sendmail configuration

[Fauziah Mahdan]

Hi all, from penetration report we all found vulnerability for all unix server with sendmail. The recommendation is to add option: privacyOptions=goaway

Where should I set this options?

Thanks
Fauziah

[Sameer_Nirmal · Accepted solution]

The option should be set in
/etc/mail/sendmail.cf

Once option is put, you need to restart sendmail using
# /sbin/init.d/sendmail stop
# /sbin/init.d/sendmail start

[Rajeev Shukla]

You would add this option in sendmail.mc file and then recompile the sendmail.cf or easy way is to just add the option in sendmail.cf file as below
O PrivacyOptions=goaway
and restart the sendmail daemon

[Michael Steele_2]

vi /etc/mail/sendmail.cf and search on PrivacyOptions then add something like:

PrivacyOptions=authwarnings,restrictqrun,goaway,noexpn,novrfy

http://www.faqs.org/docs/securing/chap22sec183.html

[Fauziah Mahdan]

thanks all

Fauziah Mahdan

[Steven E. Protter]

Shalom Fauziah,

Don't mean to chime in late, but if you use sendmail.mc macro's you may wish to do it differently.

http://docs.hp.com/en/T2343-90001/ch01s01.html

It is an option for DAEMON_OPTIONS should you be a user of the macro file.

SEP