[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [cobalt-security] rename bogus
- Subject: RE: [cobalt-security] rename bogus
- From: Graeme Fowler <graeme.fowler@xxxxxxxxxxxxxx>
- Date: Mon, 11 Feb 2002 12:51:15 -0000
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
Kai wrote:
> Message from syslogd@www at Mon Feb 11 13:06:23 2002 ...
> www procmail[17404]: Couldn't rename bogus
> "/home/sites/site44/../../spool/mail/rortap" into
> "/var/spool/mail/BOGUS.rortap.SmrB"
>
> It seems like there is a mailing script on the server trying
> to do some nasty business or somthing..
"man procmail" is your friend :)
If /var/spool/mail/$LOGNAME is a bogus mailbox (i.e. does
not belong to the recipient, is unwritable, is a symbolic
link or is a hard link), procmail will upon startup try to
rename it into a file starting with `BOGUS.$LOGNAME.' and
ending in an inode-sequence-code. If this turns out to be
impossible, ORGMAIL will have no initial value, and hence
will inhibit delivery without a proper rcfile.
HTH
Graeme
--
Graeme Fowler
System Administrator
Host Europe Group PLC