This Application checklist is not at all mature; use it for general
reference only until it is ready...
|
local mail |
| If you don't need to receive local mail on the machine, then
set sendmail to
refuse local mail. This gets rid of insecurities with
the local mail delivery program.
|
|
aliases |
| Alias all "system" accounts.
|
|
aliases |
| Alias "software" accounts properly.
|
|
aliases |
| Remove any inappropriate aliases entries, such as "uudecode";
there should be no program aliases except the ones you explicitly
put there.
|
|
antispam |
| Modern versions of sendmail come configured correctly by default
to reject attempts to use your system to relay spam. Do not turn
these measures off.
|
|
tcp_wrappers |
| If you don't need to receive mail from the outside,
use tcp_wrappers to restrict access to your sendmail daemon.
|
|
run as non-daemon |
| For safety's sake, configure sendmail to run as "nul-mail",
not as daemon, when not running as root or as a local user.
In your .mc file:
define(`confDEF_USER_ID', `342:342')
|
![[IITS Home]](/style/button_iits_home.gif)
![[Concordia Home]](/style/button_conu_home.gif)