[2258] in WWW Security List Archive
Re: Email Hack: Help.
daemon@ATHENA.MIT.EDU (Chris Woods)
Tue Jun 25 16:30:49 1996
Date: Tue, 25 Jun 1996 14:24:02 -0400
From: Chris Woods <cjwoods@paladin.com>
To: Steff Watkins <Steff.Watkins@Bristol.ac.uk>
CC: WWW-SECURITY@ns2.rutgers.edu
Errors-To: owner-www-security@ns2.rutgers.edu
Steff Watkins wrote:
>
> Assuming that the systems that have email daemons are Unix-based, you can
> use the 'hosts.allow' and 'hosts.deny' mechanism.
>
> Just add all valid hosts to the '/etc/hosts.allow' file and then put 'all'
> in the '/etc/hosts.deny' file against the 'smtp' entry.
This only works if you are running SMTP from inetd. I personally have
never seen sendmail called from inetd, but I have heard of it being done.
;-)
-cjw
