[SOLVED] Stopping sendmail auto generated messages

fogpipe · 04-09-2014, 06:39 PM

Every time i try to start sendmail roots mailboxes immediately fill up with hundreds of copies of the below message. I have checked and i dont have a program called "hddtemp" on my system. The bolding in the below is mine. Im posting this in the slackware forum because it must be some sort of system config problem. I have never seen anything like this before, anyone know what program is sending these emails?

Code:

The original message was received at Wed, 9 Apr 2014 19:28:57 -0400
from localhost [127.0.0.1]

   ----- The following addresses had permanent fatal errors -----
<root@odin.aesgard.net>
    (reason: 553 5.3.5 system config error)

   ----- Transcript of session follows -----
553 5.3.5 localhost.aesgard.net. config error: mail loops back to me (MX problem?)
554 5.3.5 Local configuration error

Part 3.2:
Content-Type: message/delivery-status


Part 3.3:
Content-Type: message/rfc822

From root@localhost.aesgard.net Wed Apr  9 19:28:57 2014
Return-Path: <root@localhost.aesgard.net>
Date: Sun, 23 Mar 2014 12:32:45 -0400                                          
To: root@localhost.aesgard.net
From: m0rl0ck@localhost.aesgard.net
Auto-Submitted: auto-generated
Subject: *** SECURITY information for odin ***

odin : Mar 23 12:32:45 : m0rl0ck : user NOT in sudoers ; TTY=unknown ; PWD=/home/m0rl0ck ; USER=root ; COMMAND=hddtemp /dev/sdb

Emerson · 04-09-2014, 06:53 PM

It says it is system configuration error. As a matter of fact, it is system configuration error.

fogpipe · 04-09-2014, 07:07 PM

Quote:

Originally Posted by Emerson

It says it is system configuration error. As a matter of fact, it is system configuration error.

no kidding. I meant that it is not JUST a sendmail config error, its a system config error that something is trying to send the email at all.
I started sendmail to begin configuring it but that is impossible while something is using it to send spam. Im looking for help on figuring out what that something is.

unSpawn · 04-09-2014, 07:26 PM

Quote:

Originally Posted by fogpipe

its a system config error that something is trying to send the email at all.

Isn't that:

Code:

Auto-Submitted: auto-generated
Subject: *** SECURITY information for odin ***

odin : Mar 23 12:32:45 : m0rl0ck : user NOT in sudoers ; TTY=unknown ; PWD=/home/m0rl0ck ; USER=root ; COMMAND=hddtemp /dev/sdb

typically Sudo? Check the cron spools?

fogpipe · 04-09-2014, 08:29 PM

Quote:

Originally Posted by unSpawn

Isn't that:

typically Sudo? Check the cron spools?

Thanks for the tip. I checked the cron spools and the atd config and couldnt find anything.
It is fixed and im not sure what fixed it.
What i did was log out all the users and started killing processes in runlevel 3 and starting and stopping sendmail to test.
When i killed the udevd daemon the problem disappeared. I cleared the clientmqueue and mqueue directories and rebooted and the problem has yet to reappear. I still dont know what happened or how i fixed it really. My only theory is that when i was playing with lm-sensors a couple of days ago something got stored somewhere that was sending this mail.
Thing is the mail was dated to the time i started sendmail to test it.
If anyone has another theory id love to hear it.