Sendmail

[manny_9]

One more question!

I just remebered. When I sent kill -9 sendmail. There was one service that was associated with sendmail that I left alone , i wasn't sure what it was.I saw it when I did "sendmail status". It was something like (pid) can't remember specifically i am at home. Should I kill that service before restart???

The reason sendmail was shut down, was internal users (win98) had SOBIG-f in thier outlook express. The redhat server did not detect the worm???Everything up to date! Can't figure out the worms entry point.Could it have been internal.

Thanks

[Stuart Browne]

If the 'queue runner' was also running (or sm-client), then yes, you should kill that one as well.

Sendmail does not do any Virus detection, unless you have explicitly set that sort of thing up.

[Steven E. Protter]

Fred,

The worms entry point was probably not internal.

I will say this, sendmail will accept and tranmit mail, including virus attachments without any effect on the Linux or HP-UX system.

When nailing sendmail, there could be multiple active processes. To get sendmail with kill commands, this little script(attached) will do the trick.

In your scenario, you should first to this:

service sendmail stop

gkill sendmail (or any possible client processes)

The utility will list the processes set to die and then make them die with good reliability.

SEP

[Steven E. Protter]

Sorry, here is the post with attachment as promised.

Fred,

The worms entry point was probably not internal.

I will say this, sendmail will accept and tranmit mail, including virus attachments without any effect on the Linux or HP-UX system.

When nailing sendmail, there could be multiple active processes. To get sendmail with kill commands, this little script(attached) will do the trick.

In your scenario, you should first to this:

service sendmail stop

gkill sendmail (or any possible client processes)

The utility will list the processes set to die and then make them die with good reliability.



SEP

[Stuart Browne]

For confusion's sake, the linux version of 'killall' will do the same thing.

killall -9 sendmail

will find *ANY* sendmail process and send it a KILL (9) signal.

Beware using 'killall' on different platforms however. Some platforms version of 'killall' does just that, kills all processes..

[manny_9]

Hey!!!!

I just wanted to say Thanks again to everyone!!!