From owner-freebsd-questions@FreeBSD.ORG Fri May 27 04:27:38 2011 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6AD17106564A for ; Fri, 27 May 2011 04:27:38 +0000 (UTC) (envelope-from jon@radel.com) Received: from wave.radel.com (wave.radel.com [216.143.151.4]) by mx1.freebsd.org (Postfix) with ESMTP id 297F08FC0C for ; Fri, 27 May 2011 04:27:37 +0000 (UTC) Received: by wave.radel.com (CommuniGate Pro PIPE 4.1.6) with PIPE id 10193513; Fri, 27 May 2011 00:27:37 -0400 Received: from [192.168.43.232] (account jon@radel.com HELO gravenstein.local) by wave.radel.com (CommuniGate Pro SMTP 4.1.6) with ESMTP-TLS id 10193510 for freebsd-questions@freebsd.org; Fri, 27 May 2011 00:27:23 -0400 Message-ID: <4DDF282A.8030005@radel.com> Date: Fri, 27 May 2011 00:27:22 -0400 From: Jon Radel User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.17) Gecko/20110414 Thunderbird/3.1.10 MIME-Version: 1.0 To: freebsd-questions@freebsd.org References: <3389310281-258946398@intranet.com.mx> <4DDF2366.4010100@esiee.fr> <3389314668-258946399@intranet.com.mx> In-Reply-To: <3389314668-258946399@intranet.com.mx> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-Radel.com-MailScanner-Information: Please contact Jon for more information X-Radel.com-MailScanner: Found to be clean X-Mailer: CommuniGate Pro CLI mailer Subject: Re: Disable or limit email in root? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 May 2011 04:27:38 -0000 On 5/27/11 12:16 AM, Jorge Biquez wrote: > > Hello. > > I am trying to find if sendmail was the problem or what... thing is not > that root receive email but that root was used to send email to a list > of address... And what does it say in the logs? We'll help you interpret them if you wish, but right now I've heard nothing but speculation and I've heard nothing to distinguish between: 1) Somebody sent e-mail with root@.... as the return address, or 2) Somebody generated e-mail with a process running as root, or 3) both. Your sendmail log should tell you where sendmail thinks the e-mail came from and where it thinks it sent it. Or you could start by telling us HOW you detected this problem. --Jon Radel jon@radel.com