[Logwatch] Email reverse incorrect

Todd Hackett me at todhackett.com
Tue Sep 29 04:59:04 MST 2009


Hi All

Googled my problem with no luck so I will try here.

I am seeing an incorrect 'mail from' when logwatch submits the daily digest.

I get From: logwatch at c18-ss-1-lb.cnet.com which does not make any sense.
I should be getting logwatch at madman.todhackett.com.

I have checked my local network setup ( multiple times ) and it looks to 
be OK.

Madman is a FC11 machine that gets a dhcp address.
I run BIND locally with all of the 192.168..stuff internal to my 
network.  Local mail server is a 'smarthost' and forwards mail to my ISP.
     All machines resolve correctly both forward and reverse.

Take a look at the dns tools, they all seem to point to the correct 
entries ( below ).  Is logwatch doing something different?

Logwatch runs on about 15 other machines in different  areas: 
Washington, Idaho and Montana without this issue.  This machine (madman) 
is the only fc11 box, but I do have a fc10 box running at a customer 
downtown that doesn't show this issue.

ideas?

TIA

todh


> [todh at madman ~]$ dig -x 192.168.100.59
>
> ; <<>> DiG 9.6.1-P1-RedHat-9.6.1-4.P1.fc11 <<>> -x 192.168.100.59
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62733
> ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1
>
> ;; QUESTION SECTION:
> ;59.100.168.192.in-addr.arpa.    IN    PTR
>
> ;; ANSWER SECTION:
> 59.100.168.192.in-addr.arpa. 93200 IN    PTR    madman.todhackett.com.
>
> ;; AUTHORITY SECTION:
> 100.168.192.in-addr.arpa. 86400    IN    NS    darouter.todhackett.com.
>
> ;; ADDITIONAL SECTION:
> darouter.todhackett.com. 86400    IN    A    192.168.100.254
>
> ;; Query time: 1 msec
> ;; SERVER: 192.168.100.254#53(192.168.100.254)
> ;; WHEN: Sun Sep 27 07:29:42 2009
> ;; MSG SIZE  rcvd: 119
>
> [todh at madman ~]$ host 192.168.100.254
> 254.100.168.192.in-addr.arpa domain name pointer darouter.todhackett.com.
> [todh at madman ~]$ host 192.168.100.59
> 59.100.168.192.in-addr.arpa domain name pointer madman.todhackett.com.
> [todh at madman ~]$ host -t mx 192.168.100.254
> 254.100.168.192.in-addr.arpa domain name pointer darouter.todhackett.com.
>





-- 

Todd Hackett    System Administrator
POBox 1168
Libby, Montana 59923

406.293.3843http://www.todhackett.com

Network and Server Administration.
Secure Firewall management.
Antispam/antivirus eMail.
Managed Web Hosting.

I would appreciate your referal!

Like trains?http://www.soundrail.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www2.list.logwatch.org:81/pipermail/logwatch/attachments/20090929/86e305ba/attachment.html>


More information about the Logwatch mailing list