LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 05-29-2006, 10:06 PM   #1
leventis
LQ Newbie
 
Registered: Jan 2002
Posts: 12

Rep: Reputation: 0
Exclamation Sendmail Log unknown relay address (cron message)


Some background info:
I am behind a router, I run fedora core 4 and my sendmail is 8.13.4 access from outside is not possible to sendmail at least.

/etc/mail/access
# by default we allow relaying from localhost...
localhost.localdomain RELAY
localhost RELAY
127.0.0.1 RELAY

From the little I know about sendmail, you can't relay any messages to other hostnames.

To my problem:
May 28 13:47:41 myBox sendmail[2245]: k4SAZcqW002245: to=<root@myBox.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=31954, relay=foreign.host, dsn=4.0.0, stat=Deferred: Connection timed out with foreing.host.

There are numerous lines on my Mail Log file similar to the above.



Return-Path: <root@foreign.box>
Received: from myBox.com (myBox.com [127.0.0.1])
by myBox.com(8.13.4/8.13.4) with ESMTP id k4R14buS017459
for <root@myBox.com>; Sat, 27 May 2006 04:04:37 +0300
Received: (from root@localhost)
by myBox.com (8.13.4/8.13.4/Submit) id k4R123SV014333;
Sat, 27 May 2006 04:02:03 +0300
Date: Sat, 27 May 2006 04:02:03 +0300
Message-Id: <200605270102.k4R123SV014333@myBox.com>
From: root@foreign.host (Cron Daemon)
To: root@foreign.host
Subject: Cron <root@orion> run-parts /etc/cron.daily
X-Cron-Env: <SHELL=/bin/bash>
X-Cron-Env: <PATH=/sbin:/bin:/usr/sbin:/usr/bin>
X-Cron-Env: <MAILTO=root>
X-Cron-Env: <HOME=/>
X-Cron-Env: <LOGNAME=root>
X-Cron-Env: <USER=root>

/etc/cron.daily/00webalizer:

Warning: Truncating oversized request field
Skipping bad record (124)
/etc/cron.daily/prelink:

/etc/sysconfig/prelink: line 14: --no-exec-shield: command not found


Most messages include the /etc/cron.daily/prelink:

Subject: Cron <root@myBox> run-parts /etc/cron.daily
X-Cron-Env: <SHELL=/bin/bash>
X-Cron-Env: <PATH=/sbin:/bin:/usr/sbin:/usr/bin>
X-Cron-Env: <MAILTO=root>
X-Cron-Env: <HOME=/>
X-Cron-Env: <LOGNAME=root>
X-Cron-Env: <USER=root>

/etc/cron.daily/prelink:

/etc/sysconfig/prelink: line 14: --no-exec-shield: command not found

After doing some reasearch I noticed that most cron jobs have to do with the local host and without any foreing host. Why would the thing above happen.

If someone could enlighten me what is going on, I would be more than greatfull. I hope this is relevant to security...
 
Old 05-31-2006, 07:55 AM   #2
linuxmanju
Member
 
Registered: Sep 2003
Location: India
Distribution: Debian
Posts: 50

Rep: Reputation: 15
/etc/mail/access
# by default we allow relaying from localhost...
localhost.localdomain RELAY
localhost RELAY
127.0.0.1 RELAY

From the little I know about sendmail, you can't relay any messages to other hostnames.

Wrong. What that means is that Other machines can not relay messages from your Machine. However your machine is able to send mails to any other machine.

It would be helpfull to know which one is myBox.com. Is it your own box or somebody else's Box.

Regards
Manjunath
 
Old 05-31-2006, 02:23 PM   #3
leventis
LQ Newbie
 
Registered: Jan 2002
Posts: 12

Original Poster
Rep: Reputation: 0
First of all thanks for answering.
MyBox.com refers to my desktop pc[localhost, hostname]. Foreign host is a different server somewhere on the internet. I just don't know if it's ok to post actuall addresses.

Last edited by leventis; 05-31-2006 at 04:56 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
cron 'test' message in my /var/log/messages file visaris Linux - Newbie 1 12-13-2004 04:03 PM
SuSE Firewall - unknown log message ithawtewrong Linux - Security 1 10-14-2004 03:47 PM
sendmail relay same domain address alphanumeric Linux - Software 0 03-30-2004 08:39 PM
Sendmail error: Unknown Address batmite Linux - Newbie 1 12-20-2003 07:46 AM
Unknown sendmail log entry error robeb Linux - General 5 06-26-2003 05:23 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 01:31 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration