Hello, we have strange problem on some of our Buster hosts with Tigercron. The Subject and the "From / To " stands in the body, instead of the header:
=============================
o: sysops@foo.local
Received: from ina-pmox-02.foo.local (ina-pmox-02.foo.local [172.25.50.3])
by mx-01.foo.com (Postfix) with ESMTPS id 2972277
for <sys...@foo-it.com>; Mon, 20 Jul 2020 00:00:14 +0200 (CEST)
Received: by ina-pmox-02.foo.local (Postfix)
id 1626F262DC; Mon, 20 Jul 2020 00:00:14 +0200 (CEST)
Delivered-To: r...@ina-pmox-02.foo.local
Received: by ina-pmox-02.foo.local (Postfix, from userid 0)
id 10362262DB; Mon, 20 Jul 2020 00:00:14 +0200 (CEST)
Date: Mon, 20 Jul 2020 00:00:14 +0200
To: root@foo.local
User-Agent: s-nail v14.9.11
Message-Id: <20200719220014.1036226...@ina-pmox-02.foo.local>
From: root <root@foo.local>
From: "Tiger automatic auditor at ina-pmox-02" <root@ina-pmox-02>
To: root
Subject: Tiger Auditing Report for ina-pmox-02
# Checking for known intrusion signs...
# Running chkrootkit (/usr/sbin/chkrootkit) to perform further checks...
# Checking for existence of log files...
# Checking listening processes
OLD: --WARN-- [lin003w] The process `kvm' is listening on socket 274285
(IPv4 on 274285 interface) is run by 32677.
=============================
We have this on hosts, where where upgraded from Proxmox5 to Proxmox6
and also new installations with Proxmox6.
The packages have the identical version numbers and also configuruation.
I tried to switch the mailx, but does not make any difference.
I have no idea, where to look.
The SMTP is a local Postfix
Any suggestions ?
cu denny
signature.asc
Description: OpenPGP digital signature
