Scalix Forums

Hai,

Scalix generate hundreds of mails per minute (I saw the SMTP log) and it was bounce back and send the log to postmaster. I think some one hack the server or something. How can I get the details where the mails are generating. How to Check the Scalix Mail log.

The mails are generated with someone@hostname.domainname. Please someone gave some suggestions, how to stop the mails.

Advance Thanks

is there anything in your /varl/log/mail or /var/log/maillog?

Yes, All my outgoing logs are available on /varlog/maillog

Mails are orignating from localhost.localdomain

Thanks

Hi

to searh the log of sendmail I use maillog_search, found this "script" in Perl in: http://www.brandonhutchinson.com/sendma ... earch.html

The program is very easy:

Oscar wrote:Hi

to searh the log of sendmail I use maillog_search, found this "script" in Perl in: http://www.brandonhutchinson.com/sendma ... earch.html

The program is very easy:

Code: Select all

root@scalix:~# maillog_search --from someone@domain.es /var/log/maillog
root@scalix:~# maillog_search --to someone@domain.es /var/log/maillog


This is only for sendmail. I found the sender information simply, localhost.localdomain, because Scalix only sending mail to sendmail. I check the omshowaud, i didn't found originating IP, it shows only originator mail address, but it is a invalid mail address.

Any Idea how to find the scalix mail originating IP.

Thanks

Finally i found the solutions for viewing the scalix log

omconfaud unix 11 sr 11 ld 11

and we can view the log /var/opt/scalix/logs/audit

Thanks

Anto.

11 may be too high for some services, it will show too much info.

Have a look at /var/opt/scalix/sys/audit.cfg to see the information logged...it may help you decide what level to set.

Mick