From owner-freebsd-questions@FreeBSD.ORG Sat Mar 25 18:10:14 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 09C3516A41F for ; Sat, 25 Mar 2006 18:10:13 +0000 (UTC) (envelope-from freebsd@dfwlp.com) Received: from zeus.int.dfwlp.com (zeus.dfwlp.com [208.11.134.127]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8665F43D46 for ; Sat, 25 Mar 2006 18:10:13 +0000 (GMT) (envelope-from freebsd@dfwlp.com) Received: from europa (europa.int.dfwlp.com [192.168.125.80]) (authenticated bits=0) by zeus.int.dfwlp.com (8.13.4/8.13.4) with ESMTP id k2PIAEPU098632 for ; Sat, 25 Mar 2006 12:10:14 -0600 (CST) (envelope-from freebsd@dfwlp.com) Message-Id: <200603251810.k2PIAEPU098632@zeus.int.dfwlp.com> From: "Jonathan Horne" To: Date: Sat, 25 Mar 2006 12:10:33 -0600 MIME-Version: 1.0 X-Mailer: Microsoft Office Outlook, Build 11.0.5510 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 Thread-Index: AcZQN2i32KWwC8ybQY6jg7h/I9paSg== X-Spam-Status: No, score=-1.4 required=5.0 tests=ALL_TRUSTED,HTML_MESSAGE autolearn=failed version=3.1.1 X-Spam-Checker-Version: SpamAssassin 3.1.1 (2006-03-10) on zeus.int.dfwlp.com Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: compiling sendmail to 8.13.6 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 25 Mar 2006 18:10:14 -0000 Ok, I just cvsup'd and it did not pull down the sources for sendmail 8.13.6 ( I might still have misunderstanding of what exactly cvsup does). Anyway, I took matters into my own hands, and I was wondering if my procedure would be considered acceptable by my peers. So, this is what I did: 1) pulled down sendmail.8.13.6.tar.gz from sendmail.org. 2) read FREEBSD-upgrade doc from /usr/src/contrib/sendmail, and found this info For the import of sendmail, the following files were removed: Build cf/cf/Build cf/cf/generic-*.cf devtools/* doc/op/op.ps */Build [e-v]*/*.0 sendmail/makesendmail sendmail/sysexits.h The following directories were renamed: sendmail -> src 3) untared sendmail.8.13.6.tar.gz, and made the exact same changes to files/folders listed above. Rename source folder to just 'sendmail' 4) remove /usr/src/contrib/sendmail. Replace with my new sendmail directory that I just downloaded and edited 5) re-compile sendmail as most all howtos dictate: # cd /usr/src/lib/libsm # make obj && make depend && make # cd /usr/src/lib/libsmutil # make obj && make depend && make # cd /usr/src/usr.sbin/sendmail/ # make obj && make depend && make && make install 6) cd /etc/mail/ do a make all install restart 7) reboot. When the system came back up, the sendmail banner tells me its running 8.13.6/8.13.4. would this mean im upgraded to the latest and am now without a shadow of a doubt secure against this latest sendmail threat? Would that have been an acceptable way to upgrade a production server (and should I do it again, this time on my production sendmail server)? Thanks for reading! jonathan