Re: [mod-security-users] create sendmail command log file

[Ivan R. <iv...@we...>]

M.Saeed Shaikh wrote:
> Hi,
> 
> Someone is spamming from our mail server. Is there any way to create
> sendmail commands log file. So at least I can see who is using
> sendmail command. I think its usie php/FormMail script for send mail.
> However i alreay implement FormMail rule.
> 
> I just want to create log file whenever sendmail command use.

   As Tom already mentioned, it's likely you already have a log of
   all sendmail invocations. Some other ideas:

   * Replace the sendmail binary with a "fake" one that logs the
     parameters, and then calls the real thing.

   * Enable process accounting on the server (differs from OS to OS,
     use Google to find out more).

   * Use grsecurity (http://www.grsecurity.org) to log process creation.

-- 
Ivan Ristic
Apache Security (O'Reilly) - http://www.apachesecurity.net
Open source web application firewall - http://www.modsecurity.org