Re: [PLUG] exim4 and tcp_wrappers

[Jeff Abrahamson <jeff@purple.com>]

On Mon, Jun 12, 2006 at 02:51:19PM +0100, Stephen Gran wrote:
>   [21 lines, 152 words, 1060 characters]  Top characters: -etnisoa
> 
> On Sun, Jun 11, 2006 at 11:35:14AM -0400, Jeff Abrahamson said:
> > I want to allow direct smtp to my machine, but only from a limited set
> > of hosts (who MX for me).  Since exim4 is not linked against libwrap,
> > I don't expect it to respect /etc/hosts.{deny,allow}, and it turns out
> > that it doesn't when I try it.
> > 
> > So I put exim4 in inetd.conf:
> > 
> >    smtp   stream    tcp    nowait    uucp    /sbin/exim4 exim4 -bs
> 
> This should probably be
>     smtp   stream    tcp    nowait    Debian-exim /usr/sbin/tcpd /usr/sbin/exim4 exim4 -bs
> 
> But isn't iptables and running exim as a daemon simpler?

Yes, it surely is.  I have switched back to running exim as a daemon.

MCT proposed (previous email) not even bothering with the iptable
rules.  This seems reasonable to me barring problems in the future.
So that's what I'm doing.  I confirmed that I don't relay.

-- 
 Jeff

 Jeff Abrahamson  <http://jeff.purple.com/>          +1 215/837-2287
 GPG fingerprint: 1A1A BA95 D082 A558 A276  63C6 16BF 8C4C 0D1D AE4B

Attachment: signature.asc
Description: Digital signature

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug