[cobalt-users] LogCheck MailFrom Address Suddenly Changed to Localhost

["Troy Arnold" <cobalt@xxxxxxxxxxxxxx>]

Hi all! Thanks again for all of your assistance in the past. These lists are
a great resource and have been tremendously helpful... really wish there was
a 'complete' knowledgebase or faq that incorporated alot of this great
information you guys (and gals) continually provide.

Background on the server: Raq4i, SSH, LogCheck, no telnet, all updates,
primaryDNS, running mail services, etc... etc... if you need more info don't
hesitate to ask.

Anyways, just this monring my server started sending my LogCheck files from
the server with the from address of root@localhost

The entire time I have been running LogCheck (last six months) the system
has emailed the log report as root@xxxxxxxxxxxxxxxxxx

I have made no recent updates and am currently mucking around the box
checking things. No odd processes that I can see. What could cause this
change. I keep a tight system, SSH, no telnet, all updates... etc... but am
worried something or someone has been mucking around.

Any ideas or insights would be greatly appreciated. Thanks in advance.

Best regards,
Troy Arnold
websetters, inc.