My impression is that RH has gone overboard in their attempt to secure
`sendmail'. A working `sendmail' does not imply an insecure system.
There is a middle ground that results in a working mail system and a
secure system *without* any additional configuration on the part of a
sysadmin.

--- Vladimir

Vladimir G. Ivanovic                    http://www.leonora.org/~vladimir
2770 Cowper St.                                         [EMAIL PROTECTED]
Palo Alto, CA 94306-2447                                 +1 650 678 8014

"JM" == John Moretti <[EMAIL PROTECTED]> writes:

  JM> On 16 Jul 2001 09:47:29 -0400, Chuck Mead wrote:

  >> For a very, very long time Red Hat has been repeatedly accused of
  >> releasing their distro in an insecure state... sendmail was always
  >> released as an open relay, telnet was enabled by default, many,
  >> many, many ports were left open to the world by default. So... in
  >> response to this valid criticism Red Hat has now started doing the
  >> exact opposite...  they now release with default configurations in a
  >> secure posture. I think it's important to note that in (my own
  >> non-scientific estimate) 100% of the cases the previous
  >> critique/accusation was being made by people who *are* capable of
  >> fixing/locking down their own machines. The newbies don't care...
  >> they just get owned and didn't know the difference anyway! So now
  >> that the problem has been fixed does that mean that the same class
  >> of people get to criticize Red Hat for *fixing* the problems they
  >> were previously being bitched out for? I don't think so.

  JM> THANK YOU Chuck!
  JM> You literally read my mind :-)
  JM> The thread is silly. Yes it is. RH has always been bitched at for being
  JM> not "secure per default" enough, and now that things get a littler
  JM> tighter there's massive complaining.

  JM> I might agree with doc, that it should be slightly more documented (even
  JM> though reading the RELEASE-NOTES is a must always.) just as the massive
  JM> libwrap usage should have been publicized a bit more as well. But still
  JM> this is the RIGHT way to go.

  JM> Cheers,
  JM> John



  JM> _______________________________________________
  JM> Seawolf-list mailing list
  JM> [EMAIL PROTECTED]
  JM> https://listman.redhat.com/mailman/listinfo/seawolf-list



_______________________________________________
Seawolf-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/seawolf-list

Reply via email to