I'm getting like hundreds of this emails everyday to root. I've checked my mgueue and spool there is no temp messages in there. How can i get rid of this message.
Either you have some scripts that have the hardcoded username to mail its output to or your sendmail "aliases" file has that user in it.
For the latter, you need to look for a file called "aliases". It is usually in /etc/mail/aliases. Do a "find / -name aliases -print" to find it.
This is the configuration file for how sendmail handles mailing lists based on mail aliases. You may have an entry in there for this user1.
Go ahead and search for an aliases file on your system. On HPUX it is in /etc/mail/aliases.
Once you remove this line from the aliases file, you will need to execute the "newaliases" or sendmail -bi command to update your sendmail configuration.
What may be happening is sendmail still thinks that the user exists because it is in this file even though you deleted them from the system.
Is it from the same users as it is sending to? If so, you might check to see if they have any cron jobs still scheduled somehow. This shouldn't be the case, but I've seen wierder...
I've found out that the message is sent by of the machines in my local network. It's kinda hard to find out what machine, coz i've got around 300 of them. Is there any way i can configure sendmail to drop the messages send FROM of TO user1@mydomain
sendmail has a wide range of options to block senders:
An ``access'' database can be created to accept or reject mail from selected domains. For example, you may choose to reject all mail originating from known spammers.