SEO

#1 (**permalink**) 02-19-2008, 06:53 AM

Slack 9.1, KDE 3.14

I'm told sendmail is (or can be) a vulnerablity

How do I disable Sendmail.... now and at re-boot. (There is no need for it, is
there. I don't run a mail server.)

Can I just kill the processes:
root 1494 0.0 0.1 4840 1628 ? S Jan01 0:00 sendmail:
accepting connections

smmsp 1497 0.0 0.1 4736 1420 ? S Jan01 0:00 sendmail: Queue
runner@00:25:00 for /var/spool/clientmqueue

(Why does Patrick turn it on by default?)

Thanks,
Al

#2 (**permalink**) 02-19-2008, 06:53 AM

Adams-Blake Company <atakeoutcanton@adams-blaketakeout.com> wrote:
> Slack 9.1, KDE 3.14
>
> I'm told sendmail is (or can be) a vulnerablity
>
> How do I disable Sendmail.... now and at re-boot. (There is no need for it, is
> there. I don't run a mail server.)

you can disable sendmail by modifying your startup scripts in /etc/rc.d/
or just chmod -x /etc/rc.d/rc.sendmail (as root), so it cannot be
executed.

a nice alternative to sendmail is qmail (http://www.qmail.org). it is
supposed to be more secure. the author offered an award to anyone who
could break it, but i believe he never had to pay.

steven.

#3 (**permalink**) 02-19-2008, 06:53 AM

Adams-Blake Company <atakeoutcanton@adams-blaketakeout.com> wrote:
> How do I disable Sendmail.... now and at re-boot. (There is no need for it, is
> there. I don't run a mail server.)

Now: kill it.
At boot-up: remove execute permission to /etc/rc.d/rc.sendmail:
-rw-r--r-- 1 root root 687 Jun 4 2002 /etc/rc.d/rc.sendmail
^ ^ ^ <= used to be rwxr-xr-x

> (Why does Patrick turn it on by default?)

Because you often need it to SEND e-mails too (queue runner).
If you have a provider with their own smtp server you can connect to
that and let IT manage the mail queue, but often you connect to "your
own local smtp daemon" (read: sendmail on localhost) and then it has
to be running.
--
************************************************** ******************
** Eef Hartman, Delft University of Technology, dept. EWI/TW **
** e-mail: E.J.M.Hartman@math.tudelft.nl, fax: +31-15-278 7295 **
** snail-mail: P.O. Box 5031, 2600 GA Delft, The Netherlands **
************************************************** ******************

#4 (**permalink**) 02-19-2008, 06:53 AM

Eef Hartman wrote:

> Adams-Blake Company <atakeoutcanton@adams-blaketakeout.com> wrote:
>
>>How do I disable Sendmail.... now and at re-boot. (There is no need for it, is
>>there. I don't run a mail server.)
>
>
> Now: kill it.
> At boot-up: remove execute permission to /etc/rc.d/rc.sendmail:
> -rw-r--r-- 1 root root 687 Jun 4 2002 /etc/rc.d/rc.sendmail
> ^ ^ ^ <= used to be rwxr-xr-x
>
>
>>(Why does Patrick turn it on by default?)
>
>
> Because you often need it to SEND e-mails too (queue runner).

More to the point, some system services (i.e. "atd" and "cron"") send emails
to local users. Without an MTA, you won't get your output from your at jobs
or your cron jobs.

--
Lew Pitcher, IT Consultant, Application Architecture
Enterprise Technology Solutions, TD Bank Financial Group

(Opinions expressed here are my own, not my employer's)

#5 (**permalink**) 02-19-2008, 06:53 AM

Adams-Blake Company <atakeoutcanton@adams-blaketakeout.com> wrote:
> How do I disable Sendmail.... now and at re-boot. (There is no need
> for it, is there. I don't run a mail server.)

chmod -x /etc/rc.d/rc.sendmail

--
William Park, Open Geometry Consulting, <opengeometry@yahoo.ca>
Linux solution for data management and processing.

#6 (**permalink**) 02-19-2008, 06:53 AM

Le Wed, 28 Jan 2004 10:44:33 -0500, Lew Pitcher a écrit*:

> More to the point, some system services (i.e. "atd" and "cron"") send emails
> to local users. Without an MTA, you won't get your output from your at jobs
> or your cron jobs.

I think it's needed, two, for using fetchmail. Fetchmail+Sendmail need a
little work of config, but once it's done, it's far best than pop/smtp
with your ISP.

And for mailing to your wife and children on the Slack box !

--
Jacques Bon

#7 (**permalink**) 02-19-2008, 06:53 AM

Jacques Bon <nobody@antispam.fr> writes:
>
> I think it's needed, two, for using fetchmail. Fetchmail+Sendmail need a
> little work of config, but once it's done, it's far best than pop/smtp
> with your ISP.

Actually, fetchmail can hand the messages directly to procmail (or any
mail delivery agent), so if you wanted, you could turn off sendmail
and still use fetchmail.

Tim

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

SEO

How do I disable sendmail