On Sat, 15 Nov 2003 11:17:53 -0600
"Jacob S." <[EMAIL PROTECTED]> wrote:

> On Sat, 15 Nov 2003 08:27:28 -0600
> Michael D Schleif <[EMAIL PROTECTED]> wrote:
> 
> <snip>
> 
> > I have rerun eximconf, and told it to use option #4, that this
> > computer is *not* on the Internet, and to only deliver local mail. 
> > Of course, now nothing is listening on port 25 ;>
> <snip>

> I normally just run a firewall on the machine if I'm worried about
> access to certain ports. Using only certain parts of qmail may work,
> as someone else suggested, but I know at least fetchmail (and probably
> others) drop stuff in the queue via smtp. Yes, it's mail from that
> machine to the same machine, but it makes it easier for them to know
> how to talk to the mail system and they don't need extra code if you
> want it delivered to an e-mail address on a different machine instead.

As I think about this a little more, I believe there's a way you can set
the IP address that qmail will listen on, such as the 
/supervise/tinydns/env/IP file that will bind it to certain ips only, so
you can use other programs to listen to that port for other ips (in
the case of tinydns, it's dnscache that would be listening on other
ips). Then you could have it only listening on 127.0.0.1 and accepting
local mail, but port 25 would appear dead to any machine connecting from
the network.

HTH,
Jacob

----- 
GnuPG Key: 1024D/16377135

Windows hasn't increased computer literacy. It's just lowered the
standard. 

Attachment: pgp00000.pgp
Description: PGP signature

Reply via email to