Re: DSL

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Caught you there. You shouldn't trust that the more limited
functionality (that is, localhost connections only) is in place and
working in a system just because that is the Red Hat default or you have
a pretty sendmail.mc file that appears to show only localhost
connections are accepted.  

What if a substitute sendmail.cf file is either generated or inserted
and sendmail is restarted? Pretty simple to do. Connections are accepted
from anywhere, and relaying is turned on!

So let me say this again: turn off relaying in sendmail. Translated,
regenerate the sendmail.cf file using a sendmail.mc input you know for
sure has the functionality you want. Eyeball it yourself, generate it
yourself, and use it. 

Check the date and permissions of sendmail.cf every so often if you run
a mail server. (Is this really your sendmail.cf? Although I believe
older versions of Red Hat's sendmail regenerate sendmail.cf with each
machine reboot, but I'm too tired to check that at the moment.)

Bob




On Tue, 2003-07-22 at 00:50, Joe wrote:
> Robert L Cochran wrote:
> 
> >You must have some sort of firewall active. 
> >
> Yep, modern linux distros ship with iptables - and a pretty easy lockdown--
Shrike-list mailing list
Shrike-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/shrike-list

[Index of Archives]     [Fedora Users]     [Centos Users]     [Kernel Development]     [Red Hat Install]     [Red Hat Watch]     [Red Hat Development]     [Red Hat Phoebe Beta]     [Yosemite Forum]     [Fedora Discussion]     [Gimp]     [Stuff]     [Yosemite News]

  Powered by Linux