FIND

[Hunki]

I have this mail from a develop asking me to remove him from the distribution list, but I cannot find the script which generated the mail.I looked in cron , no luck , i grepped also in different dirs , no luck. Is there a way to find how this mail got generated.

[Jeff_Traigle]

Possibly being emailed to an alias on the system. Check /etc/mail/aliases to see if his username shows up anywhere. If you modify that file, you must run newaliases afterwards to generate the new database file that sendmail actually uses.

[Steven E. Protter]

find <script directory> -exec grep -l emailaddress {} \;

Example

find /usr -exec grep -l myaddress@yahoo.com {} \;


You can seach the whole system if you wish.


find / -exec grep -l myaddress@yahoo.com {} \;

SEP

[Geoff Wild]

Har to tell where it was generated - in /var/adm/syslog/maillog you fight be able to see when it was sent.

aliases would be the first place - he might be in there under a group...

Rgds...Geoff

[Hunki]

Its ( the mail ) from one of the application ids on the system to the develop.

[Hunki]

Currently searching the whole system as Steven suggested , doing a search through the subject which was there in the mail.

[Jeff_Traigle]

Another place to look, in that case, is to see if there is a .forward file in the application account's home directory. This could also be used to distribute the mail to other people.

[Sanjay_6]

Hi,

Maybe you can find out the time the mail was received by the user and the id that sent it. Then check your /var/adm/syslog/mail.log file to see if it was sent from this server by that id and that may help you isolate the application that may have run at that time, maybe a cron job or something.

Hope this helps.

regds

[Hunki]

Hard to find...:-(