MSA & MTA & Milters Was [Re: Firewall and NAT]

[Alexander Dalloz]

Am Mi, den 03.11.2004 schrieb Ow Mun Heng um 12:09:

> > >>Separate MSA on port 587 and MTA on port 25:
> > >>* Only one daemon running, as MSA on port 587 and MTA on port 25 (plus
> > >>separate MSP instance). Check the output of ps to verify this for
> > >>yourself.
> > > 
> > > 
> > >   799 ?        Ss     0:00 sendmail: accepting connections       
> > >   802 ?        Ss     0:00 sendmail: Queue runner at 00:30:00 for /var/spool/clientmqueue
> > > 
> > > There are 2 instances.
> > 
> > The first is the MTA/MSA (configured by sendmail.cf), the second is the queue 
> > runner for the MSP (configured by submit.mc). If you turn off the MSA you'll 
> > still have two instances.
> 
> Dang.. Then what's happening? Oh.. 1 sendmail daemon, 2 listening ports.
> DUH.
> 
> I turned it off and I still see 2 processes.

This security model came up with Sendmail 8.12.x, which has a main
process running as root and the queue runner running as user smmsp.

Alexander


-- 
Alexander Dalloz | Enger, Germany | new address - new key: 0xB366A773
legal statement: http://www.uni-x.org/legal.html
Fedora GNU/Linux Core 2 (Tettnang) on Athlon kernel 2.6.8-1.521smp 
Serendipity 18:06:33 up 14 days, 15:46, load average: 0.18, 0.29, 0.32 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
Url : http://lists.fedoraproject.org/pipermail/users/attachments/20041103/9308953c/attachment-0002.bin