Tutorial
sendmail Security
Eric Allman, Chief Technology Officer, Sendmail, Inc
Track: sendmail Tutorial
Date: Tuesday, July 18
Time: 8:45am
- 12:15pm
Location: Bonzai II-III
Who Should Attend:
System and network administrators who are responsible for sendmail
security, particularly on firewalls and other similar systems. This is a
fast-paced tutorial for those who are already familiar with configuring and
administering sendmail.
sendmail is a powerful Mail Transport Agent that can be configured for many
different environments, from firewalls to workstation mail servers. These
environments have different security requirements; in particular, in a pure
relay configuration (with no local user accounts or delivery) sendmail can
be configured to give up root permissions.
Course Outline:
- Principles of sendmail security
- How to configure sendmail on systems that have special security
requirements, notably firewalls and proxies
- Configuring sendmail to run as a non-root user
- Running sendmail in a "chroot"ed jail
- How to (and when to) relax sendmail's file security checks