Subject: Re: localhost security hole
To: Andrew Brown <atatat@atatdot.net>
From: Rick Kelly <rmk@toad.rmkhome.com>
List: tech-security
Date: 06/28/2003 12:26:38
Andrew Brown said:

>sendmail knows to deliver to "localhost".  it looks up "localhost" and
>finds 127.0.0.1.  when it attempts delivery there, it also looks up
>1.0.0.127.in-addr.arpa so that it can put a canonicalized name in the
>logs.  in your case, that maps to "localhost.citi.umich.edu".  you
>need to fix that, but i don't believe it's a problem.

Or to put it a little differently. If you don't have a localhost zone
in your DNS configuration, then your DNS is broken.

-- 
Rick Kelly  rmk@rmkhome.com  www.rmkhome.com