disbale email server cis security

[Vincent_5]

Hi Guys,

   Can someone help i'm trying to harden my server to disable the email server from cis security script below

ch_rc -a -p SENDMAIL_SERVER=0 /etc/rc.config.d/mailservs cd /var/spool/cron/crontabscrontab -l >root.tmpecho '0 * * * * /usr/lib/sendmail -q' >>root.tmpcrontab root.tmprm -f root.tmp

but after running the script, the parameter still fail. Please help

Regards

VIncent

[Patrick Wallek]

To turn off sendmail run:

# /sbin/init.d/sendmail stop

Now go to the /etc/rc.config.d directory and manually edit the 'mailservs' file.

# cd /etc/rc.config.d

# vi mailservs

Change the line that has:

SENDMAIL_SERVER=1

to

SENDMAIL_SERVER=0

Now save the file and exit.

Your server can not receive mail now.

[Vincent_5]

Hi,
Thanks for the support, I hv already disable the mailservs and set to 0. But the cis assessment still fail. Kindly help

Regards
Vincent

[Vincent_5]

Hi,
Btw, can anyone advice what is the cis script trying to check which I don't understand . Pls revert thanks

Regards
Vincent

[Patrick Wallek]

Is the sendmail daemon still running?

# ps -ef | grep sendmail

If it is, then you may just need to stop the daemon.

I've not seen the CIS script to know what it's checking.  You've got it.  Go through it and see what it's looking for, if it is actually a script and not a program.