# which mail
/bin/mail
# strings /bin/mail | grep sendmail
[- sendmail-options ...]
/usr/sbin/sendmail
# ls -l /usr/sbin/sendmail
lrwxrwxrwx 1 root qmail 28 Mar 3 19:13 /usr/sbin/sendmail -> ../../var/qmail/bin/sendmail
# ls -l /etc/alternatives/mta
ls: /etc/alternatives/mta: No such file or directory
# ps -ef | grep syslog
root 1824 1 0 Apr10 ? 00:02:11 syslogd -m 0
# strace -o /root/strace_mail.txt mail -s 'test msg 6:52am'
randomx@cox.net
execve("/bin/mail", ["mail", "-s", "test msg 6:52am", "randomx@cox.net"], [/* 21 vars */]) = 0
uname({sys="Linux", node="spin4", ...}) = 0
brk(0) = 0xa010000
access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=34334, ...}) = 0
old_mmap(NULL, 34334, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7ff7000
close(3) = 0
open("/lib/tls/libc.so.6", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\20/\224"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=1454462, ...}) = 0
old_mmap(0x92e000, 1219772, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x92e000
old_mmap(0xa52000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x124000) = 0xa52000
old_mmap(0xa56000, 7356, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xa56000
close(3) = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ff6000
mprotect(0xa52000, 4096, PROT_READ) = 0
mprotect(0x92a000, 4096, PROT_READ) = 0
set_thread_area({entry_number:-1 -> 6, base_addr:0xb7ff68e0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0
munmap(0xb7ff7000, 34334) = 0
getegid32() = 0
getgid32() = 0
setgid32(0) = 0
rt_sigaction(SIGCHLD, {0x8052ca4, [CHLD], SA_RESTORER|SA_RESTART, 0x9558c8}, {SIG_DFL}, 8) = 0
ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
brk(0) = 0xa010000
brk(0xa031000) = 0xa031000
stat64("/tmp/", {st_mode=S_IFDIR|S_ISVTX|0777, st_size=4096, ...}) = 0
gettimeofday({1146837180, 300905}, NULL) = 0
getpid() = 13347
lstat64("/tmp/RsJhsL3D", 0xbffa3d88) = -1 ENOENT (No such file or directory)
stat64("/tmp/", {st_mode=S_IFDIR|S_ISVTX|0777, st_size=4096, ...}) = 0
lstat64("/tmp/RqjBTVkL", 0xbffa3d88) = -1 ENOENT (No such file or directory)
stat64("/tmp/", {st_mode=S_IFDIR|S_ISVTX|0777, st_size=4096, ...}) = 0
lstat64("/tmp/RmXgp7BS", 0xbffa3d88) = -1 ENOENT (No such file or directory)
stat64("/tmp/", {st_mode=S_IFDIR|S_ISVTX|0777, st_size=4096, ...}) = 0
lstat64("/tmp/RetbYjTZ", 0xbffa3d88) = -1 ENOENT (No such file or directory)
stat64("/tmp/", {st_mode=S_IFDIR|S_ISVTX|0777, st_size=4096, ...}) = 0
lstat64("/tmp/Rxz7uxa7", 0xbffa3d88) = -1 ENOENT (No such file or directory)
ioctl(1, TIOCGWINSZ, {ws_row=43, ws_col=103, ws_xpixel=618, ws_ypixel=602}) = 0
ioctl(1, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
open("/etc/mail.rc", O_RDONLY) = 3
fcntl64(3, F_GETFL) = 0 (flags O_RDONLY)
fstat64(3, {st_mode=S_IFREG|0644, st_size=112, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7fff000
_llseek(3, 0, [0], SEEK_CUR) = 0
fcntl64(3, F_SETFD, FD_CLOEXEC) = 0
read(3, "set ask askcc append dot save cr"..., 4096) = 112
read(3, "", 4096) = 0
close(3) = 0
munmap(0xb7fff000, 4096) = 0
stat64("/root/.mailrc", 0xbffa4dcc) = -1 ENOENT (No such file or directory)
rt_sigprocmask(SIG_BLOCK, [HUP INT], [], 8) = 0
rt_sigaction(SIGINT, {SIG_IGN}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGINT, {0x804d372, [INT], SA_RESTORER|SA_RESTART, 0x9558c8}, {SIG_IGN}, 8) = 0
rt_sigaction(SIGHUP, {SIG_IGN}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGHUP, {0x804d346, [HUP], SA_RESTORER|SA_RESTART, 0x9558c8}, {SIG_IGN}, 8) = 0
rt_sigaction(SIGTSTP, {0x804d1fa, [TSTP], SA_RESTORER|SA_RESTART, 0x9558c8}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGTTOU, {0x804d1fa, [TTOU], SA_RESTORER|SA_RESTART, 0x9558c8}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGTTIN, {0x804d1fa, [TTIN], SA_RESTORER|SA_RESTART, 0x9558c8}, {SIG_DFL}, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [HUP INT], 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [HUP INT], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
open("/tmp/RsJhsL3D", O_RDWR|O_CREAT|O_EXCL, 0666) = 3
fcntl64(3, F_GETFL) = 0x2 (flags O_RDWR)
fstat64(3, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7fff000
_llseek(3, 0, [0], SEEK_CUR) = 0
fcntl64(3, F_SETFD, FD_CLOEXEC) = 0
unlink("/tmp/RsJhsL3D") = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
fstat64(0, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 0), ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ffe000
read(0, "testing 123\n", 1024) = 12
read(0, ".\n", 1024) = 2
write(3, "testing 123\n", 12) = 12
_llseek(3, 0, [0], SEEK_SET) = 0
rt_sigprocmask(SIG_BLOCK, [HUP INT], NULL, 8) = 0
rt_sigaction(SIGINT, {SIG_DFL}, {0x804d372, [INT], SA_RESTORER|SA_RESTART, 0x9558c8}, 8) = 0
rt_sigaction(SIGHUP, {SIG_DFL}, {0x804d346, [HUP], SA_RESTORER|SA_RESTART, 0x9558c8}, 8) = 0
rt_sigaction(SIGTSTP, {SIG_DFL}, {0x804d1fa, [TSTP], SA_RESTORER|SA_RESTART, 0x9558c8}, 8) = 0
rt_sigaction(SIGTTOU, {SIG_DFL}, {0x804d1fa, [TTOU], SA_RESTORER|SA_RESTART, 0x9558c8}, 8) = 0
rt_sigaction(SIGTTIN, {SIG_DFL}, {0x804d1fa, [TTIN], SA_RESTORER|SA_RESTART, 0x9558c8}, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigaction(SIGTSTP, {SIG_DFL}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGTTOU, {SIG_DFL}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGTTIN, {SIG_DFL}, {SIG_DFL}, 8) = 0
ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigaction(SIGINT, {0x8055713, [INT], SA_RESTORER|SA_RESTART, 0x9558c8}, {SIG_DFL}, 8) = 0
fstat64(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 0), ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ffd000
write(1, "Cc: ", 4) = 4
rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
rt_sigaction(SIGTSTP, {0x8055678, [TSTP], SA_RESTORER|SA_RESTART, 0x9558c8}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGTTOU, {0x8055678, [TTOU], SA_RESTORER|SA_RESTART, 0x9558c8}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGTTIN, {0x8055678, [TTIN], SA_RESTORER|SA_RESTART, 0x9558c8}, {SIG_DFL}, 8) = 0
read(0, "\n", 1024) = 1
rt_sigaction(SIGTSTP, {SIG_DFL}, {0x8055678, [TSTP], SA_RESTORER|SA_RESTART, 0x9558c8}, 8) = 0
rt_sigaction(SIGTTOU, {SIG_DFL}, {0x8055678, [TTOU], SA_RESTORER|SA_RESTART, 0x9558c8}, 8) = 0
rt_sigaction(SIGTTIN, {SIG_DFL}, {0x8055678, [TTIN], SA_RESTORER|SA_RESTART, 0x9558c8}, 8) = 0
rt_sigaction(SIGTSTP, {SIG_DFL}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGTTOU, {SIG_DFL}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGTTIN, {SIG_DFL}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGINT, {SIG_DFL}, {0x8055713, [INT], SA_RESTORER|SA_RESTART, 0x9558c8}, 8) = 0
fstat64(3, {st_mode=S_IFREG|0644, st_size=12, ...}) = 0
time([1146837186]) = 1146837186
open("/etc/localtime", O_RDONLY) = 4
fstat64(4, {st_mode=S_IFREG|0644, st_size=130, ...}) = 0
fstat64(4, {st_mode=S_IFREG|0644, st_size=130, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ffc000
read(4, "TZif\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\3\0\0\0\3\0"..., 4096) = 130
close(4) = 0
munmap(0xb7ffc000, 4096) = 0
open("/tmp/RsJhsL3D", O_WRONLY|O_CREAT|O_EXCL, 0666) = 4
fcntl64(4, F_GETFL) = 0x1 (flags O_WRONLY)
fstat64(4, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ffc000
_llseek(4, 0, [0], SEEK_CUR) = 0
fcntl64(4, F_SETFD, FD_CLOEXEC) = 0
open("/tmp/RsJhsL3D", O_RDONLY) = 5
fcntl64(5, F_GETFL) = 0 (flags O_RDONLY)
fstat64(5, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ffb000
_llseek(5, 0, [0], SEEK_CUR) = 0
fcntl64(5, F_SETFD, FD_CLOEXEC) = 0
stat64("/tmp/RsJhsL3D", {st_mode=S_IFREG|0644, st_size=0, ...}) = 0
unlink("/tmp/RsJhsL3D") = 0
read(3, "testing 123\n", 4096) = 12
read(3, "", 4096) = 0
write(4, "To: randomx@cox.net\nSubject: tes"..., 58) = 58
close(4) = 0
munmap(0xb7ffc000, 4096) = 0
close(3) = 0
munmap(0xb7fff000, 4096) = 0
_llseek(5, 0, [0], SEEK_SET) = 0
clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0xb7ff6928) = 13356
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
close(5) = 0
munmap(0xb7ffb000, 4096) = 0
munmap(0xb7ffd000, 4096) = 0
exit_group(0) = ?
On Thu, 4 May 2006, Randy Melder wrote:
> So here's the message:
> mail -s 'test msg 9:18pm' randomx@cox.net
> testing 123
> .
> Cc:
>
> And log results:
> tail --lines 1000 maillog | grep cox
> [nothing]
> tail --lines 1000 qmail/smtp/current | grep cox
> [nothing]
>
> Any other log files I should be inspecting?
You could try to track down your sendmail first.
For example:
# which mail
/bin/mail
# strings /bin/mail | grep sendmail
[- sendmail-options ...]
/usr/sbin/sendmail
# ls -l /usr/sbin/sendmail
lrwxrwxrwx 1 root root 21 Apr 21 23:38 /usr/sbin/sendmail -> /etc/alternatives/mta
# ls -l /etc/alternatives/mta
lrwxrwxrwx 1 root root 27 Apr 21 23:38 /etc/alternatives/mta -> /usr/sbin/sendmail.sendmail
Also you have to make sure your syslogger is even logging.
You could use strace to run mail and to follow its descendents.
Jeremy C. Reed
echo 'I7@87944:;6<754372=9=?48812=7043:>' | tr '0-@' 'wutrofn mlkige.ca'
---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss