Re: Sendmail, localloop, and iptables -- should I be more paranoid?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



Am 22.11.2010 16:11, schrieb Robert Moskowitz:
> By default, sendmail only listens on the localloop:
> 
> DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl
> 
> But by default to allow sendmail to even work the iptables entry is:
> 
> -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 25 -j 
> ACCEPT
> 
> Without this, sendmail can't even connect to localloop.  

No, that is not correct. You miss to see the following rule

-A RH-Firewall-1-INPUT -i lo -j ACCEPT

in the default /etc/sysconfig/iptables config file. So there is no
problem where you see one.

> But should I 
> handedit this line to something like:
> 
> -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp -d 127.0.0.1 
> --dport 25 -j ACCEPT
> 
> And once you handedit iptables, you can't use the gnome firewall applet, 
> I suspect...

Alexander

_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos


[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux