From owner-freebsd-security  Fri Sep 22 17:24:50 2000
Delivered-To: freebsd-security@freebsd.org
Received: from ns.yogotech.com (ns.yogotech.com [206.127.123.66])
	by hub.freebsd.org (Postfix) with ESMTP id 4505C37B422
	for <security@FreeBSD.ORG>; Fri, 22 Sep 2000 17:24:47 -0700 (PDT)
Received: from nomad.yogotech.com (nomad.yogotech.com [206.127.123.131])
	by ns.yogotech.com (8.9.3/8.9.3) with ESMTP id SAA23509;
	Fri, 22 Sep 2000 18:24:43 -0600 (MDT)
	(envelope-from nate@nomad.yogotech.com)
Received: (from nate@localhost)
	by nomad.yogotech.com (8.8.8/8.8.8) id SAA20488;
	Fri, 22 Sep 2000 18:24:42 -0600 (MDT)
	(envelope-from nate)
Date: Fri, 22 Sep 2000 18:24:42 -0600 (MDT)
Message-Id: <200009230024.SAA20488@nomad.yogotech.com>
From: Nate Williams <nate@yogotech.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
To: Neil Blakey-Milner <nbm@mithrandr.moria.org>
Cc: Nate Williams <nate@yogotech.com>, Warner Losh <imp@village.org>,
	security@FreeBSD.ORG, Peter Wemm <peter@netplex.com.au>
Subject: Re: sendmail default run state
In-Reply-To: <20000923021119.A35919@mithrandr.moria.org>
References: <20000922215616.A33103@mithrandr.moria.org>
	<200009100358.e8A3wUG76071@netplex.com.au>
	<200009100415.e8A4F4G76156@netplex.com.au>
	<20000910154357.A78311@mithrandr.moria.org>
	<200009222012.OAA70984@harmony.village.org>
	<200009230001.SAA20358@nomad.yogotech.com>
	<20000923021119.A35919@mithrandr.moria.org>
X-Mailer: VM 6.34 under 19.16 "Lille" XEmacs Lucid
Reply-To: nate@yogotech.com (Nate Williams)
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

> > > : I personally would really like 'sendmail_outbound_only="YES"' to be the
> > > : default in /etc/defaults/rc.conf, with an option in sysinstall's Network
> > > : Services for turning it on/off.
> > > 
> > > I like this a lot.  We have several machines in the Village that ARE
> > > NOT FOR EMAIL (caps ment to describe the tone of voice we have when we 
> > > talk about them).  These machiens generate email all the time, but
> > > should never receive email.  We solve this problem with a simple cron
> > > job that runs once a day after the daily/weekly/monthly scripts run to 
> > > deal with failures to send those right away.
> > 
> > I don't understand the issue.  I've got machines, and I just never
> > startup sendmail, but it sends email out just fine using the
> > null-client sendmail setup for 'locally' generated email.
> > 
> > This limits the sendmail connections to a known server, and doesn't
> > require sendmail to listen on port 25.
> > 
> > What am I missing?
> 
> How do you enable nullclient from rc.conf?
> 

Gotcha.

> What happens if your smarthost server goes down - when does sendmail
> check your queue again?

It doesn't go down. :)

> Two different issues - sendmail for queueing and delivery, but not
> listening to network, and sendmail with smarthost.  We can emulate the
> first in the rc system, but not obviously easily the second.

True.


Nate


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message