Subject: Re: localhost security hole
To: Andrew Brown <>
From: Rick Kelly <>
List: tech-security
Date: 06/28/2003 12:26:38
Andrew Brown said:

>sendmail knows to deliver to "localhost".  it looks up "localhost" and
>finds  when it attempts delivery there, it also looks up
> so that it can put a canonicalized name in the
>logs.  in your case, that maps to "".  you
>need to fix that, but i don't believe it's a problem.

Or to put it a little differently. If you don't have a localhost zone
in your DNS configuration, then your DNS is broken.

Rick Kelly