Not sure where the Audit log is. I have checked the /var/log/maillog file and I see the "Process" of an email attempt, but I am not really sure what I am looking at.
Below was the log entries in the /var/log/maillog file that represent a test message I tried to send to myself. I did "Sanitize" the email addresses to avoid spam. The message was sent from the CLI from root user to my personal email account on anther domain.
Code: Select all
May 12 13:12:58 www sendmail[13981]: p4CHCwuh013981: from=<root@Host.domain.com>, size=350, class=0, nrcpts=1, msgid=<201105121712.p4CHCw4Z013980@Host.domain.com>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
May 12 13:12:58 www sendmail[13980]: p4CHCw4Z013980: to=peg110@OtherDomain.net, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30054, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (p4CHCwuh013981 Message accepted for delivery)
May 12 13:16:58 www sendmail[13987]: p4CHCwuh013981: to=<peg110@OtherDomain.net>, ctladdr=<root@Host.domain.com> (0/0), delay=00:04:00, xdelay=00:04:00, mailer=esmtp, pri=120350, relay=smtp.easydns.com. [64.68.200.52], dsn=4.0.0, stat=Deferred: Connection timed out with smtp.easydns.com.
May 12 13:35:12 www sendmail[16467]: p4CHCwuh013981: to=<peg110@OtherDomain.net>, ctladdr=<root@Host.domain.com> (0/0), delay=00:22:14, xdelay=00:00:00, mailer=esmtp, pri=210350, relay=smtp.easydns.com., dsn=4.0.0, stat=Deferred: Connection timed out with smtp.easydns.com.
May 12 13:56:21 www sendmail[19416]: p4CHCwuh013981: to=<peg110@OtherDomain.net>, ctladdr=<root@Host.domain.com> (0/0), delay=00:43:23, xdelay=00:04:00, mailer=esmtp, pri=300350, relay=smtp.easydns.com. [64.68.200.52], dsn=4.0.0, stat=Deferred: Connection timed out with smtp.easydns.com.
May 12 14:35:12 www sendmail[24587]: p4CHCwuh013981: to=<peg110@OtherDomain.net>, ctladdr=<root@Host.domain.com> (0/0), delay=01:22:14, xdelay=00:04:00, mailer=esmtp, pri=390350, relay=smtp.easydns.com. [64.68.200.52], dsn=4.0.0, stat=Deferred: Connection timed out with smtp.easydns.com.
May 12 14:44:00 www sendmail[25780]: p4CHCwuh013981: to=<peg110@OtherDomain.net>, ctladdr=<root@Host.domain.com> (0/0), delay=01:31:02, xdelay=00:04:00, mailer=esmtp, pri=480350, relay=smtp.easydns.com. [64.68.200.52], dsn=4.0.0, stat=Deferred: Connection timed out with smtp.easydns.com.
I get similar results sending to other domains as well .
My DNS Provider is easydns.com but I am not using them for mail handling.