nerdexam
GIAC

GPEN · Question #288

Adam works on a Linux system. He is using Sendmail as the primary application to transmit emails. Linux uses Syslog to maintain logs of what has occurred on the system. Which of the following log…

The correct answer is D. /var/log/mailog. On Linux systems, Syslog records Sendmail and other MTA activity including source/destination addresses and timestamps in the mail log file located at /var/log/maillog.

Penetration Testing Foundations & Reconnaissance

Question

Adam works on a Linux system. He is using Sendmail as the primary application to transmit emails. Linux uses Syslog to maintain logs of what has occurred on the system. Which of the following log files contains e-mail information such as source and destination IP addresses, date and time stamps etc?

Options

  • A/log/var/logd
  • B/var/log/logmail
  • C/log/var/mailog
  • D/var/log/mailog

How the community answered

(20 responses)
  • A
    10% (2)
  • B
    5% (1)
  • C
    5% (1)
  • D
    80% (16)

Why each option

On Linux systems, Syslog records Sendmail and other MTA activity including source/destination addresses and timestamps in the mail log file located at /var/log/maillog.

A/log/var/logd

/log/var/logd is not a valid path; the Linux standard log directory is /var/log/ and no standard Syslog configuration creates a file at this reversed path.

B/var/log/logmail

/var/log/logmail is not a standard file name used by any default Syslog or MTA configuration on Linux distributions.

C/log/var/mailog

/log/var/mailog uses an inverted directory structure; Linux log files are stored under /var/log/, making this path syntactically incorrect and non-existent by default.

D/var/log/mailogCorrect

Linux Syslog directs mail facility messages from Sendmail and other MTAs to /var/log/maillog (on RHEL/CentOS-based systems), capturing envelope sender and recipient addresses, timestamps, message IDs, relay host information, and delivery status. This is the authoritative file for auditing email flow and diagnosing delivery issues on Linux mail servers. System administrators and security analysts use this log to trace the full path of an email through the system.

Concept tested: Linux Sendmail and Syslog mail log file path

Source: https://www.man7.org/linux/man-pages/man5/syslog.conf.5.html

Topics

#Linux logging#Syslog#Sendmail#mail log path

Community Discussion

No community discussion yet for this question.

Full GPEN Practice