On Wed, Sep 11, 2002 at 10:37:19AM -0400, [EMAIL PROTECTED] wrote:
> This is my first post to the list.
Welcome!
> A client of ours has a HP Netserver E50 running RH 6.1. There server is an
> open relay. I have looked on the web, and I have noticed that the best way
> to fix the problem is to upgrade the O/S to a new version, however is there
> anything one can do to stop the server from being an open relay without a
> major upgrade of the O/S.
>
> The have sendmail-8.9.3-15 installed.
For starters, you do not *have* to upgrade to a new Red Hat release,
although it will help solve other problems. You *can* secure your 6.1
system - we're still running a production 6.1 mail system at work.
You should upgrade sendmail to the latest release. We're running
sendmail-8.11.6-1.6.y.
It's likely that your mail server is also running a DNS. If so, upgrade
it. Pay a visit to ftp.redhat.com and cd /pub/redhat/linux/updates/6.1
and apply all the updates that are relevent to your system. Then cd to
a more current release like 6.2 that Red Hat still publishes errata for.
You'll find a current sendmail there. If you go too far forward, like
7.3, you could run into dependency issues (like glibc) that you may not
be prepared to resolve right now. You could grab the source rpm and
rebuild it, but grabbing the 6.2 binary is certainly easier.
>
> I'm alarmed that their /etc/access file is like the following
>
> # Check the /usr/doc/sendmail-8.9.3/README.cf file for a description
> # of the format of this file. (search for access_db in that file)
> # The /usr/doc/sendmail-8.9.3/README.cf is part of the sendmail-doc
> # package.
> #
> # by default we allow relaying from localhost...
> localhost.localdomain RELAY
> localhost RELAY
> 127.0.0.1 RELAY
>
> Is the above the problem? - How can I fix it?
This is good.
Back up /etc/mail before you start but don't copy the config file back
when you're done - look at each line in sendmail.mc and determine its
applicability to your new release and add it.
Cheers,
.../Ed
--
Ed Wilts, Mounds View, MN, USA
mailto:[EMAIL PROTECTED]
Member #1, Red Hat Community Ambassador Program
--
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list
