Lock down sendmail?

[Robert Brockway]

On Fri, 28 Jan 2005, William O'Higgins wrote:

> By the way, I appreciate the advice to install postfix|exim|qmail, but
> that's not what I want.  If I had unrestricted (from an administrative
> point of view) control over this machine this conversation wouldn't
> happen.  What I don't know is how to neuter sendmail.

This M4 directive will cause sendmail to only bind to localhost:

DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl

Put this in the .mc and rebuild the .cf.  Remember to always manage the 
.cf from the .mc.  If this is the first time you are generating a .cf then 
watchout that the last admin did not edit the .cf directly (resulting in 
your new .cf missing important features or settings).

Cheers,

Rob

-- 
Robert Brockway B.Sc.
Senior Technical Consultant, OpenTrend Solutions Ltd.
Phone: 416-669-3073 Email: rbrockway-wgAaPJgzrDxH4x6Dk/4f9A at public.gmane.org http://www.opentrend.net
OpenTrend Solutions: Reliable, secure solutions to real world problems.
Contributing Member of Software in the Public Interest (http://www.spi-inc.org)
--
The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml