few scripting questions

[Alexander Dalloz]

Am Mi, den 13.04.2005 schrieb Alexander Dalloz um 19:26:
> Am Mi, den 13.04.2005 schrieb rado um 18:55:
> 
> > 1. when syncing mail from one machine to another, right now I shut down
> > sendmail copy the mail over then service sendmail start. Wondering if I
> > just couldn't shut down port 25? If so how to shut down and open ports
> > in a script?
> 
> close: /sbin/iptables -I INPUT -p tcp -m tcp --dport 25 -j REJECT
> --reject-with icmp-port-unreachable
> open: /sbin/iptables -D INPUT -p tcp -m tcp --dport 25 -j REJECT
> --reject-with icmp-port-unreachable

> Alexander

Instead of closing port 25 completely it may be wiser to let Sendmail
keep running but to prevent it to accept incoming mail. One way to do so
could be to stop a milter service - i.e. if you have clamav-milter
running - and let Sendmail then report a temporary failure to the sender
MTA.

Alexander


-- 
Alexander Dalloz | Enger, Germany | GPG http://pgp.mit.edu 0xB366A773
legal statement: http://www.uni-x.org/legal.html
Fedora Core 2 GNU/Linux on Athlon with kernel 2.6.11-1.14_FC2smp 
Serendipity 19:50:47 up 1 day, 16:31, load average: 2.02, 1.33, 0.89 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20050413/ff65bc58/attachment-0001.sig>