Switches, Hubs, and Modems
Showing results for 
Search instead for 
Did you mean: 

disable VRFY


disable VRFY

Hi all

i got this report from Security section
In its default configuration, Sendmail implements the VRFY command which allows anyone who can connect to Sendmail to obtain information about which user accounts exist, and where mail is being delivered. Many sites choose not to hand out this information via VRFY.

Recommendation: You should disable VRFY by adding "needvrfyhelo" to the P or Privacy line in the sendmail.cf file, usually found in the directory /etc }

so how i can disable VRFY , i tried many times but no result

Matt Hobbs
Honored Contributor

Re: disable VRFY

You probably should be asking this in the HP-UX forum - http://forums1.itrc.hp.com/service/forums/bizsupport/categoryhome.do?categoryId=156

Mohieddin Kharnoub
Honored Contributor

Re: disable VRFY

Disable the vrfy command of sendmail program

Edit /etc/mail/sendmail.cf

Search for the PrivacyOptions text

Add the line "O PrivacyOptions=novrfy" to disable the vrfy command

Stop the send mail daemon with /sbin/init.d/sendmail stop

Restart the sendmail daemon with /sbin/init.d/sendmail start

Verify the vrfy command has been disabled.
Science for Everyone