# which mail /bin/mail # strings /bin/mail | grep sendmail [- sendmail-options ...] /usr/sbin/sendmail # ls -l /usr/sbin/sendmail lrwxrwxrwx 1 root qmail 28 Mar 3 19:13 /usr/sbin/sendmail -> ../../var/qmail/bin/sendmail # ls -l /etc/alternatives/mta ls: /etc/alternatives/mta: No such file or directory # ps -ef | grep syslog root 1824 1 0 Apr10 ? 00:02:11 syslogd -m 0 # strace -o /root/strace_mail.txt mail -s 'test msg 6:52am' randomx@cox.net execve("/bin/mail", ["mail", "-s", "test msg 6:52am", "randomx@cox.net"], [/* 21 vars */]) = 0 uname({sys="Linux", node="spin4", ...}) = 0 brk(0) = 0xa010000 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) open("/etc/ld.so.cache", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=34334, ...}) = 0 old_mmap(NULL, 34334, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7ff7000 close(3) = 0 open("/lib/tls/libc.so.6", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\20/\224"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0755, st_size=1454462, ...}) = 0 old_mmap(0x92e000, 1219772, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x92e000 old_mmap(0xa52000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x124000) = 0xa52000 old_mmap(0xa56000, 7356, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xa56000 close(3) = 0 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ff6000 mprotect(0xa52000, 4096, PROT_READ) = 0 mprotect(0x92a000, 4096, PROT_READ) = 0 set_thread_area({entry_number:-1 -> 6, base_addr:0xb7ff68e0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0 munmap(0xb7ff7000, 34334) = 0 getegid32() = 0 getgid32() = 0 setgid32(0) = 0 rt_sigaction(SIGCHLD, {0x8052ca4, [CHLD], SA_RESTORER|SA_RESTART, 0x9558c8}, {SIG_DFL}, 8) = 0 ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0 brk(0) = 0xa010000 brk(0xa031000) = 0xa031000 stat64("/tmp/", {st_mode=S_IFDIR|S_ISVTX|0777, st_size=4096, ...}) = 0 gettimeofday({1146837180, 300905}, NULL) = 0 getpid() = 13347 lstat64("/tmp/RsJhsL3D", 0xbffa3d88) = -1 ENOENT (No such file or directory) stat64("/tmp/", {st_mode=S_IFDIR|S_ISVTX|0777, st_size=4096, ...}) = 0 lstat64("/tmp/RqjBTVkL", 0xbffa3d88) = -1 ENOENT (No such file or directory) stat64("/tmp/", {st_mode=S_IFDIR|S_ISVTX|0777, st_size=4096, ...}) = 0 lstat64("/tmp/RmXgp7BS", 0xbffa3d88) = -1 ENOENT (No such file or directory) stat64("/tmp/", {st_mode=S_IFDIR|S_ISVTX|0777, st_size=4096, ...}) = 0 lstat64("/tmp/RetbYjTZ", 0xbffa3d88) = -1 ENOENT (No such file or directory) stat64("/tmp/", {st_mode=S_IFDIR|S_ISVTX|0777, st_size=4096, ...}) = 0 lstat64("/tmp/Rxz7uxa7", 0xbffa3d88) = -1 ENOENT (No such file or directory) ioctl(1, TIOCGWINSZ, {ws_row=43, ws_col=103, ws_xpixel=618, ws_ypixel=602}) = 0 ioctl(1, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0 open("/etc/mail.rc", O_RDONLY) = 3 fcntl64(3, F_GETFL) = 0 (flags O_RDONLY) fstat64(3, {st_mode=S_IFREG|0644, st_size=112, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7fff000 _llseek(3, 0, [0], SEEK_CUR) = 0 fcntl64(3, F_SETFD, FD_CLOEXEC) = 0 read(3, "set ask askcc append dot save cr"..., 4096) = 112 read(3, "", 4096) = 0 close(3) = 0 munmap(0xb7fff000, 4096) = 0 stat64("/root/.mailrc", 0xbffa4dcc) = -1 ENOENT (No such file or directory) rt_sigprocmask(SIG_BLOCK, [HUP INT], [], 8) = 0 rt_sigaction(SIGINT, {SIG_IGN}, {SIG_DFL}, 8) = 0 rt_sigaction(SIGINT, {0x804d372, [INT], SA_RESTORER|SA_RESTART, 0x9558c8}, {SIG_IGN}, 8) = 0 rt_sigaction(SIGHUP, {SIG_IGN}, {SIG_DFL}, 8) = 0 rt_sigaction(SIGHUP, {0x804d346, [HUP], SA_RESTORER|SA_RESTART, 0x9558c8}, {SIG_IGN}, 8) = 0 rt_sigaction(SIGTSTP, {0x804d1fa, [TSTP], SA_RESTORER|SA_RESTART, 0x9558c8}, {SIG_DFL}, 8) = 0 rt_sigaction(SIGTTOU, {0x804d1fa, [TTOU], SA_RESTORER|SA_RESTART, 0x9558c8}, {SIG_DFL}, 8) = 0 rt_sigaction(SIGTTIN, {0x804d1fa, [TTIN], SA_RESTORER|SA_RESTART, 0x9558c8}, {SIG_DFL}, 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [HUP INT], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [HUP INT], 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 open("/tmp/RsJhsL3D", O_RDWR|O_CREAT|O_EXCL, 0666) = 3 fcntl64(3, F_GETFL) = 0x2 (flags O_RDWR) fstat64(3, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7fff000 _llseek(3, 0, [0], SEEK_CUR) = 0 fcntl64(3, F_SETFD, FD_CLOEXEC) = 0 unlink("/tmp/RsJhsL3D") = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 fstat64(0, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 0), ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ffe000 read(0, "testing 123\n", 1024) = 12 read(0, ".\n", 1024) = 2 write(3, "testing 123\n", 12) = 12 _llseek(3, 0, [0], SEEK_SET) = 0 rt_sigprocmask(SIG_BLOCK, [HUP INT], NULL, 8) = 0 rt_sigaction(SIGINT, {SIG_DFL}, {0x804d372, [INT], SA_RESTORER|SA_RESTART, 0x9558c8}, 8) = 0 rt_sigaction(SIGHUP, {SIG_DFL}, {0x804d346, [HUP], SA_RESTORER|SA_RESTART, 0x9558c8}, 8) = 0 rt_sigaction(SIGTSTP, {SIG_DFL}, {0x804d1fa, [TSTP], SA_RESTORER|SA_RESTART, 0x9558c8}, 8) = 0 rt_sigaction(SIGTTOU, {SIG_DFL}, {0x804d1fa, [TTOU], SA_RESTORER|SA_RESTART, 0x9558c8}, 8) = 0 rt_sigaction(SIGTTIN, {SIG_DFL}, {0x804d1fa, [TTIN], SA_RESTORER|SA_RESTART, 0x9558c8}, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 rt_sigaction(SIGTSTP, {SIG_DFL}, {SIG_DFL}, 8) = 0 rt_sigaction(SIGTTOU, {SIG_DFL}, {SIG_DFL}, 8) = 0 rt_sigaction(SIGTTIN, {SIG_DFL}, {SIG_DFL}, 8) = 0 ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigaction(SIGINT, {0x8055713, [INT], SA_RESTORER|SA_RESTART, 0x9558c8}, {SIG_DFL}, 8) = 0 fstat64(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 0), ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ffd000 write(1, "Cc: ", 4) = 4 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigaction(SIGTSTP, {0x8055678, [TSTP], SA_RESTORER|SA_RESTART, 0x9558c8}, {SIG_DFL}, 8) = 0 rt_sigaction(SIGTTOU, {0x8055678, [TTOU], SA_RESTORER|SA_RESTART, 0x9558c8}, {SIG_DFL}, 8) = 0 rt_sigaction(SIGTTIN, {0x8055678, [TTIN], SA_RESTORER|SA_RESTART, 0x9558c8}, {SIG_DFL}, 8) = 0 read(0, "\n", 1024) = 1 rt_sigaction(SIGTSTP, {SIG_DFL}, {0x8055678, [TSTP], SA_RESTORER|SA_RESTART, 0x9558c8}, 8) = 0 rt_sigaction(SIGTTOU, {SIG_DFL}, {0x8055678, [TTOU], SA_RESTORER|SA_RESTART, 0x9558c8}, 8) = 0 rt_sigaction(SIGTTIN, {SIG_DFL}, {0x8055678, [TTIN], SA_RESTORER|SA_RESTART, 0x9558c8}, 8) = 0 rt_sigaction(SIGTSTP, {SIG_DFL}, {SIG_DFL}, 8) = 0 rt_sigaction(SIGTTOU, {SIG_DFL}, {SIG_DFL}, 8) = 0 rt_sigaction(SIGTTIN, {SIG_DFL}, {SIG_DFL}, 8) = 0 rt_sigaction(SIGINT, {SIG_DFL}, {0x8055713, [INT], SA_RESTORER|SA_RESTART, 0x9558c8}, 8) = 0 fstat64(3, {st_mode=S_IFREG|0644, st_size=12, ...