From owner-freebsd-security  Wed Feb 14 13:32: 0 2001
Delivered-To: freebsd-security@freebsd.org
Received: from eros.cs.brandeis.edu (eros.cs.brandeis.edu [129.64.3.177])
	by hub.freebsd.org (Postfix) with ESMTP id E96B637B401
	for <freebsd-security@FreeBSD.ORG>; Wed, 14 Feb 2001 13:31:53 -0800 (PST)
Received: from localhost (meshko@localhost)
	by eros.cs.brandeis.edu (8.9.3/8.9.3) with ESMTP id QAA01089;
	Wed, 14 Feb 2001 16:31:49 -0500
Date: Wed, 14 Feb 2001 16:31:49 -0500 (EST)
From: Mikhail Kruk <meshko@cs.brandeis.edu>
To: Ragnar Beer <rbeer@uni-goettingen.de>
Cc: <freebsd-security@FreeBSD.ORG>
Subject: Re: security settings documentation
In-Reply-To: <p04330102b6b0a83f5da9@[134.76.136.114]>
Message-ID: <Pine.LNX.4.30.0102141630390.32692-100000@eros.cs.brandeis.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

I have
sendmail_flags="-bd -q30m" # -bd is pretty mandatory.
and it seems that it has been default at least since 2.2.8, may be
before.

> Very good idea! It's the default setting in OpenBSD.
>
> Ragnar
>
> >Also, for the "High" security setting, shouldn't this be in there:
> >
> >     variable_set2("sendmail_flags", "-q30m", 1);
> >
> >That way sendmail doesn't open port 25.
> >
> >Robert Simmons
> >Systems Administrator
> >http://www.wlcg.com/
>
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
>



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message