On Sat, 15 Nov 2003 08:27:28 -0600
Michael D Schleif <[EMAIL PROTECTED]> wrote:

<snip>

> I have rerun eximconf, and told it to use option #4, that this
> computer is *not* on the Internet, and to only deliver local mail.  Of
> course, now nothing is listening on port 25 ;>
<snip>

Are you sure nothing's listening on port 25? I just checked with a
telnet <name> 25 to one of the machines on my network running exim that
I configured with the same option #4 and got the usual SMTP greeting
identifying itself as Exim 3.35. 

I think option #4 just skips asking you details about how to send and
receive e-mail from the internet because you told it you only want mail
delivered locally. However, it still listens to port 25 because you
said you *do* want mail delivered locally, by selecting #4.

I normally just run a firewall on the machine if I'm worried about
access to certain ports. Using only certain parts of qmail may work, as
someone else suggested, but I know at least fetchmail (and probably
others) drop stuff in the queue via smtp. Yes, it's mail from that
machine to the same machine, but it makes it easier for them to know how
to talk to the mail system and they don't need extra code if you want it
delivered to an e-mail address on a different machine instead.

On the other hand, I'll freely admit that I've never had reason to setup
a machine to NSA crack-proof standards... :-)

Jacob

----- 
GnuPG Key: 1024D/16377135

A Linux machine! because a 486 is a terrible thing to waste!

Attachment: pgp00000.pgp
Description: PGP signature

Reply via email to