According to [EMAIL PROTECTED]: > In the previous mail, I stated that htdig send a mail while it is > running. I simulate the scenario once and capture some information. > I hope the information can help to find the problem. > > My Linux box is a development machine. I am the only user inside > the box. After I discover the problem, I have remove ��sendmail�� > from system startup script. Ie. No ��sendmail�� should exist > in process list. And, I have write a script to capture running > process. When ��sendmail�� exist, it will capture a snapshot > of running process (see attachment ��process.txt��). Before I > simulate the case, I have used "F-PORT" to check against the Linux. > No virus was found. > > The finding is �V ��sendmail�� is launch by ��httpd��. It is > discovered by the PPID of ��sendmail��. Ie. The mail is sent > by Apache. But, Apache is running all the time and no mail is > sending unless ��rundig�� is running. Therefore, I suspect that > the problem is cause by ��htdig��.
OK, now it's starting to make more sense. I still think it's one of the documents you're indexing that's triggering the e-mail, but not by htnotify. Instead, what you describe suggests that htdig is coming across a link to a CGI program that generates the e-mail. When htdig makes an HTTP request for this particular link, Apache receives the request and calls the CGI program, which in turn executes sendmail to send out this message. You'll need to execute rundig with one or more -v options to get some feedback as to what URLs it's seeing, and then look for a URL that might do exactly what I'm describing. If you know at about what point in the indexing the e-mail is triggered, that might help you zero-in on the appropriate section of rundig -v's output to find the URL. If you can find out what the URL is, you can get htdig to exclude it using the exclude_urls or bad_querystr attribute. Unfortunately, none of the 4 process listings you sent me capture the name of a CGI program run by httpd, so I can't suggest what program name to look for in the rundig output. Good luck! -- Gilles R. Detillieux E-mail: <[EMAIL PROTECTED]> Spinal Cord Research Centre WWW: http://www.scrc.umanitoba.ca/~grdetil Dept. Physiology, U. of Manitoba Phone: (204)789-3766 Winnipeg, MB R3E 3J7 (Canada) Fax: (204)789-3930 _______________________________________________ htdig-general mailing list <[EMAIL PROTECTED]> To unsubscribe, send a message to <[EMAIL PROTECTED]> with a subject of unsubscribe FAQ: http://htdig.sourceforge.net/FAQ.html

