Just out of curiosity: what type of install did you do? RedHat has
vastly increased security concerns with 7.1; including having most
services off by default.

On Wed, 18 Apr 2001, Robert Anderson wrote:

>
> I'm sorry if this has been going out on the list all morning but it
> needs to be said and at this time I have no way of knowing if it has
> been.  If it was said send me PRIVATE mail so that we don't just waste
> bandwidth saying so.
>
> I have not recieved any mail this morning since I did a RedHat 7.1
> upgrade.  If you upgrade or do a scratch install with RedHat 7.1 you
> too will have the following problems.  I'll explain the problem and
> give the solution.
>
> First the problem:
> ------------------
>
> If your linux box recieves mail directly (NOT from an IMAP/POP query )
> using sendmail on port 25, the RedHat 7.1 shipped sendmail will break
> things.
>
> There are actually TWO problems:
>
> (Problem 1) By default sendmail is only listening to the local loopback
>             interface.  You can tell this with the following command:
>
>     netstat -tan
>
>     Bad entry:
>
>         tcp        0      0 127.0.0.1:25    0.0.0.0:*    LISTEN
>
>     Good entry:
>
>         tcp        0      0 0.0.0.0:25      0.0.0.0:*    LISTEN
>
>
> (Problem 2) Sendmail is now using tcpwrappers.  To check this look in
>             the logs: "tail /var/log/maillog".  And see if you have
>             any "rejection" lines.  They will look something like this:
>
>           Apr 18 13:26:58 q sendmail[1681]: f3IHQwW01681: tcpwrappers
>           (q.sr.unh.edu, 132.177.241.27) rejection
>
> The Solutions:
> --------------
>
> Two problems, two solutions, unless you decide to get your mail by
> some other means.  Please note that Solution 1 has a couple of steps.
>
> (Solution 1) In STEP 1 we make sendmail listen on your normal
>            interfaces by editting "/etc/mail/sendmail.mc" and
>            commenting out (put dnl in front of) "DAEMON_OPTIONS"
>            to look like the following:
>
> ----------------------------------------------------------------------
> dnl This changes sendmail to only listen on the loopback device 127.0.0.1
> dnl and not on any other network devices. Comment this out if you want
> dnl to accept email over the network.
> dnl DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')
> dnl We strongly recommend to comment this one out if you want to protect
> dnl yourself from spam. However, the laptop and users on computers that do
> dnl not have 24x7 DNS do need this.
> dnl FEATURE(`accept_unresolvable_domains')dnl
> dnl FEATURE(`relay_based_on_MX')dnl
> MAILER(smtp)dnl
> MAILER(procmail)dnl
> ----------------------------------------------------------------------
>
> For STEP 2 you must have sendmail-cf installed (found on RedHat 7.1
> disk 1).  You still need to run the following commands for the STEP 1
> changes to take affect.  The first command is described in the top of
> the file you edited in step 1:
>
>     m4 /etc/mail/sendmail.mc > /etc/sendmail.cf
>
> In STEP 3 you will need to restart sendmail like so:
>
>     /etc/init.d/sendmail restart
>
>
>
> (Solution 2) Add a "sendmail: all" line to your /etc/hosts.allow file.
>              That can be done easily with you favorite editor or the
>              command: "echo 'sendmail: all' >>/etc/hosts.allow"
>
>
> I hope this helps somebody from having to find all this out on there
> own the way I did.
>
> --------------------------------------------------------------
>  Robert E. Anderson                   email: [EMAIL PROTECTED]
>  Systems Programmer                   phone: (603) 862-3489
>  UNH Research Computing Center                  fax: (603) 862-1761
> --------------------------------------------------------------
>
> **********************************************************
> To unsubscribe from this list, send mail to
> [EMAIL PROTECTED] with the following text in the
> *body* (*not* the subject line) of the letter:
> unsubscribe gnhlug
> **********************************************************
>

-- 
Thomas M. Albright
Albright Enterprises - "The Small Business Solution"
http://www.albrightent.com/


**********************************************************
To unsubscribe from this list, send mail to
[EMAIL PROTECTED] with the following text in the
*body* (*not* the subject line) of the letter:
unsubscribe gnhlug
**********************************************************

Reply via email to