topic Re: sendmail configuration in Operating System - HP-UX

sendmail configuration

Fauziah Mahdan — Tue, 20 Jun 2006 23:57:18 GMT

Hi all, from penetration report we all found vulnerability for all unix server with sendmail. The recommendation is to add option: privacyOptions=goaway

Where should I set this options?

Thanks
Fauziah

Re: sendmail configuration

Sameer_Nirmal — Wed, 21 Jun 2006 00:10:20 GMT

The option should be set in
/etc/mail/sendmail.cf

Once option is put, you need to restart sendmail using
# /sbin/init.d/sendmail stop
# /sbin/init.d/sendmail start

Re: sendmail configuration

Rajeev Shukla — Wed, 21 Jun 2006 00:20:45 GMT

You would add this option in sendmail.mc file and then recompile the sendmail.cf or easy way is to just add the option in sendmail.cf file as below
O PrivacyOptions=goaway
and restart the sendmail daemon

Re: sendmail configuration

Michael Steele_2 — Wed, 21 Jun 2006 00:27:54 GMT

vi /etc/mail/sendmail.cf and search on PrivacyOptions then add something like:

PrivacyOptions=authwarnings,restrictqrun,goaway,noexpn,novrfy

http://www.faqs.org/docs/securing/chap22sec183.html

Re: sendmail configuration

Fauziah Mahdan — Wed, 21 Jun 2006 20:31:32 GMT

thanks all

Fauziah Mahdan

Re: sendmail configuration

Steven E. Protter — Thu, 22 Jun 2006 01:11:10 GMT

Shalom Fauziah,

Don't mean to chime in late, but if you use sendmail.mc macro's you may wish to do it differently.

http://docs.hp.com/en/T2343-90001/ch01s01.html

It is an option for DAEMON_OPTIONS should you be a user of the macro file.

SEP