Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 5 Feb 2004 20:17:11 -0600 (CST)
From:      "Jon Noack" <noackjr@compgeek.com>
To:        "Jimmy Firewire" <trigonometric@softhome.net>
Cc:        freebsd-current@freebsd.org
Subject:   Re: RSA/DSA Host key generation didn't happen
Message-ID:  <50687.192.168.1.10.1076033831.squirrel@www.noacks.org>
In-Reply-To: <01e701c3ec28$71b61070$0601a8c0@SPECULUSHX1THE>
References:   <00d901c3ec11$5a600ff0$0601a8c0@SPECULUSHX1THE><20040205183346.GA18731@xor.obsecurity.org><01a201c3ec25$9a7156d0$0601a8c0@SPECULUSHX1THE><20040205202914.GA25270@xor.obsecurity.org> <01e701c3ec28$71b61070$0601a8c0@SPECULUSHX1THE>

next in thread | previous in thread | raw e-mail | index | archive | help
Jimmy Firewire wrote:
> OK, I was being completely stupid. sshd wasn't enabled, I was just so u=
sed
> to it being enabled by default. I think it's a good idea that it is not
> enabled by default however.But why take out sshd and not sendmail? Sure=
ly
> sendmail is more likely to be a problem than sshd?

By default sendmail only accepts messages from the localhost
(sendmail_enable=3D"NO" but sendmail_submit_enable=3D"YES").  The idea is=
 to
have no "public" services running unless you specfically enable them --
this makes for a very secure default install.

Jon Noack



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?50687.192.168.1.10.1076033831.squirrel>