Mailinglist Archive: opensuse (2009 mails)

[juergen.braukmann@xxxxxxxxxxxx (juergen.braukmann@xxxxxxxxxxxx)]

D E Hammond wrote:
> 
...
> 
> 2. This sendmail version was compiled with the tcp wrappers library
> (8.9.3 with SuSE 6.3 was not). I suppose that's a good thing, though
> with a sendmail as recent as 8.10.2 there is a lot of access control
> built in by default.  The tcp wrappers were denying access from other
> machines. I don't like my solution and am hoping someone's got some
> ideas.  First I run sendmail as a daemon, not from inetd.  So an entry
> like: "sendmail: list of allowed hosts" in hosts.access caused log
> entries about no sendmail entry in inetd.conf (it's commented out). The
> only way I found to make it work was adding to hosts.access:
> 
> ALL: 192.168.x.x/255.255.255.0
> 

I discovered this later last week. Same seems to be true with the nfs
server. I added the following lines to hosts.allow to find my peace:

endmail: LOCAL, .forty.two
rpc.nfsd: LOCAL, .forty.two
rpc.mountd: LOCAL, .forty.two

As I just discovered I still got this problem with nfsd, since there was
an "ALL:ALL" statement. Never the less, it works for sendmail.
(Try to telnet to port 25 on localhost for verification)

Juergen

> This is not what I want. How do I run this sendmail (compiled with tcp
> wrappers library) as daemon - not from inetd - and have an entry in
> hosts.access that grants smtp access only?
> 
> 3. There are a couple of privacy options in suse-linux.m4 in the
> sendmail configuration that I know nothing about: needmailhelo, noetrn,
> noverb.  The first seemed to cause problems on the mail hub and it
> didn't matter whether it was localhost, the smart host, or a null
> client.  The log message said "...did not issue MAIL/EXPN/VRFY/ETRN
> during connection to MTA".  Removing 'needmailhelo' made it go away. I
> wasn't able to find anything in the sendmail README or web site about
> these paricular arguments to confPRIVACY_FLAGS.  Anybody now what they
> do, or where I can get more information?
> 
> Sorry for the length of this. I have 2 other machines that need to be
> upgraded, but don't want to do it until I have a better handle on this
> stuff.  If anybody's got any answers to the questions, or suggestions to
> solve the problems better than I have, it'd be appreciated.
> 
> Thanks.
> 
>  - Don
> 
> --
> To unsubscribe send e-mail to suse-linux-e-unsubscribe@xxxxxxxx
> For additional commands send e-mail to suse-linux-e-help@xxxxxxxx
> Also check the FAQ at http://www.suse.com/support/faq


-- 
===========================================     __   _
Juergen Braukmann juergen.braukmann@xxxxxx| -o)/ /  (_)__  __ ____  __
Tel: 0201-743648  dk4jb@db0qs.#nrw.deu.eu | /\\ /__/ / _ \/ // /\ \/ /
===========================================_\_v __/_/_//_/\_,_/ /_/\_\

-- 
To unsubscribe send e-mail to suse-linux-e-unsubscribe@xxxxxxxx
For additional commands send e-mail to suse-linux-e-help@xxxxxxxx             
Also check the FAQ at http://www.suse.com/support/faq