> Does anybody know how I can turn EXPN (and VRFY) off on sendmail so that
> I don't run into security problems with majordomo? (Using EXPN on
> listname-outgoing to get the subscription list)
It's a compile time parameter, easy enough if you have source.
If not, you can achieve a small amount of security through obscurity by
calling the outgoing list listname-qwkjwdfkjddksdf rather than
listname-outgoing. The headers will just show "To: listname @
most cases, so there's no straightforward way to guess the list's true
John Levine, johnl @
com, Trumansburg NY
Primary Perpetrator of "The Internet for Dummies"
and Information Superhighwayman wanna-be