Related to /var/log/maillig

[Net Llama!]

On Wed, 21 Jan 2004, Swapana Ghosh wrote:
> Hi
>
>      We are running   sendmail under linux.
>      Last few days i am noticing that the /var/log/maillog is being stopped.
>      I am starting though with *etc/rc.d/init.d/syslog start*. But after 2/3
>      days again it is being stopped.
>
>      i could not find out the problem why it is behaving like this..

Did you check the messages log to see when it was shutdown?  I've never
heard of any cases of syslogd just stopping unless it was intentionally
stopped.  How secure is this server?  One very common cracker behavior is
to kill syslogd so that their nefarious activities won' get logged.

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Lonni J Friedman				netllama at linux-sxs.org
Linux Step-by-step & TyGeMo		     http://netllama.ipfox.com