From owner-freebsd-security  Mon Nov 18 00:05:12 1996
Return-Path: owner-security
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.5/8.7.3) id AAA21221
          for security-outgoing; Mon, 18 Nov 1996 00:05:12 -0800 (PST)
Received: from sequent.kiae.su (sequent.kiae.su [193.125.152.6])
          by freefall.freebsd.org (8.7.5/8.7.3) with SMTP id AAA21107
          for <freebsd-security@FreeBSD.org>; Mon, 18 Nov 1996 00:04:24 -0800 (PST)
Received: by sequent.kiae.su id AA26657
  (5.65.kiae-2 ); Mon, 18 Nov 1996 11:59:29 +0400
Received: by sequent.KIAE.su (UUMAIL/2.0); Mon, 18 Nov 96 11:59:28 +0400
Received: (from ache@localhost) by nagual.ru (8.8.2/8.8.2) id KAA00591; Mon, 18 Nov 1996 10:49:48 +0300 (MSK)
Message-Id: <199611180749.KAA00591@nagual.ru>
Subject: Re: BoS: Exploit for sendmail smtpd bug (ver. 8.7-8.8.2).
In-Reply-To: <Pine.BSF.3.95.961117211243.223A-100000@alive.ampr.ab.ca> from "Marc Slemko" at "Nov 17, 96 09:18:29 pm"
To: marcs@znep.com (Marc Slemko)
Date: Mon, 18 Nov 1996 10:49:48 +0300 (MSK)
Cc: freebsd-security@FreeBSD.org
From: "=?KOI8-R?Q?=E1=CE=C4=D2=C5=CA_=FE=C5=D2=CE=CF=D7?=" (Andrey A. Chernov) <ache@nagual.ru>
Organization: self
X-Class: Fast
X-Mailer: ELM [version 2.4ME+ PL28 (25)]
Mime-Version: 1.0
Content-Type: text/plain; charset=KOI8-R
Content-Transfer-Encoding: 8bit
Sender: owner-security@FreeBSD.org
X-Loop: FreeBSD.org
Precedence: bulk

> Incorrect.  Sendmail still attempts a lookup for something, I think it is
> the local hostname, for each piece of mail it processes.  Last I checked,
> this could NOT be disabled without recompiling sendmail.  Modifying your
> config file or adding a service.switch file does not stop it.

Of course you must use
FEATURE(nocanonify)
FEATURE(nodns)
in addition to /etc/service.switch, I just not mention obvious things.

> On Mon, 18 Nov 1996, [KOI8-R] Андрей Чернов wrote:
> 
> > > Sendmail's support of UUCP isn't wonderful (mostly a problem of
> > > getting DNS totally disabled).  How well does qmail support UUCP?
> > 
> > It is possible to totally disable DNS via
> > 
> > /etc/service.switch:
> > # To disable DNS search for sendmail
> > hosts files

-- 
Andrey A. Chernov
<ache@nagual.ru>
http://www.nagual.ru/~ache/