward, this started just a couple days ago. No clue
> why
> > sendmail is saying that
> >
> > Also I am seeing this alot
> >
> > Oct 24 16:38:37 post sendmail[14153]: q9OGcbUF014153:
> > post.performancematters.com [10.0.0.53] (may be forged) did not issue
> > MAIL/EXPN/VRFY/ETRN during connection to MTA
> >
> > This is also new...
> >
> > Can someone that is a Sendmail guru help. Please note, production box,
> can
> > change to postfix. Tried that fight already.
> >
> >
> >
> > --
> > Terror PUP a.k.a
> > Chuck "PUP" Payne
> >
> > (678) 636-9678
> > -----------------------------------------
> > Discover it! Enjoy it! Share it! openSUSE Linux.
> > -----------------------------------------
> > openSUSE -- en.opensuse.org/User:Terrorpup
> > openSUSE Ambassador/openSUSE Member
> > Community Manager -- Southeast Linux Foundation (SELF)
> > skype,twiiter,identica,friendfeed -- terrorpup
> > freenode(irc) --terrorpup/lupinstein
> > Register Linux Userid: 155363
> >
> > Have you tried SUSE Studio? Need to create a Live CD,  an app you want to
> > package and distribute , or create your own linux distro. Give SUSE
> Studio a
> > try. www.susestudio.com.
> > See you at Southeast Linux Fest, June 8-10, 2012 in Charlotte, NC.
> > www.southeastlinuxfest.org
> >
> > _______________________________________________
> > Ale mailing list
> > Ale at ale.org
> > http://mail.ale.org/mailman/listinfo/ale
> > See JOBS, ANNOUNCE and SCHOOLS lists at
> > http://mail.ale.org/mailman/listinfo
> >
>
>
>
> --
> --
> James P. Kinney III
>
> Every time you stop a school, you will have to build a jail. What you
> gain at one end you lose at the other. It's like feeding a dog on his
> own tail. It won't fatten the dog.
> - Speech 11/23/1900 Mark Twain
>
> http://electjimkinney.org
> http://heretothereideas.blogspot.com/
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo
>



-- 
Terror PUP a.k.a
Chuck "PUP" Payne

(678) 636-9678
-----------------------------------------
Discover it! Enjoy it! Share it! openSUSE Linux.
-----------------------------------------
openSUSE -- en.opensuse.org/User:Terrorpup
openSUSE Ambassador/openSUSE Member
Community Manager -- Southeast Linux Foundation (SELF)
skype,twiiter,identica,friendfeed -- terrorpup
freenode(irc) --terrorpup/lupinstein
Register Linux Userid: 155363

Have you tried SUSE Studio? Need to create a Live CD,  an app you want to
package and distribute , or create your own linux distro. Give SUSE Studio
a try. www.susestudio.com.
See you at Southeast Linux Fest, June 8-10, 2012 in Charlotte, NC.
www.southeastlinuxfest.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.ale.org/pipermail/ale/attachments/20121025/74358ce7/attachment-0001.html