LinuxSA Mailing list archives

  From: marko@woogie.nu
  To  : David Newall <davidn@rebel.net.au>
  Date: Thu, 23 Sep 1999 23:07:27 +0930 (CST)

Re: sendmail problem

On 23 Sep, David Newall wrote:
>> I've already conluded from http://www.orbs.org/otherresources.cgi
>> that sendmail 8.8.7 is unsalvageable.
> 
> Unsalvageable?  Why?  I'm on 8.8.4.
> 
There's a denial of service attack in sendmail versions below 8.9.3, I
think I heard somewhere that there is a security hole in versions below
8.8.7 too, but I could be mistaken on that.

Personally I would just get the latest version and use the access
database, add the line:
FEATURE(access_db, hash -o /etc/mail/access)
to you .mc file before you make you config file.

then you just add the names or ip of the to your /etc/mail/access file
ie "192.168		RELAY" or "woogie.nu	RELAY" etc
you can also use it to deny mail from an adress or domain
ie "spammer@aol.com	550 Go blow a goat spammer"

I'm a big fan of the access database, the rules are explained in the
sendmail-8.9.3/cf/README file (which you should read before making your
config file).

Assuming you have the sendmail 8.9.3 src and not just some binary rpm.



-- 
----------------------------------
Mark O'Loughlin         marko@metropolis.net.au         
Technical Manager
Metropolitan Internet Services

----------------------------------
"Ty chto mumu yebyosh?"

-- 
Check out the LinuxSA web pages at http://www.linuxsa.org.au/
To unsubscribe from the LinuxSA list:
  mail linuxsa-request@linuxsa.org.au with "unsubscribe" as the subject