Sendmail : security problem ?
Hello,
By default, the sendmail.cf sets PrivacyOptions to authwarnings only,
allowing one to telnet to port 25 and use SMTP commands VRFY and EXPN to
find user names, or to expand list aliases.
IMHO, default should be "goaway" (if we don't want this for finger, why
allowing it via SMTP ?).
A+
--
Thierry LARONDE <thierry.laronde@polynum.com>
10, rue du Bel Air, 74000 ANNECY - FRANCE/ Tel : 33.(0)4.50.67.46.61
/home du SDF (Site Debian Francophone) : http://www.polynum.com/sdf/
Reply to: