remote denial of service in postfix

The value of SMTPD_LISTEN_REMOTE accidentally defaulted to ‘yes’. The postfix smtp daemon therefore was reachable over the network by default. This update resets the value to ‘no’ in /etc/sysconfig/mail. If you intentionally want postfix to listen for remote connections you need to manually set it to ‘yes’ again. This update also fixes a problem where the relay database was not created and postfix refused to start.

Solution

Manually set SMTPD_LISTEN_REMOTE to ‘no’ and run # SuSEconfig --module postfix