Ensure mail transfer agent is configured for local-only mode

SedangLevel 1Otomatisros

Deskripsi

Mail Transfer Agents (MTA), such as sendmail and Postfix, are used to listen for incoming mail and transfer the messages to the appropriate user or mail server. If the system is not intended to be a mail server, it is recommended that the MTA be configured to only process local mail. The audit requires nothing to listen on port 25 except 127.0.0.1 and ::1 (ss). Host-level control from the CIS ROS Melodic benchmark (Ubuntu 18.04 robot hosts); run as root.

Cara pemeriksaan

Metode audit: Perintah shell

shell

command -v ss >/dev/null 2>&1 || exit 1
l=$(ss -Hlntu 2>/dev/null | awk '$5 ~ /:25$/ {print $5}' | grep -Ev '^(127\.0\.0\.1|\[::1\]|::1):25$')
[ -z "$l" ] && echo compliant || echo "MTA listening on: $(printf '%s ' $l)"

Output yang diharapkan: compliant

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Edit /etc/postfix/main.cf and add the following line to the RECEIVING MAIL section. If the line already exists, change it to look like the line below: inet_interfaces = loopback-only Restart postfix: # systemctl restart postfix

Properti

Sistem operasi: Apa saja
Tag: rosros1melodicservices
Referensi: CIS ROS Melodic Benchmark v1.0.0 - 2.2.15 Ensure mail transfer agent is configured for local-only mode

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target ros