OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
(no subject)

From: Gary D. Margiotta (garytbe.net)
Date: Wed Mar 29 2006 - 12:43:26 CST


> Unfortunately I inherited the servers and do not know exactly what was
> installed on them. Here is a bigger snippet of the log file:

[snip]

> How can I tell if I am using the sendmail binary from postfix?
>
> Would that explain the occasional sendmail processes that I see in the
> maillog?

I had a similar problem after building world on one of my FreeBSD boxes,
where it overwrote the previously installed postfix sendmail, and put the
newly built system sendmail back on top of it (even though I told it not
to, but hey).

Find out where sendmail is installed, and do an ls -l on it. On my BSD
system, sendmail was a link to a mailwrapper script after the world build,
whereas the postfix installed sendmail binary was a regular binary file.

Other than that you could possibly look at the install date on your
postfix binaries or library files, or whatever, and compare that to the
date on the sendmail binary.

On my systems, sendmail lived in /usr/sbin/sendmail.

Also, do a find on your system to see if sendmail is installed in more
than 1 place, you could be calling the wrong binary.

-Gary

> Thanks
>
> Glen
> -----Original Message-----
> From: owner-postfix-userspostfix.org
> [mailto:owner-postfix-userspostfix.org] On Behalf Of Sandy Drobic
> Sent: Wednesday, March 29, 2006 10:29 AM
> To: postfix-userspostfix.org
> Subject: Re:
>
> John Peach wrote:
>> On Wed, 29 Mar 2006 10:08:03 -0800
>> "Bunting, Glen, IG" <GBunting864Worldsavings.com> wrote:
>>
>>
>>> Sandy,
>>>
>>> I have verified than I am running postfix:
>>
>> [snip]
>>
>>>> Output from maillog:
>>>>
>>>> Mar 29 09:53:16 sl2smtp12 sendmail[2617]: k2THqjqe002617:
>>>
>>> from=ig864gb,
>>>
>>>> size=62, class=0, nrcpts=1,
>>>> msgid=<200603291752.k2THqjqe002617sl2smtp12.wsecomsl.com>,
>>>> relay=ig864gblocalhost
>>>> Mar 29 09:53:16 sl2smtp12 sendmail[2617]: k2THqjqe002617:
>>>> to=testgmail.com, delay=00:00:31, mailer=esmtp, pri=30062,
>>>> dsn=4.4.3, stat=queued
>>
>>
>> You are not running sendmail as a daemon, but the binary is obviously
>> still there and being used for locally submitted mail.
>
> That would be an explanation for the sendmail log while running the
> postfix master. I hadn't thought of that, though it does crop up again
> and
> again.
>
> Many scripts and filters also make use of sendmail, that makes it urgent
>
> to make sure you are using the sendmail binary from postfix.
>
> Sandy
>
>
> *****************************************************************************
> If you are not the intended recipient of this e-mail, please notify
> the sender immediately. The contents of this e-mail do not amend
> any existing disclosures or agreements unless expressly stated.
> *****************************************************************************
>