LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Slackware (https://www.linuxquestions.org/questions/slackware-14/)
-   -   Stopping sendmail auto generated messages (https://www.linuxquestions.org/questions/slackware-14/stopping-sendmail-auto-generated-messages-4175501157/)

fogpipe 04-09-2014 06:39 PM

Stopping sendmail auto generated messages
 
Every time i try to start sendmail roots mailboxes immediately fill up with hundreds of copies of the below message. I have checked and i dont have a program called "hddtemp" on my system. The bolding in the below is mine. Im posting this in the slackware forum because it must be some sort of system config problem. I have never seen anything like this before, anyone know what program is sending these emails?

Code:

The original message was received at Wed, 9 Apr 2014 19:28:57 -0400
from localhost [127.0.0.1]

  ----- The following addresses had permanent fatal errors -----
<root@odin.aesgard.net>
    (reason: 553 5.3.5 system config error)

  ----- Transcript of session follows -----
553 5.3.5 localhost.aesgard.net. config error: mail loops back to me (MX problem?)
554 5.3.5 Local configuration error

Part 3.2:
Content-Type: message/delivery-status


Part 3.3:
Content-Type: message/rfc822

From root@localhost.aesgard.net Wed Apr  9 19:28:57 2014
Return-Path: <root@localhost.aesgard.net>
Date: Sun, 23 Mar 2014 12:32:45 -0400                                         
To: root@localhost.aesgard.net
From: m0rl0ck@localhost.aesgard.net
Auto-Submitted: auto-generated
Subject: *** SECURITY information for odin ***

odin : Mar 23 12:32:45 : m0rl0ck : user NOT in sudoers ; TTY=unknown ; PWD=/home/m0rl0ck ; USER=root ; COMMAND=hddtemp /dev/sdb


Emerson 04-09-2014 06:53 PM

It says it is system configuration error. As a matter of fact, it is system configuration error.

fogpipe 04-09-2014 07:07 PM

Quote:

Originally Posted by Emerson (Post 5149766)
It says it is system configuration error. As a matter of fact, it is system configuration error.

no kidding. I meant that it is not JUST a sendmail config error, its a system config error that something is trying to send the email at all.
I started sendmail to begin configuring it but that is impossible while something is using it to send spam. Im looking for help on figuring out what that something is.

unSpawn 04-09-2014 07:26 PM

Quote:

Originally Posted by fogpipe (Post 5149775)
its a system config error that something is trying to send the email at all.

Isn't that:
Code:

Auto-Submitted: auto-generated
Subject: *** SECURITY information for odin ***

odin : Mar 23 12:32:45 : m0rl0ck : user NOT in sudoers ; TTY=unknown ; PWD=/home/m0rl0ck ; USER=root ; COMMAND=hddtemp /dev/sdb

typically Sudo? Check the cron spools?

fogpipe 04-09-2014 08:29 PM

Quote:

Originally Posted by unSpawn (Post 5149782)
Isn't that:

typically Sudo? Check the cron spools?

Thanks for the tip. I checked the cron spools and the atd config and couldnt find anything.
It is fixed and im not sure what fixed it.
What i did was log out all the users and started killing processes in runlevel 3 and starting and stopping sendmail to test.
When i killed the udevd daemon the problem disappeared. I cleared the clientmqueue and mqueue directories and rebooted and the problem has yet to reappear. I still dont know what happened or how i fixed it really. My only theory is that when i was playing with lm-sensors a couple of days ago something got stored somewhere that was sending this mail.
Thing is the mail was dated to the time i started sendmail to test it.
If anyone has another theory id love to hear it.


All times are GMT -5. The time now is 08:30 PM.