topic Re: sendmail error in Operating System - HP-UX

sendmail error

SILVERSTAR — Tue, 03 Aug 2004 10:51:44 GMT

Hi,
I am getting the following error in /var/adm/syslog/mail.log :
Aug 3 17:26:39 arwdbs01 sendmail[10964]: RAA10964: to=2, delay=00:00:00, mailer=local, stat=User unknown
Aug 3 17:26:39 arwdbs01 sendmail[10964]: RAA10964: from=root, size=3455, class=0, pri=33455, nrcpts=1, msgid=<200408031526.RAA10964
@arwdbs01.arrowitaly.com>, relay=root@localhost
Aug 3 17:27:19 arwdbs01 sendmail[10973]: gethostbyaddr(192.0.0.1) failed: 1

=======

The msgid=<200408031526.RAA10964 is the message body ?
Where it is located ?
I need to find out who (job or person) is trying to send this mail to a user called "2"

This is recursively happening

many thanks
Angelo

Re: sendmail error

Steven E. Protter — Tue, 03 Aug 2004 10:57:38 GMT

You might want to turn on enhaced logging.

This can be done in sendmail.cf

LogLevel=

The default is 9

Turning it up to 12 should get you more information about who is sending the bad mail.

Then.

/sbin/init.d/sendmail stop
/sbin/init.d/sendmail start

SEP

Re: sendmail error

SILVERSTAR — Wed, 04 Aug 2004 04:43:56 GMT

Hi Scott,
I reaised to log level to 12 but I do not see any additional interesting information.

Is there any way to get the body of a message by using the value msgid=<200408031526.RAA10964.

regards.
Angelo

Re: sendmail error

Steve Steel — Wed, 04 Aug 2004 04:53:32 GMT

Hi

There are some good suggestions in

www.sendmail.org

search

user unknown

Steve Steel

Re: sendmail error

Scott Mitchell — Wed, 04 Aug 2004 14:00:37 GMT

Angelo,

In /etc/mail/aliases, add the entry "2 : root" under the section '# Local Aliases', then run /usr/sbin/newaliases. The emails to '2' will be redirected to root's mail. Then you can read them to figure out who/what/when/why.

Scott