disable expn and vrfy in sendmail on old digital 4.0 system

[Simon Jespersen]

Hey we have a very old digital cluster running, and our security scanning tells us that the expn and vrfy options are enabled in sendmail.
In other versions of sendmail i just add the noexpn and novrfy in the 0privacyoption line, but this line does not exist on this old system. Does anyone have an idea of how to disable it on those old systems.

[Kasper Hedensted · Accepted solution]

Hi Simon,

Although the PrivacyOptions line does not exist in the sendmail.cf file, you can add it yourself

Just add this line in the /var/adm/sendmail/sendmail.cf file, and restart sendmail:

O PrivacyOptions=noexpn, novrfy


Regards, Kasper

[Simon Jespersen]

Thank you.