[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Buster (Proxmox6): Tigercron: Subject / RCPT in Body, instead header



Hello,

we have strange problem on some of our Buster hosts with Tigercron. The
Subject and the "From / To " stands in the body, instead of the header:

=============================

o: sysops@foo.local
Received: from ina-pmox-02.foo.local (ina-pmox-02.foo.local [172.25.50.3])
	by mx-01.foo.com (Postfix) with ESMTPS id 2972277
	for <sysops@foo-it.com>; Mon, 20 Jul 2020 00:00:14 +0200 (CEST)
Received: by ina-pmox-02.foo.local (Postfix)
	id 1626F262DC; Mon, 20 Jul 2020 00:00:14 +0200 (CEST)
Delivered-To: root@ina-pmox-02.foo.local
Received: by ina-pmox-02.foo.local (Postfix, from userid 0)
	id 10362262DB; Mon, 20 Jul 2020 00:00:14 +0200 (CEST)
Date: Mon, 20 Jul 2020 00:00:14 +0200
To: root@foo.local
User-Agent: s-nail v14.9.11
Message-Id: <20200719220014.10362262DB@ina-pmox-02.foo.local>
From: root <root@foo.local>

From: "Tiger automatic auditor at ina-pmox-02" <root@ina-pmox-02>
To: root
Subject: Tiger Auditing Report for ina-pmox-02

# Checking for known intrusion signs...
# Running chkrootkit (/usr/sbin/chkrootkit) to perform further checks...
# Checking for existence of log files...
# Checking listening processes
OLD: --WARN-- [lin003w] The process `kvm' is listening on socket 274285
(IPv4 on 274285 interface) is run by 32677.

=============================

We have this on hosts, where where upgraded from Proxmox5 to Proxmox6
and also new installations with Proxmox6.
The packages have the identical version numbers and also configuruation.
I tried to switch the mailx, but does not make any difference.

I have no idea, where to look.

The SMTP is a local Postfix

Any suggestions ?

cu denny

Attachment: signature.asc
Description: OpenPGP digital signature


Reply to: