Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 22 May 2007 11:37:24 -0400
From:      "Maxim Khitrov" <mkhitrov@gmail.com>
To:        freebsd-questions@freebsd.org
Subject:   Re: Sendmail ignores hosts.allow
Message-ID:  <26ddd1750705220837n141787fdh6167c0cb07a8396f@mail.gmail.com>
In-Reply-To: <20070522105732.A2743@erienet.net>
References:  <26ddd1750705211537j78ed83fdm921f7f5e5df5c4@mail.gmail.com> <20070522105732.A2743@erienet.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On 5/22/07, steveb@erienet.net <steveb@erienet.net> wrote:
> I suspect sendmail is reading /etc/hosts.allow
>
> # Start by allowing everything (this prevents the rest of the file
> # from working, so remove it when you need protection).
> # The rules here work on a "First match wins" basis.
> #ALL : ALL : allow
>
> Did you comment out the above line?
>
> Steve

Here's the entire file as it is right now:

# Deny sendmail to all clients (temporary)
sendmail : all : deny

# Allow anything from localhost
all : <local ip> : allow

# Process SSH deny rules
sshd : /etc/hosts.evil : deny

# Allow everything else
all : all : allow

Once I can get sendmail to block all connection requests, I'll move it
below the second rule. That way, only local processes will be able to
use it. For now, however, that rule is being ignored completely.

- Max



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?26ddd1750705220837n141787fdh6167c0cb07a8396f>