Koozali.org: home of the SME Server

tripwire sending email to unknown account

Thony de Waal

tripwire sending email to unknown account
« on: May 01, 2003, 04:40:46 AM »
-----Oorspronkelijk bericht-----
Van: MAILER-DAEMON@tvcn.nl [mailto:MAILER-DAEMON@tvcn.nl]
Verzonden: woensdag 30 april 2003 4:09
Hi there,
I just noticed that in the daily cron job the usual tripwire report was sent to administrator, but apparently also to someone else.
Does anyone know about this address, like is this an old address of the author of Tripwire?
Or should I be afraid, very afraid?
Thanks,
Thony


Aan: Administrator
Onderwerp: failure notice


Hi. This is the qmail-send program at tvcn.nl.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

:
199.181.134.14 does not like recipient.
Remote host said: 550 5.1.1 unknown or illegal alias: WenerCosma@go.com
Giving up on 199.181.134.14.

--- Below this line is a copy of the message.

Return-Path:
Received: (qmail 16788 invoked by uid 0); 30 Apr 2003 02:09:08 -0000
Date: 30 Apr 2003 02:09:08 -0000
Message-ID: <20030430020908.16787.qmail@tvcn.nl>
From: root@tvcn.nl
To: root@tvcn.nl
Subject: File integrity report

This is an automated report of possible file integrity changes, generated by
the Tripwire integrity checker. To tell Tripwire that a file or entire
directory tree is valid, as root run:

/usr/sbin/tripwire -update [pathname|entry]
The actual list I have not included, it is huge after update 4....

jeroen

Re: tripwire sending email to unknown account
« Reply #1 on: May 02, 2003, 03:27:52 PM »
I'd first check the config files of tripwire to see if it's a configuration issue....maybe it's a leftover of a wrong config?