topic sendmail errors in Operating System - Linux

sendmail errors

steven Burgess_2 — Tue, 06 Mar 2007 12:19:11 GMT

Hi Everyone,

One of our support guys has requested I look at a filesystem capacity issue (/var). Having a look through to see why maillog is huge I have noticed the following errors

Mar 4 04:56:51 windomav sendmail[16926]: l218uop1022148: Warning: program /bin/bellmail unsafe: No such file or directory
Mar 4 04:56:51 windomav sendmail[16926]: l218uop1022148: SYSERR(root): Cannot exec /bin/bellmail: No such file or directory
Mar 4 04:56:51 windomav sendmail[16918]: l218uop1022148: to=, delay=2+20:00:00, xdelay=00:00:00, mailer=local, pri=6153182, dsn=4.0.0, stat=Operating system error

I can sendmail without a problem from this server to a server we use for alerting.

/bin/bellmail doesn't exist, there is however the following entry in sendmail.cf

sendmail.cf:Mlocal, P=/bin/bellmail, F=lsDFMAw5:/|@qmn9, S=EnvFromL/HdrFromL, R=EnvToL/HdrToL,

Has anyone seen anything like this before and know the reason why ?

TIA

Steve

Re: sendmail errors

Ivan Ferreira — Tue, 06 Mar 2007 13:02:12 GMT

It seems that bellmail is used in some old distributions to deliver mail to users mailboxes.

See:
http://www.securiteam.com/exploits/5FP0D2KFQQ.html

Probably, your configuration file was migrated from version to version and retained this legacy rule. Nowdays procmail is used.

Re: sendmail errors

Steven E. Protter — Tue, 06 Mar 2007 15:37:37 GMT

Shalom,

maillog is huge for various reasons.

log level is turned above the default 9 in sendmail.cf or sendmail.mc which generates sendmail.cf

logrotate is not used and the darned thing grows and grows and iis never trimmed.

There appears to be some customization to sendmail.cf or sendmail.mc macro file that is causing this bellmail program which is not on your OS to be run instead of the regular mail processing programs that ship with sendmail.

Perhaps you sendmail configuration was copied in from another system.

SEP