On 04/20/2014 02:00 PM, Dan Thurman wrote:
On 04/20/2014 01:38 PM, jdow wrote:
> Heartbleed... Anybody running an OpenSSL server has compromised
> passwords
> for anybody using the system at least from when the vulnerability was
> revealed until it was repaired should consider every password on the
> system is compromised. They should ALL be changed, pronto. And you
> should
> make sure it is the right person changing the passwords.
>
> {^_^}
>
I have F8 and F18. F8 is not affected by HB and F18 is HB
fixed (recompiled) and certificates regenerated. Both Fedora
versions have the same "open-relay" issues and both have
similar or nearly identical sendmail.mc configurations.
Here is my sendmail.mc file and
let me know if there is a problem?:
<snip!>
DAEMON_OPTIONS(`Port=smtp, Name=MTA')dnl
Drop 1 below:
DAEMON_OPTIONS(`Family=inet, Port=465, Name=MTA-SSL M=s')dnl
Add 2 below:
DAEMON_OPTIONS(`Port=submission, Name=MSA, M=Ea')dnl
DAEMON_OPTIONS(`Port=smtps, Name=TLSMTA, M=s')dnl
So far, the spamming stopped...