RE: [cobalt-users] Savemail panic in maillog on RaQ4

["Dan Kriwitsky" <list1@xxxxxxxxxxxxxxxxxxxx>]

> Jun  8 22:12:05 ww4 sendmail[31442]: g2H0JrS30633: to=admin, 
> delay=83+19:52:07, xdelay=00:00:00, mailer=local, pri=123827, 
> dsn=5.0.0, 
> stat=Can't create output
> Jun  8 22:12:05 ww4 sendmail[31442]: g2H0JrS30633: 
> g58KBru31442: DSN: Can't 
> create output
> Jun  8 22:12:07 ww4 sendmail[31442]: g58KBru31442: 
> to=<dcm123@xxxxxxxxxxxxxx>, delay=00:00:02, xdelay=00:00:02, 
> mailer=esmtp, 
> pri=33927, relay=btamail.net.cn. [202.106.196.70], dsn=5.6.0, 
> stat=Data 
> format error
> Jun  8 22:12:07 ww4 sendmail[31442]: g58KBru31442: 
> g58KBrv31442: return to 
> sender: Data format error
> Jun  8 22:12:07 ww4 sendmail[31442]: g58KBrv31442: to=admin, 
> delay=00:00:00, xdelay=00:00:00, mailer=local, pri=34027, dsn=5.0.0, 
> stat=Can't create output
> Jun  8 22:12:07 ww4 sendmail[31442]: g58KBru31442: Losing 
> q4/qfg58KBru31442: savemail panic
> Jun  8 22:12:07 ww4 sendmail[31442]: g58KBru31442: 
> SYSERR(root): savemail: 
> cannot save rejected email anywhere: No such file or directory
> 

All of this looks like a script owned by the user ww4 with a call to
sendmail causing these entries. Not normal email coming in.
-- 
Dan Kriwitsky