Re: qmail-scanner-2.02st log

Glenn Remstedt wrote:
> hi list,
> i have an QMS-2.02st installed together with clamav+SA. the log down here is showing 
> something happening as far as i know, every morning at this very same time. could you do 
> point me to on where i should look into for to have this sorted out - or is this running 
> in normal behavior - if it is - what is this saying?
>
> tail -1000f /var/log/maillog | tai64nlocal
> Apr  2 02:17:03 remstedt sendmail[5272]: m320H1jN005272: from=root, size=371, class=0, 
> nrcpts=1, msgid=<[email protected]>, relay=root@localhost
>   
It appears you have both qmail AND sendmail installed and operating on 
remstedt! You can't do that - get rid of sendmail

I can't even figure out how this could have happened. Was this a "by 
hand" install of Qmail? If so, you have to remove the 
/usr/sbin/sendmail, /usr/lib/sendmail and link them to 
/var/qmail/bin/sendmail - so that the "system mail" continues to work.

Also, sendmail is getting rejected when it tries to connect to localhost 
port 25. That shouldn't happen either. qmail-smtpd it typically 
installed to run on all interfaces - which would include localhost. 
Sounds like you've mapped it to just one or something? If you replace 
the sendmail binaries with qmail, this problem will disappear anyway - 
qmail doesn't talk to qmail-smtpd for local transactions.



-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1


-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace