Guest User

Untitled

a guest
May 26th, 2018
261
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 12.79 KB | None | 0 0
  1. LOG
  2. ###########################
  3. Jan 17 11:19:48 mail3bl qmail: 1326817188.042233 starting delivery 1: msg 402721482 to local winn-test.com-user1@winn-test.com
  4. Jan 17 11:19:48 mail3bl qmail: 1326817188.042254 status: local 1/240 remote 0/120
  5. Jan 17 11:19:48 mail3bl qmail: 1326817188.048961 delivery 1: failure: Sorry,_no_mailbox_here_by_that_name._(#5.1.1)/
  6.  
  7.  
  8. vuserinfo
  9. ########################
  10. DTE3.CyberCon mail3bl bin # vuserinfo user1@winn-test.com
  11. name: user1
  12. passwd: $1$hskY33k/$2a2rGScSCO7Hij09YjNqm0
  13. clear passwd: user1
  14. comment/gecos: user1
  15. uid: 1
  16. gid: 0
  17. flags: 0
  18. gecos: user1
  19. limits: No user limits set.
  20. dir: /data/100/0/29//mail/3/6669.24355/user1
  21. quota: 1048576000S
  22.  
  23.  
  24. #################
  25. STRACE
  26. DTE3.CyberCon mail3bl ~ # cat /home/wjohnsto/log
  27. 10348 execve("/var/qmail/bin/qmail-inject", ["qmail-inject", "user1@winn-test.com"], [/* 33 vars */]) = 0
  28. 10348 brk(0) = 0x613000
  29. 10348 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f911d1ce000
  30. 10348 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
  31. 10348 open("/etc/ld.so.cache", O_RDONLY) = 3
  32. 10348 fstat(3, {st_mode=S_IFREG|0644, st_size=56004, ...}) = 0
  33. 10348 mmap(NULL, 56004, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f911d1c0000
  34. 10348 close(3) = 0
  35. 10348 open("/lib64/libc.so.6", O_RDONLY) = 3
  36. 10348 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260!\2\0\0\0\0\0@\0\0\0\0\0\0\0\220k\30\0\0\0\0\0\0\0\0\0@\0008\0\v\0@\0E\0D\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0h\2\0\0\0\0\0\0h\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\320F\25\0\0\0\0\0\320F\25\0\0\0\0\0\320F\25\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0008\17\30\0\0\0\0\0008\17\30\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\30\27\30\0\0\0\0\0\30\0278\0\0\0\0\0\30\0278\0\0\0\0\0\240F\0\0\0\0\0\0\360\224\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0@K\30\0\0\0\0\0@K8\0\0\0\0\0@K8\0\0\0\0\0\360\1\0\0\0\0\0\0\360\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\250\2\0\0\0\0\0\0\250\2\0\0\0\0\0\0\250\2\0\0\0\0\0\0 \0\0\0\0\0\0\0 \0\0\0\0\0\0\0\4\0\0\0\0\0\0\0\7\0\0\0\4\0\0\0\30\27\30\0\0\0\0\0\30\0278\0\0\0\0\0\30\0278\0\0\0\0\0\20\0\0\0\0\0\0\0h\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0P\345td\4\0\0\0\354F\25\0\0\0\0\0\354F\25\0\0\0\0\0\354F\25\0\0\0\0\0\214h\0\0\0\0\0\0\214h\0\0\0\0\0\0\4\0\0\0\0\0\0\0"..., 832) = 832
  37. 10348 fstat(3, {st_mode=S_IFREG|0755, st_size=1604816, ...}) = 0
  38. 10348 mmap(NULL, 3714056, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f911cc25000
  39. 10348 mprotect(0x7f911cda6000, 2097152, PROT_NONE) = 0
  40. 10348 mmap(0x7f911cfa6000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x181000) = 0x7f911cfa6000
  41. 10348 mmap(0x7f911cfab000, 19464, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f911cfab000
  42. 10348 close(3) = 0
  43. 10348 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f911d1bf000
