Securing-Optimizing-RH-Linux-1_2_263
Comments and suggestions concerning this book should be mailed to gmourani@videotron.ca
© Copyright 1999-2000 Gerhard Mourani and Open Network Architecture ®
263
To stop Sendmail daemon to run on your neighbor or local server, client machines, edit or create
the /etc/sysconfig/sendmail file and change/add the lines that read:
DAEMON=yes
To read:
DAEMON=no
And:
QUEUE=1h
NOTE: The QUEUE=1h under /etc/sysconfig/sendmail file cause Sendmail to process the
queue once every 1 hour. We leave that line in place because Sendmail still needs to process the
queue periodically in case the Mail Hub is down.
Step 3
Local machines never use aliases, access, or other maps database. Since all maps file database
are located and used on the Central Mail Hub Server for all local machines we may have on the
network, we can safety remove the following command and man pages from all our local
machines.
/usr/bin/newaliases
/usr/man/man1/newaliases.1
/usr/man/man5/aliases.5
·
To remove the following files from your system, use the command:
[root@client /]# rm -f /usr/bin/newaliases
[root@client /]# rm -f /usr/man/man1/newaliases.1
[root@client /]# rm -f /usr/man/man5/aliases.5
Configuration of the /etc/sysconfig/sendmail file for all type of configuration
The /etc/sysconfig/sendmail file is used to specify SENDMAIL configuration information like if
sendmail must run as a daemon and listen for mail or not, how must time to wait before sending a
warning if messages in queue directory has not been delivered.
Create the sendmail file (touch /etc/sysconfig/sendmail) and add in this file:
DAEMON=yes
QUEUE=1h
The DAEMON=yes option instruct Sendmail to run as a daemon. This line is useful when
Sendmail client machines are configured to not accept mail directly from outside, forward all local
mail to a Central Hub, and dont run as a daemon for better security. If you are configured your
server or client machines in this way, all you have to do is to replace the DAEMON=yes to
DAEMON=no.
Mail is usually placed into the queue because it could not be transmitted immediately. The
QUEUE=1h set the time interval before sends a warning to the sender, if the messages has not
been delivered.
Configuration of the /etc/rc.d/init.d/sendmail script file for all type of
configuration
Configure your /etc/rc.d/init.d/sendmail script file to start and stop Sendmail daemon Server.
Create the sendmail script file (touch /etc/rc.d/init.d/sendmail) and add: