From owner-freebsd-security Thu Feb 15 6:24:27 2001 Delivered-To: freebsd-security@freebsd.org Received: from point.osg.gov.bc.ca (point.osg.gov.bc.ca [142.32.102.44]) by hub.freebsd.org (Postfix) with ESMTP id E89F637B503 for ; Thu, 15 Feb 2001 06:24:19 -0800 (PST) Received: (from daemon@localhost) by point.osg.gov.bc.ca (8.8.7/8.8.8) id GAA29710; Thu, 15 Feb 2001 06:22:59 -0800 Received: from passer.osg.gov.bc.ca(142.32.110.29) via SMTP by point.osg.gov.bc.ca, id smtpda29706; Thu Feb 15 06:22:42 2001 Received: (from uucp@localhost) by passer.osg.gov.bc.ca (8.11.2/8.9.1) id f1FEMbK62209; Thu, 15 Feb 2001 06:22:37 -0800 (PST) Received: from cwsys9.cwsent.com(10.2.2.1), claiming to be "cwsys.cwsent.com" via SMTP by passer9.cwsent.com, id smtpdV62128; Thu Feb 15 06:22:02 2001 Received: (from uucp@localhost) by cwsys.cwsent.com (8.11.2/8.9.1) id f1FEM1J70621; Thu, 15 Feb 2001 06:22:01 -0800 (PST) Message-Id: <200102151422.f1FEM1J70621@cwsys.cwsent.com> Received: from localhost.cwsent.com(127.0.0.1), claiming to be "cwsys" via SMTP by localhost.cwsent.com, id smtpdY70474; Thu Feb 15 06:21:23 2001 X-Mailer: exmh version 2.3.1 01/18/2001 with nmh-1.0.4 Reply-To: Cy Schubert - ITSD Open Systems Group From: Cy Schubert - ITSD Open Systems Group X-Sender: schubert To: Rob Simmons Cc: Mikhail Kruk , Ragnar Beer , freebsd-security@FreeBSD.ORG Subject: Re: security settings documentation In-reply-to: Your message of "Wed, 14 Feb 2001 16:43:58 EST." Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Thu, 15 Feb 2001 06:21:23 -0800 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org In message , Rob Simmon s writes: > I would disagree with -bd being mandatory. Sure it is needed if the > server is a mailserver or needs to recieve mail for some reason. I agree > that it should be "-bd -q30m" in /etc/defaults/rc.conf, but I think the > "High" security profile should have only -q30m. In fact I think the > Fascist level should have this setting instead of disabling sendmail > altogether. > > If you disable sendmail altogether, doesn't that keep the daily/weekly > root mails from being sent? Rather than have the sendmail daemon taking memory for 30 minutes doing nothing, why not run it out of cron with -q. Agreed, -bd is not mandatory. One could run Sendmail out of inetd using -bs or hide it behind Obtuse Systems Smtpd (smtpd) port, which implements a Qmail-like or postfix-like approach using Sendmail. Regards, Phone: (250)387-8437 Cy Schubert Fax: (250)387-5766 Team Leader, Sun/Alpha Team Internet: Cy.Schubert@osg.gov.bc.ca Open Systems Group, ITSD, ISTA Province of BC To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message