logwatch failing on mail to user
Claude Jones
claude_jones at levitjames.com
Sat Dec 9 21:24:54 UTC 2006
On Sat December 9 2006 3:56 pm, Wolfgang S. Rupprecht wrote:
> James Wilkinson <fedora at aprilcottage.co.uk> writes:
> > What is the sender e-mail address for the e-mail? What's the
> > domain name?
>
> If it is the logwatch mailing I can tell you exactly what the
> OP's problem is. The logwatch authors chose an sender name
> that doesn't exist in /etc/password. When Verizon does the
> smpt "finger-back" to see if the user-name really exists, it
> finds that user "logwatch" doesn't exist on the fedora box.
> It then thinks the email is spoofed and junks it.
>
> I have a similar problem here with logwatch that falls afoul
> of my *@wsrcc.com anti-spoofing filters. My filters notice
> that the claimed sender "logwatch at mydomain.com" doesn't exist
> and trashes the message. I found the simplest fix is to make
> the sender be root and have the human-name-string (gecos field
> for the old timers) be "Logwatch".
>
> To do that add this to the file
> /etc/logwatch/conf/logwatch.conf:
>
> MailFrom = root (Logwatch)
>
> ---- cut here ----
>
> -wolfgang
> --
> Wolfgang S. Rupprecht
> http://www.wsrcc.com/wolfgang/
Listen, all of you who are responding, I'm reading your
suggestions avidly, and I thank you for them. I haven't had time
to try any of your suggestions, or trouble-shoot further, but I
will devote some time to this tonight. It's funny, because my
denyhosts mailings suddenly started working, so something I did
in the last round has affected something - in this case, I'm
using a different mailto address, but, it wasn't working either,
before. Here's some of the header stuff from one of the header
messages from denyhosts:
Return-Path: <nobody at localhost.localdomain>
Delivery-Date: Fri, 08 Dec 2006 13:48:12 -0500
Received-SPF: none (mxus11: 70.109.86.228 is neither permitted
nor denied by domain of localhost.localdomain)
client-ip=70.109.86.228;
envelope-from=nobody at localhost.localdomain;
helo=localhost.localdomain;
Received: from [70.109.86.228] (helo=localhost.localdomain)
by mx.perfora.net (node=mxus11) with ESMTP (Nemesis),
id 0MKqNT-1GsklX3DPq-0000Iw for claudejones at tehogeeservices.com;
Fri, 08 Dec 2006 13:48:12 -0500
Received: from localhost.localdomain (localhost [127.0.0.1])
by localhost.localdomain (8.13.8/8.13.8) with ESMTP id
kB8ImBRl021315
for <claudejones at tehogeeservices.com>; Fri, 8 Dec 2006
13:48:11 -0500
Message-Id: <200612081848.kB8ImBRl021315 at localhost.localdomain>
From: DenyHosts <nobody at localhost.localdomain>
To: claudejones at tehogeeservices.com
Subject: DenyHosts Report from $Tehogee
Date: Fri, 08 Dec 2006 13:48:11 -0500
Envelope-To: claudejones at tehogeeservices.com
In this case, Verizon is not in the picture, and the user that's
sending the msg is a defined user, even though nobody...FWIW
--
Claude Jones
Brunswick, Md, USA
More information about the fedora-list
mailing list