  44. 10348 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f911d1be000
  45. 10348 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f911d1bd000
  46. 10348 arch_prctl(ARCH_SET_FS, 0x7f911d1be700) = 0
  47. 10348 mprotect(0x7f911cfa6000, 16384, PROT_READ) = 0
  48. 10348 mprotect(0x60c000, 4096, PROT_READ) = 0
  49. 10348 mprotect(0x7f911d1cf000, 4096, PROT_READ) = 0
  50. 10348 munmap(0x7f911d1c0000, 56004) = 0
  51. 10348 rt_sigaction(SIGPIPE, {SIG_IGN, [], SA_RESTORER, 0x7f911cc5aad0}, NULL, 8) = 0
  52. 10348 time(NULL) = 1326829588
  53. 10348 chdir("/var/qmail") = 0
  54. 10348 open("control/me", O_RDONLY|O_NONBLOCK) = 3
  55. 10348 read(3, "mail.networksolutionsemail.com\n", 64) = 31
  56. 10348 close(3) = 0
  57. 10348 open("control/defaultdomain", O_RDONLY|O_NONBLOCK) = 3
  58. 10348 read(3, "\n", 64) = 1
  59. 10348 close(3) = 0
  60. 10348 open("control/defaulthost", O_RDONLY|O_NONBLOCK) = -1 ENOENT (No such file or directory)
  61. 10348 open("control/plusdomain", O_RDONLY|O_NONBLOCK) = 3
  62. 10348 read(3, "\n", 64) = 1
  63. 10348 close(3) = 0
  64. 10348 open("control/idhost", O_RDONLY|O_NONBLOCK) = -1 ENOENT (No such file or directory)
  65. 10348 read(0, "from: winn\n", 8192) = 11
  66. 10348 read(0, "subject: test\n", 8192) = 14
  67. 10348 read(0, "tes\n", 8192) = 4
  68. 10348 pipe([3, 4]) = 0
  69. 10348 pipe([5, 6]) = 0
  70. 10348 vfork( <unfinished ...>
  71. 10349 close(4) = 0
  72. 10349 close(6) = 0
  73. 10349 fcntl(3, F_GETFL) = 0 (flags O_RDONLY)
  74. 10349 close(0) = 0
  75. 10349 fcntl(3, F_DUPFD, 0) = 0
  76. 10349 close(3) = 0
  77. 10349 fcntl(5, F_GETFL) = 0 (flags O_RDONLY)
  78. 10349 close(1) = 0
  79. 10349 fcntl(5, F_DUPFD, 1) = 1
  80. 10349 close(5) = 0
  81. 10349 chdir("/var/qmail") = 0
  82. 10349 execve("bin/qmail-queue", ["bin/qmail-queue"], [/* 33 vars */] <unfinished ...>
  83. 10348 <... vfork resumed> ) = 10349
  84. 10349 <... execve resumed> ) = 0
  85. 10348 close(3) = 0
  86. 10349 brk(0 <unfinished ...>
  87. 10348 close(5 <unfinished ...>
  88. 10349 <... brk resumed> ) = 0x606000
  89. 10348 <... close resumed> ) = 0
  90. 10349 fcntl(0, F_GETFD) = 0
  91. 10348 getpid( <unfinished ...>
  92. 10349 fcntl(1, F_GETFD) = 0
  93. 10348 <... getpid resumed> ) = 10348
  94. 10349 fcntl(2, F_GETFD <unfinished ...>
  95. 10348 read(0, <unfinished ...>
  96. 10349 <... fcntl resumed> ) = 0
  97. 10349 access("/etc/suid-debug", F_OK) = -1 ENOENT (No such file or directory)
  98. 10349 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd03098f000
  99. 10349 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
  100. 10349 open("/etc/ld.so.cache", O_RDONLY) = 3
  101. 10349 fstat(3, {st_mode=S_IFREG|0644, st_size=56004, ...}) = 0
  102. 10349 mmap(NULL, 56004, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fd030981000
  103. 10349 close(3) = 0
  104. 10349 open("/lib64/libc.so.6", O_RDONLY) = 3
