From owner-freebsd-security  Mon May  6 23:22:36 2002
Delivered-To: freebsd-security@freebsd.org
Received: from mail.npubs.com (npubs.com [207.111.208.224])
	by hub.freebsd.org (Postfix) with ESMTP id A75CE37B400
	for <freebsd-security@FreeBSD.ORG>; Mon,  6 May 2002 23:22:32 -0700 (PDT)
Received: 8.12.2-(Neptune)
Received: 8.12.2-(Venus)
Received: 8.12.2-(Neptune)
From: "Nielsen" <nielsen@memberwebs.com>
To: <freebsd-security@FreeBSD.ORG>
References: <a05111701b8fba133ba60@[192.168.123.20]>
Subject: Re: jails and sendmail
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20020507062232.A75CE37B400@hub.freebsd.org>
Date: Mon,  6 May 2002 23:22:32 -0700 (PDT)
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

> On the host itself, I have in rc.conf: sendmail_enable="NO", instead
> of "NONE", to allow cron stuff to get mail out.

Good, then it won't interfere with the jails.

> I'd like to have sendmail_enable="YES" in each of my jails. Right
> now, sendmail doesn't seem to want to start in my jails with ="YES".

I guess you aliased the jails ip when starting up?

> Is it necessary to tell sendmail inside a jail to listen only on that
> jail's IP? If so, how is this done? I'm hoping a line or two in the
> .mc file will do it, but I'm new to editing these files.

Nope, not when running in a jail. The jail code translates INADDR_ANY to
just the jails ip. This is done transparently.

> Is there a problem with the localhost sendmail config being shared
> around the jails, since localhost really belongs to the host itself
> (if I understand localhost correctly)?

In a jail "localhost" is also mapped to the jails ip. Again transparently.
Do other daemons run and can you access them from outside the jail and/or
other systems?

Nate


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message