Hello,
seems this topic is of interest for many of us. Given no privacy options
in the sendmail.cf file provides very poor security. The sendmail book
of Brian Costales (O'Reilly) reccommends to add the following line to
the sendmail.cf file:
Opgoaway,restrictmailq,restrictqrun
This setting disables the "expn" and the "vrfy" SMTP commands, requires
other sites to identify themselves before sending mail, and also limits
access to the mail queue directory.
This should help avoid most security problems
Mathias
--
__________________________________________________________________
| Dr. Mathias-H. Weber --- mailto:mweber@atlas.de |
| STN ATLAS ELEKTRONIK GmbH {~@_@~} |
| Brueggeweg 54 / Dept ETS21 _( Y )_ Phone: +49 421 457 4401 |
| 28305 BREMEN (:_~*~_:) Fax : +49 421 457 3177 |
| Germany (_)-(_) Telex: 2 457 460 |
___________________________SIGSIG: Signature too long (core dumped)
Follow-Ups:
References:
|
|
