From owner-freebsd-security Tue Feb 13 8:47:44 2001 Delivered-To: freebsd-security@freebsd.org Received: from mail.wlcg.com (mail.wlcg.com [207.226.17.4]) by hub.freebsd.org (Postfix) with ESMTP id 98F8437B4EC for ; Tue, 13 Feb 2001 08:47:34 -0800 (PST) Received: from localhost (rsimmons@localhost) by mail.wlcg.com (8.11.1/8.11.1) with ESMTP id f1DGlJb03039; Tue, 13 Feb 2001 11:47:19 -0500 (EST) (envelope-from rsimmons@wlcg.com) Date: Tue, 13 Feb 2001 11:47:19 -0500 (EST) From: Rob Simmons To: Ragnar Beer Cc: freebsd-security@FreeBSD.ORG Subject: Re: port 587 - submission In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Its the new Mail Submission Agent. It is a Good Thing (tm). The only problem is there aren't any (good) mail clients that support it yet, so you can disable it by making a copy of /usr/src/etc/sendmail/freebsd.mc and calling it .mc Then add this line to the new file: FEATURE(`no_default_msa') Then in that same directory run: make .cf Then move /usr/obj/usr/src/etc/sendmail/.cf to /etc/mail/sendmail.cf That would be the Zen way to disable it. The not-so-zen way to disable it is to edit the /etc/mail/sendmail.cf file and remove or comment out the following line: O DaemonPortOptions=Port=587, Name=MSA, M=E I recommend using the Zen approach. Also, the reason you want to make a new file just for your server is the same reason you want to make a separate file from the GENERIC kernel config file - The next time you cvsup the source tree you have a really good chance of this mc file being blown away. If you make a copy of it, it will never get blown away and you will be able to merge you local changes into the new freebsd.mc file whenever it changes. Robert Simmons Systems Administrator http://www.wlcg.com/ On Tue, 13 Feb 2001, Ragnar Beer wrote: > Howdy! > > In the process of closing all the open ports that I really don't need I found a port 587 listed as service 'submission' by nmap. Does anyone know what kind of service that is? And is there a way to find out which process is listening on a given port (so that I can kill it)? > > Ragnar > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message