Rkhunter Emails

[JnascECSI]

How do you set which email address rkhunter sends from and to in the config. Since installing asl with rkhunter it seems to be using root to send and the delivery email is even more jacked up as you see below. Not sure where it's getting the from and too email address from and the to email address is really messed up because it's trying to use root@local.ecs-1.xxxxxxxxx.com. I did check the config and it has support@mydomain.com which is correct but i keep getting these bounces below and i'm lost.

Code: Select all

Hi. This is the qmail-send program at ecs-1.xxxxxxxxxxx.com.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<root@localhost.ecs-1.xxxxxxxxxx.com>:
Sorry, I couldn't find any host named localhost.ecs-1.xxxxxxxxxxx.com. (#5.1.2)

--- Below this line is a copy of the message.

Return-Path: <root@ecs-1.xxxxxxxxx.com>
Received: (qmail 22048 invoked by uid 10064); 10 Dec 2010 04:23:03 -0500
Received: from  by ecs-1.xxxxxxxxx.com (envelope-from <root@ecs-1.xxxxxxxxx.com>, uid 0) with qmail-scanner-2.08st 
 (clamdscan: 0.96.5/12373. perlscan: 2.08st.  
 Clear:RC:1(127.0.0.1):. 
 Processed in 0.014676 secs); 10 Dec 2010 09:23:03 -0000
Date: 10 Dec 2010 04:23:03 -0500
Message-ID: <20101210092303.22027.qmail@ecs-1.xxxxxxxxx.com>
From: root@ecs-1.xxxxxxxxx.com
To: root@localhost.ecs-1.xxxxxxxxx.com
Subject: rkhunter Daily Run on ecs-1.xxxxxxxxx.com

[kram]

I am having the same problem, did you manage to resolve this?

[biggles]

I had the same problem and found a solution. I manually edited /etc/sysconfig/rkhunter to change the MAILTO= to use the correct e-mail. Maybe we can ask Mike och Scott for an updated rkhunter package och asl configuration that fixes this?

[kram]

Thanks, ill give this a try

[JnascECSI]

I tried everything and it still sends from and too that crazy emaila address.

[kram]

After editing: /etc/sysconfig/rkhunter emails are now coming in from the correct address