Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 3 Jul 1996 17:39:52 -0400 (EDT)
From:      "Pedro F. Giffuni S." <pgiffuni@biblioteca.campus.unal.edu.co>
To:        Gary Palmer <gpalmer@FreeBSD.ORG>
Cc:        stable@FreeBSD.ORG
Subject:   Re: Please, please...(and a lab) 
Message-ID:  <Pine.A32.3.91.960703172836.19098C-100000@biblioteca.campus.unal.edu.co>
In-Reply-To: <11300.836432541@palmer.demon.co.uk>

next in thread | previous in thread | raw e-mail | index | archive | help


On Wed, 3 Jul 1996, Gary Palmer wrote:

> smrsh is part of sendmail 8.7.x, although we don't install it by
> default. I believe there is eevn a m4 configuration file option to
> default to smrsh, but I can't remember offhand. Try looking in either
> -stable or the sendmail 8.7.5 distribution for more information.
> 
> Gary
> --
> 
Installing it by default is worth it: the same crackers (I assume) also 
broke into AIX4.1, and Solaris 2.4, both considered secure mailers by 
CERT, and the local admins closed every other potential door; rsh, rlogin, 
tftp, finger, etc...

I am experimenting, before I reinstall the system: I am using 
tcp_wrappers to cut all local (.co) and unknown mail. Of course that 
meant running sendmail in inetd. I even cutted out the mail from one 
machine to see if they can get through...its the only way of learning:)

best regards,
Pedro.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.A32.3.91.960703172836.19098C-100000>