  105. 10349 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260!\2\0\0\0\0\0@\0\0\0\0\0\0\0\220k\30\0\0\0\0\0\0\0\0\0@\0008\0\v\0@\0E\0D\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0h\2\0\0\0\0\0\0h\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\320F\25\0\0\0\0\0\320F\25\0\0\0\0\0\320F\25\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0008\17\30\0\0\0\0\0008\17\30\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\30\27\30\0\0\0\0\0\30\0278\0\0\0\0\0\30\0278\0\0\0\0\0\240F\0\0\0\0\0\0\360\224\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0@K\30\0\0\0\0\0@K8\0\0\0\0\0@K8\0\0\0\0\0\360\1\0\0\0\0\0\0\360\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\250\2\0\0\0\0\0\0\250\2\0\0\0\0\0\0\250\2\0\0\0\0\0\0 \0\0\0\0\0\0\0 \0\0\0\0\0\0\0\4\0\0\0\0\0\0\0\7\0\0\0\4\0\0\0\30\27\30\0\0\0\0\0\30\0278\0\0\0\0\0\30\0278\0\0\0\0\0\20\0\0\0\0\0\0\0h\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0P\345td\4\0\0\0\354F\25\0\0\0\0\0\354F\25\0\0\0\0\0\354F\25\0\0\0\0\0\214h\0\0\0\0\0\0\214h\0\0\0\0\0\0\4\0\0\0\0\0\0\0"..., 832) = 832
  106. 10349 fstat(3, {st_mode=S_IFREG|0755, st_size=1604816, ...}) = 0
  107. 10349 mmap(NULL, 3714056, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fd0303e6000
  108. 10349 mprotect(0x7fd030567000, 2097152, PROT_NONE) = 0
  109. 10349 mmap(0x7fd030767000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x181000) = 0x7fd030767000
  110. 10349 mmap(0x7fd03076c000, 19464, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fd03076c000
  111. 10349 close(3) = 0
  112. 10349 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd030980000
  113. 10349 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd03097f000
  114. 10349 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd03097e000
  115. 10349 arch_prctl(ARCH_SET_FS, 0x7fd03097f700) = 0
  116. 10349 mprotect(0x7fd030767000, 16384, PROT_READ) = 0
  117. 10349 mprotect(0x603000, 4096, PROT_READ) = 0
  118. 10349 mprotect(0x7fd030990000, 4096, PROT_READ) = 0
  119. 10349 munmap(0x7fd030981000, 56004) = 0
  120. 10349 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
  121. 10349 umask(033) = 027
  122. 10349 chdir("/var/qmail") = 0
  123. 10349 chdir("queue") = 0
  124. 10349 getpid() = 10349
  125. 10349 getuid() = 0
  126. 10349 time(NULL) = 1326829595
  127. 10349 rt_sigaction(SIGPIPE, {SIG_IGN, [], SA_RESTORER, 0x7fd03041bad0}, NULL, 8) = 0
  128. 10349 rt_sigaction(SIGVTALRM, {SIG_IGN, [], SA_RESTORER, 0x7fd03041bad0}, NULL, 8) = 0
  129. 10349 rt_sigaction(SIGPROF, {SIG_IGN, [], SA_RESTORER, 0x7fd03041bad0}, NULL, 8) = 0
  130. 10349 rt_sigaction(SIGQUIT, {SIG_IGN, [], SA_RESTORER, 0x7fd03041bad0}, NULL, 8) = 0
  131. 10349 rt_sigaction(SIGINT, {SIG_IGN, [], SA_RESTORER, 0x7fd03041bad0}, NULL, 8) = 0
  132. 10349 rt_sigaction(SIGHUP, {SIG_IGN, [], SA_RESTORER, 0x7fd03041bad0}, NULL, 8) = 0
  133. 10349 rt_sigaction(SIGXCPU, {SIG_IGN, [], SA_RESTORER, 0x7fd03041bad0}, NULL, 8) = 0
  134. 10349 rt_sigaction(SIGXFSZ, {SIG_IGN, [], SA_RESTORER, 0x7fd03041bad0}, NULL, 8) = 0
  135. 10349 rt_sigaction(SIGALRM, {0x400d8f, [], SA_RESTORER, 0x7fd03041bad0}, NULL, 8) = 0
  136. 10349 rt_sigaction(SIGILL, {0x400da7, [], SA_RESTORER, 0x7fd03041bad0}, NULL, 8) = 0
  137. 10349 rt_sigaction(SIGABRT, {0x400da7, [], SA_RESTORER, 0x7fd03041bad0}, NULL, 8) = 0
  138. 10349 rt_sigaction(SIGFPE, {0x400da7, [], SA_RESTORER, 0x7fd03041bad0}, NULL, 8) = 0
  139. 10349 rt_sigaction(SIGBUS, {0x400da7, [], SA_RESTORER, 0x7fd03041bad0}, NULL, 8) = 0
