[GRLUG] Exim4

[Dave Chiodo]

Those are either bounces (most likely) or messages that were specifically
submitted to exim with the null sender.

exim -Mvh 1ZwGNe-0001aZ-Gm

to see the headers

exim -Mvb 1ZwGNe-0001aZ-Gm

to see the body.

Its possible cron is sending a message, but its using an unqualified(no
domain) sender address, and when it bounces, exim has no way to route to
the sender. There are a few other possibilities as well.

If you can't figure it out, feel free to get in touch. I've been using exim
since Exim3, and am deeply familiar with its logging and debugging
facilities.



On Tue, Nov 10, 2015 at 4:26 PM, L. V. Lammert <lvl at omnitec.net> wrote:

> Any Exim folks around? Have an interesting issue with an old CentOS 5 box
> that we use for a VNC relay:
>
> It was build with Exim4 in 2007, and I just realized that there tons of
> junk mails generated on the system every day, IOW:
>
>  1m  1.5K 1ZwGNe-0001aZ-Gm <> *** frozen ***
>           root at omnitec.net
>
>  0m  1.5K 1ZwGOc-0001aj-LC <> *** frozen ***
>           root at omnitec.net
>
> So, the question is exactly where is "root at omnitec.net" being generated?
> There is a *different* root alias in /etc/aliases:
>
> root: noc at omnitec.net
>
> I just redid the configuration, but no change.
>
> Would anyone have an idea How/where these bogus root email destination is
> originating?
>
>         TIA!
>
>         Lee
> _______________________________________________
> grlug mailing list
> grlug at grlug.org
> http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shinobu.grlug.org/pipermail/grlug/attachments/20151110/fc8c23cf/attachment.html>