From owner-freebsd-questions@FreeBSD.ORG  Fri Aug 22 08:37:38 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 1D17616A4BF
	for <freebsd-questions@freebsd.org>;
	Fri, 22 Aug 2003 08:37:38 -0700 (PDT)
Received: from rwcrmhc11.comcast.net (rwcrmhc11.comcast.net [204.127.198.35])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 6CE1443FBD
	for <freebsd-questions@freebsd.org>;
	Fri, 22 Aug 2003 08:37:35 -0700 (PDT)
	(envelope-from freebsd-questions-local@be-well.no-ip.com)
Received: from be-well.ilk.org (be-well.no-ip.com[66.30.200.37])
          by comcast.net (rwcrmhc11) with ESMTP
          id <2003082215163601300k5usre>; Fri, 22 Aug 2003 15:16:36 +0000
Received: from be-well.ilk.org (lowellg.ne.client2.attbi.com [66.30.200.37]
	(may be forged))
	by be-well.ilk.org (8.12.9/8.12.9) with ESMTP id h7MFGYMe097179;
	Fri, 22 Aug 2003 11:16:34 -0400 (EDT)
	(envelope-from freebsd-questions-local@be-well.no-ip.com)
Received: (from lowell@localhost)
	by be-well.ilk.org (8.12.9/8.12.6/Submit) id h7MFGUuC097176;
	Fri, 22 Aug 2003 11:16:30 -0400 (EDT)
X-Authentication-Warning: be-well.ilk.org: lowell set sender to
	freebsd-questions-local@be-well.ilk.org using -f
Sender: lowell@be-well.no-ip.com
To: Redmond Militante <r-militante@northwestern.edu>
References: <20030820124058.GA97094@darkpossum>
From: Lowell Gilbert <freebsd-questions-local@be-well.no-ip.com>
Date: 22 Aug 2003 11:16:30 -0400
In-Reply-To: <20030820124058.GA97094@darkpossum>
Message-ID: <44zni1yb75.fsf@be-well.ilk.org>
Lines: 29
User-Agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.3
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
cc: freebsd-questions@freebsd.org
Subject: Re: changed root alias/unusual system events
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Aug 2003 15:37:38 -0000

Redmond Militante <r-militante@northwestern.edu> writes:

> hi all
> 
> i have a general question, probably no big deal.  a while ago, i edited /etc/aliases and did 'new aliases', so that root's email account now points to one of my email accounts - i have logcheck set up as a cron job every fifteen minutes to notify me of unusual system events.
> 
> ever since this happened, the great majority of emails to root have looked like
> 
> --
> Subject: my.hostname.com 08/19/03:14.00 system check
> X-UIDL: 4%\!![P/"!lU=!!4=N!!
> 
> 
> Unusual System Events
> =-=-=-=-=-=-=-=-=-=-=
> Aug 19 13:45:01 chronicle sm-mta[28345]: h7JIj1ZT028345:
> +from=<root@my.hostname.com>, size=1061, class=0, nrcpts=1,
> +msgid=<200308191845.h7JIj1MM028343@my.hostname.com>, proto=ESMTP,
> +daemon=Daemon0, relay=localhost [127.0.0.1]
> Aug 19 13:45:01 chronicle sm-mta[28346]: h7JIj1ZT028345: to=me@my.pop.email,
> +ctladdr=<root@my.hostname.com> (0/0), delay=00:00:00, xdelay=00:00:00,
> +mailer=esmtp, pri=31400, relay=relay.my.mailserver [111.222.333.444], dsn=2.0.0,
> +stat=Sent (Mail accepted)
> 
> --
> 
> can someone  interpret this message for me?  i'm guessing that it's telling me that it just forwarded root's mail to my regular email account, which would be normal behavior, but i'm not sure...

That's sure what it looks like.