Hi,
I just recently installed logcheck running it at defaults. I don't have a /home/logcheck, even though the logcheck.conf MAILTO variable says "logcheck". Now I have a .forward in my regular home /home/awayand which gets an hourly report from logcheck but I have no clue how to turn that off. I don't want logcheck to use my /home/awayand/.forward file! Anyone know how I can troubleshoot where this configuration comes from?
Thanks!
Edit: turns out /etc/aliases had logcheck: root entry and root: awayand