}) = 0 time([1146837186]) = 1146837186 open("/etc/localtime", O_RDONLY) = 4 fstat64(4, {st_mode=S_IFREG|0644, st_size=130, ...}) = 0 fstat64(4, {st_mode=S_IFREG|0644, st_size=130, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ffc000 read(4, "TZif\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\3\0\0\0\3\0"..., 4096) = 130 close(4) = 0 munmap(0xb7ffc000, 4096) = 0 open("/tmp/RsJhsL3D", O_WRONLY|O_CREAT|O_EXCL, 0666) = 4 fcntl64(4, F_GETFL) = 0x1 (flags O_WRONLY) fstat64(4, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ffc000 _llseek(4, 0, [0], SEEK_CUR) = 0 fcntl64(4, F_SETFD, FD_CLOEXEC) = 0 open("/tmp/RsJhsL3D", O_RDONLY) = 5 fcntl64(5, F_GETFL) = 0 (flags O_RDONLY) fstat64(5, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ffb000 _llseek(5, 0, [0], SEEK_CUR) = 0 fcntl64(5, F_SETFD, FD_CLOEXEC) = 0 stat64("/tmp/RsJhsL3D", {st_mode=S_IFREG|0644, st_size=0, ...}) = 0 unlink("/tmp/RsJhsL3D") = 0 read(3, "testing 123\n", 4096) = 12 read(3, "", 4096) = 0 write(4, "To: randomx@cox.net\nSubject: tes"..., 58) = 58 close(4) = 0 munmap(0xb7ffc000, 4096) = 0 close(3) = 0 munmap(0xb7fff000, 4096) = 0 _llseek(5, 0, [0], SEEK_SET) = 0 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0xb7ff6928) = 13356 rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 close(5) = 0 munmap(0xb7ffb000, 4096) = 0 munmap(0xb7ffd000, 4096) = 0 exit_group(0) = ? On 5/4/06, Jeremy C. Reed wrote: > > On Thu, 4 May 2006, Randy Melder wrote: > > > So here's the message: > > mail -s 'test msg 9:18pm' randomx@cox.net > > testing 123 > > . > > Cc: > > > > And log results: > > tail --lines 1000 maillog | grep cox > > [nothing] > > tail --lines 1000 qmail/smtp/current | grep cox > > [nothing] > > > > Any other log files I should be inspecting? > > You could try to track down your sendmail first. > > For example: > > # which mail > /bin/mail > # strings /bin/mail | grep sendmail > [- sendmail-options ...] > /usr/sbin/sendmail > # ls -l /usr/sbin/sendmail > lrwxrwxrwx 1 root root 21 Apr 21 23:38 /usr/sbin/sendmail -> > /etc/alternatives/mta > # ls -l /etc/alternatives/mta > lrwxrwxrwx 1 root root 27 Apr 21 23:38 /etc/alternatives/mta -> > /usr/sbin/sendmail.sendmail > > > Also you have to make sure your syslogger is even logging. > > You could use strace to run mail and to follow its descendents. > > Jeremy C. Reed > > echo 'I7@87944:;6<754372=9=?48812=7043:>' | tr '0-@' 'wutrofn mlkige.ca' > --------------------------------------------------- > PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us > To subscribe, unsubscribe, or to change you mail settings: > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss > -- ..::Randy Melder::.. Need Internet programming and multimedia? http://www.spininternetmedia.com/ Need a domain name and/or economy hosting? http://spindomains.us/