sendmail errors

[steven Burgess_2]

Hi Everyone,

One of our support guys has requested I look at a filesystem capacity issue (/var). Having a look through to see why maillog is huge I have noticed the following errors

Mar 4 04:56:51 windomav sendmail[16926]: l218uop1022148: Warning: program /bin/bellmail unsafe: No such file or directory
Mar 4 04:56:51 windomav sendmail[16926]: l218uop1022148: SYSERR(root): Cannot exec /bin/bellmail: No such file or directory
Mar 4 04:56:51 windomav sendmail[16918]: l218uop1022148: to=, delay=2+20:00:00, xdelay=00:00:00, mailer=local, pri=6153182, dsn=4.0.0, stat=Operating system error

I can sendmail without a problem from this server to a server we use for alerting.

/bin/bellmail doesn't exist, there is however the following entry in sendmail.cf

sendmail.cf:Mlocal, P=/bin/bellmail, F=lsDFMAw5:/|@qmn9, S=EnvFromL/HdrFromL, R=EnvToL/HdrToL,

Has anyone seen anything like this before and know the reason why ?

TIA

Steve

[Ivan Ferreira · Accepted solution]

It seems that bellmail is used in some old distributions to deliver mail to users mailboxes.

See:
http://www.securiteam.com/exploits/5FP0D2KFQQ.html

Probably, your configuration file was migrated from version to version and retained this legacy rule. Nowdays procmail is used.

[Steven E. Protter]

Shalom,

maillog is huge for various reasons.

log level is turned above the default 9 in sendmail.cf or sendmail.mc which generates sendmail.cf

logrotate is not used and the darned thing grows and grows and iis never trimmed.

There appears to be some customization to sendmail.cf or sendmail.mc macro file that is causing this bellmail program which is not on your OS to be run instead of the regular mail processing programs that ship with sendmail.

Perhaps you sendmail configuration was copied in from another system.

SEP