Sendmail 8.13.3 Securing Mailing Solution

1. Follow this procedure to generate the /etc/mail/sendmail.cf file:

NOTE: Ensure that you obtain a backup of the existing Sendmail 8.13.3

configuration files (/etc/mail/sendmail.cf and /etc/mail/submit.cf)

so that you can revert to the original state if you encounter any configuration issues

and you do not loose any site-specific customized configuration.

a. To change the directory to the /usr/newconfig/etc/mail/cf/cf directory,

enter the following command:

cd /usr/newconfig/etc/mail/cf/cf

b. To copy the generic-hpux10.mc file to the generic-hpux10.mc.ORIG

file, enter the following command:

cp generic-hpux10.mc generic-hpux10.mc.ORIG

c. Add the following entries to the generic-hpux10.mc file and enter the

sendmail-sasl server name:

define(`SMART_HOST',<` sendmail-sasl server name'>dnl

define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM

- MD5 LOGIN PLAIN')dnl

FEATURE(`authinfo',`hash /etc/mail/auth/client-info')dnl

d. To generate the sendmail.cf.gen file, enter the following command and

select the "5: Generate sendmail.cf" option in the main menu:

./gen_cf

e. To copy the /etc/mail/sendmail.cf file to the

/etc/mail/sendmail.cf.PREVIOUS file, enter the following command:

cp /etc/mail/sendmail.cf /etc/mail/sendmail.cf.PREVIOUS

f. To copy the sendmail.cf.gen file to the /etc/mail/sendmail.cf file,

enter the following command:

cp sendmail.cf.gen /etc/mail/sendmail.cf

g. To restore the generic-hpux10.mc file, enter the following command:

cp generic-hpux10.mc.ORIG generic-hpux10.mc

2. Follow this procedure to set up Sendmail 8.13.3 as a SASL client:

a. To change directory to the location where the Sendmail 8.13.3 configuration

files are located (usually the /etc/mail/. directory), enter the following

command:

cd /etc/mail/

b. To create a safe subdirectory called auth under the /etc/mail/ directory,

enter the following commands:

mkdir auth

chmod 700 auth

c. To create a file called client-info under the /etc/mail/auth directory,

enter the following command:

vi client-info