Jobst Schmalenbach was once rumoured to have said:
> 2: Sendmail comes by default with TCPWRAPPERS on, this is so stupid dear
> RedHat developers. TCPWRAPPERS will stop ANY mail from going through BUT
> the ones coming from the mailservers you specify. Now how many thousands
> of mailservers do I have to add?????????
> I searched the net for an hour or so to figure out how to stop this.
>
> I can say that I am totally pissed of how people answer questions:
> "this is in the FAQ", "RTFM", "read the sendmail site" but no hint
> how its done (mind you BEFORE that I went to *ALL* the sites but
> couldnt find a thing).
This is a RTFM.
in hosts.allow you can put something along the lines of:
sendmail: ALL
That should allow anybody to connect to sendmail.
I usually use iptables/ipchains rather than tcpwrappers though.
> 3: They didnt tell anybody that they did not include IPCHAINS module in the
> kernel (last versions it was part of it). So I installed my init script
> and when I started it I got this funny error message from Rusty HINTING
> that something in my rules were wrong (I mailed him about what happend).
>
> Well as this version was a new IPCHAINS and I had the one from RH6.2 I
> believed it in the first place.
>
> So it took a while to realize that the module was missing, once I did
> an "insmod ipchains" at the start of my script it was fine.
>
> How do you figure out what is part of the kernel and what is not?
Redhat 7.1 uses Kernel 2.4. You should be using iptables (aka
NetFilter). I even gave a presentation on whats New and Nifty in
Netfilter.
There is the ipchains compatibility stuff which you're obviously
using, but it isn't that hard to migrate to iptables.
C.
--
--==============================================--
Crossfire | This email was brought to you
[EMAIL PROTECTED] | on 100% Recycled Electrons
--==============================================--
--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug
