Unix administration - additional tracking info:

This is Interesting: Free IT Magazines  
Home > Archive > Unix administration > March 2004 > additional tracking info:





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author additional tracking info:
inussd

2004-03-13, 3:34 pm

Thanks so much for the help. I trcked one of the syslog entrance and
their corresponded mail header in the mqueue

syslog:

Mar 12 12:44:40 bvery sendmail[28657]: i28EZ1302536:
to=<kashlz@syndicatesales.biz>, delay=4+06:09:39, xdelay=00:00:00,
mailer=esmtp, pri=31624635, relay=mx2.syndicatesales.biz., dsn=4.0.0,
stat=Deferred: Connection refused by mx2.syndicatesales.biz.


mqueue header:
V4
T1078756501
K1079124280
N352
P31624635
I0/4/447896
B8BITMIME
MDeferred: Connection refused by mx2.syndicatesales.biz.
Fr
$_localhost
$r
$slocalhost
${daemon_flags}
${if_addr}199.125.225.21
SMAILER-DAEMON
RPF:<kashlz@syndicatesales.biz>
H?P?Return-Path: <g>
H??Received: from localhost (localhost)
by bvery.mycompany.com (8.11.6+Sun/8.11.6) id i28EZ1302536;
Mon, 8 Mar 2004 06:35:01 -0800 (PST)
H?D?Date: Mon, 8 Mar 2004 06:35:01 -0800 (PST)
H?F?From: Mail Delivery Subsystem <MAILER-DAEMON>
H?x?Full-Name: Mail Delivery Subsystem
H?M?Message-Id: <200403081435.i28EZ1302536@bvery.mycompany.com>
H??To: <kashlz@syndicatesales.biz>
H??MIME-Version: 1.0
H??Content-Type: multipart/report; report-type=delivery-status;
boundary="i28EZ1302536.1078756501/bvery.mycompany.com"
H??Content-Transfer-Encoding: 8bit
H??Subject: Returned mail: see transcript for details
H??Auto-Submitted: auto-generated (failure)


I am not so sure if this mail was orginated from my local hosts (some
internal scripts/job)? or is it possible that it comes from my
Exchange server which pipe the mail to this sun server before being
send it out to the outside world?

Thanks again!
those who know me have no need of my name

2004-03-13, 7:34 pm

in comp.unix.admin i read:

>$_localhost


>SMAILER-DAEMON


>H??Content-Type: multipart/report; report-type=delivery-status;


>I am not so sure if this mail was orginated from my local hosts (some
>internal scripts/job)?


your system is returning a delivery status notification (see the associated
df file for the transcript). do you have a a backup mx? if so it's likely
that it forwarded a message to your system for a user that does not exist
and this message is the result.

>is it possible that it comes from my
>Exchange server which pipe the mail to this sun server before being
>send it out to the outside world?


no, the `peer' (the $_ line) is localhost, hence it originated on your
server. read the body of the message for the original source.

--
a signature
Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com