I changed MailFrom="" in /usr/share/logwatch/default.conf/logwatch.conf

That altered "From:" in the headers, but "Sender:" is still "[email protected]"

EC2 Linux AMI beta, Postfix is the mailer


2 Answers 2


Arrived here via google with the same problem.

Adding the "-f user" option to sendmail in /usr/share/logwatch/default.conf/logwatch.conf had no effect.

Turns out logwatch.pl processes /usr/share/logwatch/dist.conf/logwatch.conf after /usr/share/logwatch/default.conf/logwatch.conf.

Edit or remove the MailFrom = root override in /usr/share/logwatch/dist.conf/logwatch.conf for it to work.

  • Agree with editing /usr/share/logwatch/dist.conf/logwatch.conf. But also check the script (if any) executed by cron for more overrides. For Ubuntu (Precise) this is in /etc/cron.daily/00logwatch. If the package maintainer overwrites these you will need to revisit them.
    – mckenzm
    Nov 17, 2012 at 20:07

There are several locations where Logwatch configuration details can be specified, with each one superseding the previous one:

The script / command line arguments

It is recommended to change: /etc/logwatch/conf/logwatch.conf

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .