sendmail error

[SILVERSTAR]

Hi,
I am getting the following error in /var/adm/syslog/mail.log :
Aug 3 17:26:39 arwdbs01 sendmail[10964]: RAA10964: to=2, delay=00:00:00, mailer=local, stat=User unknown
Aug 3 17:26:39 arwdbs01 sendmail[10964]: RAA10964: from=root, size=3455, class=0, pri=33455, nrcpts=1, msgid=<200408031526.RAA10964
@arwdbs01.arrowitaly.com>, relay=root@localhost
Aug 3 17:27:19 arwdbs01 sendmail[10973]: gethostbyaddr(192.0.0.1) failed: 1

=======

The msgid=<200408031526.RAA10964 is the message body ?
Where it is located ?
I need to find out who (job or person) is trying to send this mail to a user called "2"

This is recursively happening

many thanks
Angelo

[Steven E. Protter]

You might want to turn on enhaced logging.

This can be done in sendmail.cf

LogLevel=

The default is 9

Turning it up to 12 should get you more information about who is sending the bad mail.

Then.

/sbin/init.d/sendmail stop
/sbin/init.d/sendmail start

SEP

[SILVERSTAR]

Hi Scott,
I reaised to log level to 12 but I do not see any additional interesting information.

Is there any way to get the body of a message by using the value msgid=<200408031526.RAA10964.

regards.
Angelo

[Steve Steel]

Hi

There are some good suggestions in


www.sendmail.org


search

user unknown

Steve Steel

[Scott Mitchell]

Angelo,

In /etc/mail/aliases, add the entry "2 : root" under the section '# Local Aliases', then run /usr/sbin/newaliases. The emails to '2' will be redirected to root's mail. Then you can read them to figure out who/what/when/why.

Scott