  140. 10349 rt_sigaction(SIGSEGV, {0x400da7, [], SA_RESTORER, 0x7fd03041bad0}, NULL, 8) = 0
  141. 10349 rt_sigaction(SIGSYS, {0x400da7, [], SA_RESTORER, 0x7fd03041bad0}, NULL, 8) = 0
  142. 10349 alarm(86400) = 0
  143. 10349 open("pid/10349.1326829595.1", O_WRONLY|O_CREAT|O_EXCL, 0644) = 3
  144. 10349 fstat(3, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0
  145. 10349 link("pid/10349.1326829595.1", "mess/321/402721482") = 0
  146. 10349 unlink("pid/10349.1326829595.1") = 0
  147. 10349 read(0, <unfinished ...>
  148. 10348 <... read resumed> ".\n", 8192) = 2
  149. 10348 read(0, "", 8192) = 0
  150. 10348 brk(0) = 0x613000
  151. 10348 brk(0x634000) = 0x634000
  152. 10348 write(4, "Date: 17 Jan 2012 19:46:28 -0000\nMessage-ID: <20120117194628.10348.qmail@mail.networksolutionsemail.com>\nCc: recipient list not shown: ;\nfrom: winn@mail.networksolutionsemail.com\nsubject: test\n\ntes\n.\n", 200) = 200
  153. 10349 <... read resumed> "Date: 17 Jan 2012 19:46:28 -0000\nMessage-ID: <20120117194628.10348.qmail@mail.networksolutionsemail.com>\nCc: recipient list not shown: ;\nfrom: winn@mail.networksolutionsemail.com\nsubject: test\n\ntes\n.\n", 2048) = 200
  154. 10348 close(4 <unfinished ...>
  155. 10349 write(3, "Received: (qmail 10349 invoked by uid 0); 17 Jan 2012 19:46:35 -0000\n", 69 <unfinished ...>
  156. 10348 <... close resumed> ) = 0
  157. 10348 write(6, "Froot@mail.networksolutionsemail.com\0Tuser1@winn-test.com\0\0", 59 <unfinished ...>
  158. 10349 <... write resumed> ) = 69
  159. 10348 <... write resumed> ) = 59
  160. 10349 read(0, <unfinished ...>
  161. 10348 close(6 <unfinished ...>
  162. 10349 <... read resumed> "", 2048) = 0
  163. 10348 <... close resumed> ) = 0
  164. 10349 write(3, "Date: 17 Jan 2012 19:46:28 -0000\nMessage-ID: <20120117194628.10348.qmail@mail.networksolutionsemail.com>\nCc: recipient list not shown: ;\nfrom: winn@mail.networksolutionsemail.com\nsubject: test\n\ntes\n.\n", 200 <unfinished ...>
  165. 10348 wait4(-1, <unfinished ...>
  166. 10349 <... write resumed> ) = 200
  167. 10349 fsync(3) = 0
  168. 10349 open("intd/321/402721482", O_WRONLY|O_CREAT|O_EXCL, 0644) = 4
  169. 10349 read(1, "Froot@mail.networksolutionsemail.com\0Tuser1@winn-test.com\0\0", 2048) = 59
  170. 10349 write(4, "u0\0p10349\0Froot@mail.networksolutionsemail.com\0Tuser1@winn-test.com\0", 68) = 68
  171. 10349 fsync(4) = 0
  172. 10349 link("intd/321/402721482", "todo/321/402721482") = 0
  173. 10349 open("lock/trigger", O_WRONLY|O_NONBLOCK) = 5
  174. 10349 fcntl(5, F_GETFL) = 0x8801 (flags O_WRONLY|O_NONBLOCK|O_LARGEFILE)
  175. 10349 fcntl(5, F_SETFL, O_WRONLY|O_NONBLOCK|O_LARGEFILE) = 0
  176. 10349 write(5, "\0", 1) = 1
  177. 10349 close(5) = 0
  178. 10349 exit_group(0) = ?
  179. 10348 <... wait4 resumed> [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 10349
  180. 10348 --- {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10349, si_status=0, si_utime=0, si_stime=0} (Child exited) ---
  181. 10348 exit_group(0) = ?
  182.  
  183. usage: 0%
  184. last auth: Fri Jan 13 16:26:01 2012
  185. last auth ip: 10.196.66.137
Add Comment
Please, Sign In to add comment