disable VRFY

[fahad_8]

Hi all

i got this report from Security section
{
In its default configuration, Sendmail implements the VRFY command which allows anyone who can connect to Sendmail to obtain information about which user accounts exist, and where mail is being delivered. Many sites choose not to hand out this information via VRFY.

Recommendation: You should disable VRFY by adding "needvrfyhelo" to the P or Privacy line in the sendmail.cf file, usually found in the directory /etc }

so how i can disable VRFY , i tried many times but no result

regards

[Matt Hobbs]

You probably should be asking this in the HP-UX forum - http://forums1.itrc.hp.com/service/forums/bizsupport/categoryhome.do?categoryId=156

[Mohieddin Kharnoub]

Disable the vrfy command of sendmail program

Edit /etc/mail/sendmail.cf

Search for the PrivacyOptions text

Add the line "O PrivacyOptions=novrfy" to disable the vrfy command

Stop the send mail daemon with /sbin/init.d/sendmail stop

Restart the sendmail daemon with /sbin/init.d/sendmail start

Verify the vrfy command has been disabled.