epilogue at allstream.net
Wed Sep 29 13:00:59 PDT 2004
On Wed, 29 Sep 2004 14:53:51 -0400
Bill Moran <wmoran at potentialtech.com> wrote:
> Ronnie Clark <ronj_clark at yahoo.com> wrote:
> > Bill,
> > Thanks for the response. Here is the last entry in the
> > maillog file:
> > Sep 29 03:01:48 src at rc_gcux sendmail:
> > i8T81lo5001204: to=root, delay=00:00:00,
> > xdelay=00:00:00, mailer=relay, pri=31632,
> > relay=[127.0.0.1], dsn=4.0.0, stat=Deferred:
> > Connection refused by [127.0.0.1]
> > This makes sense that the log says what it does since
> > I have sendmail_enable="NONE". What I am asking is if
> > there is a way to not have this file at all since
> > there is no need to send amy mail of any kind from
> > this server. Make sense?
> Not really.
> A lot of stuff in FreeBSD uses email for notifications and the like.
> A few examples are cron (which will email the output of cron jobs) and
> periodic. If you want to disable _all_ mail delivery, you'll need to
> track down all of these utilities and either a) prevent them from
> running or b) arrange for notifications from them to be sent via some
> other means.
while this may not catch everything, it is a good and reasonable (imho)
1) add the following lines to /etc/periodic.conf:
2) be sure that these logs exist. if they don't, 'touch' them.
3) the following in rc.conf:
syslogd_flags="-ss" # read the man page, if you want details
inetd_enable="NO" # <- only if you're not running any inet services
4) reboot or shutdown. upon restart, examine 'netstat -n | grep -i list'
for output. if get any output, it is for services that are 'listening'.
deal with those, as you see fit.
5) if you ever need to send mail from this host, use one of the clients
which have their own MTA's integrated (ex. sylpheed). while such CLI
clients may exist, i am only aware of the gui clients.
while it doesn't everything (firewalls in particular), this is a very good
article, if you're looking to start locking down this machine:
> I don't know that a comprehensive list of these applications has ever
> been compiled, but I think disabling them and mail delivery is A Bad
> Idea (tm) because you're pretending your smarter than 30 years of
> Unix system administrators' combined experience.
> The Right Thing To Do (tm) is to set sendmail_enable="NONE" (or
> replace sendmail with ssmtp) and configure the "root" account to
> forward to your email account so you can properly receive these
> informative emails. If you're not familiar with sendmail or
> uncomfortable with it doing anything, check out the handbook page
> on replacing it with ssmtp:
> > --- Bill Moran <wmoran at potentialtech.com> wrote:
> > > Ronnie Clark <ronj_clark at yahoo.com> wrote:
> > >
> > > > Hello all,
> > > >
> > > > I am building a central syslog server. I am seeing
> > > > sendmail related items in the maillog file, even
> > > > though I have sendmail_enable="NONE" in my
> > > > /etc/rc.conf file. Is there a way to turn off any
> > > > resemblance of an MTA on a FreeBSD system? Or, is
> > > > there a way to turn on a localhost MTA but not
> > > have it
> > > > actively listen on a port? (in this case tcp 587)
> > >
> > > sendmail_enable="NONE" should disable it totally.
> > >
> > > sendmail_enable="NO" should allow local submission
> > > only.
> > >
> > > You could also install something like ssmtp to
> > > replace sendmail.
> > >
> > > What kind of log messages are you getting?
> > >
> > > --
> > > Bill Moran
> > > Potential Technologies
> > > http://www.potentialtech.com
> > >
> > _______________________________
> > Do you Yahoo!?
> > Declare Yourself - Register online to vote today!
> > http://vote.yahoo.com
> > _______________________________________________
> > freebsd-questions at freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> > To unsubscribe, send any mail to
> > "freebsd-questions-unsubscribe at freebsd.org"
> Bill Moran
> Potential Technologies
> freebsd-questions at freebsd.org mailing list
> To unsubscribe, send any mail to
> "freebsd-questions-unsubscribe at freebsd.org"
More information about the freebsd-questions