On Sat, 05 Apr 2008 21:12:44 +0200 John Horne >A while ago someone emailed the mailing list, or put an entry in >the RKH bug tracker system, about a problem when they misspelt the >MAIL-ON-WARNING option in the config file.
IIRC it was around 2007/12/16, the thread was called "Questionable improvement" by one of our oldtimers: "Uwe Dippel". Weird enough I can't find his OP, only a reply by a certain "Dave" ([EMAIL PROTECTED]): "John Horne wrote: > > On Thu, 2007-12-06 at 23:50 +0800, Uwe Dippel wrote: >> >> Please, please bring back a default mail pointing to the reason for >> >> the warning ! >> >> > > I'm a bit lost with this. What was the default mail that you used to > > receive before? Have you used the '--report-warnings-only' option? That > > will tell you why warnings have been given. I've just setup rkhunter 1.3.0 from source on a new box (CentOS 5.1) and have run into the same issue; the warning e-mail is not very informative. Running rkhunter with MAIL-ON-WARNING set in the config file and the options "--update --cronjob --rwo -q" results in the warnings being printed to the console and me receiving an e-mail stating only "Please inspect this machine, because it may be infected." Running with "--update --cronjob --rwo" gives the same results, and running with "--update --cronjob -q" results in no warnings on the console but the same email. I'm guessing that --rwo overrides -q. Are there any options that will send the warnings in the e-mail? Or if I want to do this should I just turn off the mail-on-warning functionality and redirect the output to mail myself? Cheers, Dave" -- Learn how to build web sites. Find a web design school near you. http://tagline.hushmail.com/fc/Ioyw6h4fMueu75Kh2lOMH88AtCD9v1k1Iut43LfxQQ4D181EWHm17y/ ------------------------------------------------------------------------- This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Register now and save $200. Hurry, offer ends at 11:59 p.m., Monday, April 7! Use priority code J8TLD2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone _______________________________________________ Rkhunter-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/rkhunter-users
