<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.28.3">
</HEAD>
<BODY>
Hi Chris,<BR>
<BR>
your fully correct!<BR>
<BR>
/Rickard<BR>
<BR>
On Tue, 2010-05-11 at 07:23 -0500, Chris Gebhardt - VIRTBIZ Internet wrote:
<BLOCKQUOTE TYPE=CITE>
<PRE>
DD wrote:
> Hi Rickard,
>
> One of our clients has McAfee scanning the server which identifies an
> EXPN/VRFY vulnerability and requires:
>
> O PrivacyOptions=goaway
>
> in Sendmail.cf, otherwise they class it as a level 3 vuln and the client
> could lose their McAfee badge.
Oh. Would this be from the same Mcafee that caused hundreds of
thousands of systems to crash a couple weeks ago?
<A HREF="http://www.wired.com/threatlevel/2010/04/mcafeebungle/">http://www.wired.com/threatlevel/2010/04/mcafeebungle/</A>
Or would this be the Mcafee that tricks customers into selling their
credit card information?
<A HREF="http://www.wired.com/threatlevel/2010/04/mcafeelawsuit/">http://www.wired.com/threatlevel/2010/04/mcafeelawsuit/</A>
'cause I get confused which one is which. I have so little love for either!
To answer your initial question, you cannot make a change in sendmail.cf
and have it stick through updates. So you need to make your change in
sendmail.mc instead, then recompile the .cf, then restart Sendmail.
That should put you on your way.
</PRE>
</BLOCKQUOTE>
<BR>
<TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%">
<TR>
<TD>
<IMG SRC="cid:1273581119.7081.71.camel@newly.osser.se" ALIGN="bottom" BORDER="0"><BR>
<HR NOSHADE>
<BR>
<BR>
Bluapp AB<BR>
Rickard Osser<BR>
CTO<BR>
Solberga Ängsväg 3<BR>
125 44 Älvsjö<BR>
Sweden<BR>
<BR>
Web: <A HREF="http://www.bluapp.com">http://www.bluapp.com</A><BR>
Mail: <A HREF="mailto:rickard.osser@bluapp.com">rickard.osser@bluapp.com</A>
</TD>
</TR>
</TABLE>
</BODY>
</HTML>