From owner-freebsd-security Fri Sep 22 1:42:45 2000 Delivered-To: freebsd-security@freebsd.org Received: from ns1.sunesi.net (ns1.sunesi.net [196.15.192.194]) by hub.freebsd.org (Postfix) with ESMTP id AF88537B424 for ; Fri, 22 Sep 2000 01:42:32 -0700 (PDT) Received: from nbm by ns1.sunesi.net with local (Exim 3.03 #1) id 13cOPU-0006cY-00; Fri, 22 Sep 2000 10:42:20 +0200 Date: Fri, 22 Sep 2000 10:42:20 +0200 From: Neil Blakey-Milner To: Phil Homewood Cc: security@FreeBSD.ORG Subject: Re: sysinstall DOESN'T ASK, dangerous defaults! (Was: Re: wats so special about freeBSD?) Message-ID: <20000922104220.A25438@mithrandr.moria.org> References: <99016.969437392@winston.osd.bsdi.com> <99016.969437392@winston.osd.bsdi.com> <20000920125405.D22272@149.211.6.64.reflexcom.com> <4.3.2.7.2.20000921113652.053d4960@localhost> <20000921210521.A17973@mithrandr.moria.org> <39CA8E45.7DA45048@softweyr.com> <4.3.2.7.2.20000921182152.046d6ee0@localhost> <20000922103446.A25222@mithrandr.moria.org> <20000922183836.G27376@atlas.bit.net.au> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0.1i In-Reply-To: <20000922183836.G27376@atlas.bit.net.au>; from pdh@bit.net.au on Fri, Sep 22, 2000 at 06:38:36PM +1000 Organization: Sunesi Clinical Systems X-Operating-System: FreeBSD 3.3-RELEASE i386 X-URL: http://rucus.ru.ac.za/~nbm/ Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Fri 2000-09-22 (18:38), Phil Homewood wrote: > Neil Blakey-Milner wrote: > > email clients use sendmail to send mail. If sendmail isn't running, it > > doesn't queue. We'll just lose that mail to a black hole. That isn't > > obvious. > > You could default to running sendmail without the "-bd" flag > and have a checkbox to enable "this machine wants to accept > email from the network", maybe? > > Just a thought... I'm awaiting feedback on a suggestion to do just that. Neil -- Neil Blakey-Milner Sunesi Clinical Systems nbm@mithrandr.moria.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message