Ensure mail transfer agent is configured for local-only mode

SrednjaNivo 1Automatskaros

Opis

Mail Transfer Agents (MTA), such as sendmail and Postfix, are used to listen for incoming mail and transfer the messages to the appropriate user or mail server. If the system is not intended to be a mail server, it is recommended that the MTA be configured to only process local mail. The audit requires nothing to listen on port 25 except 127.0.0.1 and ::1 (ss). Host-level control from the CIS ROS Melodic benchmark (Ubuntu 18.04 robot hosts); run as root.

Kako se proverava

Metod provere: Komanda ljuske

shell

command -v ss >/dev/null 2>&1 || exit 1
l=$(ss -Hlntu 2>/dev/null | awk '$5 ~ /:25$/ {print $5}' | grep -Ev '^(127\.0\.0\.1|\[::1\]|::1):25$')
[ -z "$l" ] && echo compliant || echo "MTA listening on: $(printf '%s ' $l)"

Očekivani izlaz: compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Edit /etc/postfix/main.cf and add the following line to the RECEIVING MAIL section. If the line already exists, change it to look like the line below: inet_interfaces = loopback-only Restart postfix: # systemctl restart postfix

Svojstva

Operativni sistemi: Bilo koji
Oznake: rosros1melodicservices
Referenca: CIS ROS Melodic Benchmark v1.0.0 - 2.2.15 Ensure mail transfer agent is configured for local-only mode

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target ros