From owner-freebsd-questions@FreeBSD.ORG  Wed Sep  5 21:04:17 2007
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id E346516A418
	for <freebsd-questions@freebsd.org>;
	Wed,  5 Sep 2007 21:04:17 +0000 (UTC)
	(envelope-from stapleton.41@gmail.com)
Received: from fk-out-0910.google.com (fk-out-0910.google.com [209.85.128.187])
	by mx1.freebsd.org (Postfix) with ESMTP id 6688013C442
	for <freebsd-questions@freebsd.org>;
	Wed,  5 Sep 2007 21:04:17 +0000 (UTC)
	(envelope-from stapleton.41@gmail.com)
Received: by fk-out-0910.google.com with SMTP id b27so2515598fka
	for <freebsd-questions@freebsd.org>;
	Wed, 05 Sep 2007 14:04:08 -0700 (PDT)
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta;
	h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
	b=pJdieK36BoVxhOktVbT7EpQY9ZQK1ff0pUu2YrJPJroNqHzL9Wz4Rj1iSD9jsv6O/xpUd0tLzKMhupgzvCHYRltmw63uvLlRJU38CA7Bw7v06McfwNk5tyHVd03JuIUn2cbbEwAZaOrW99iG+5IFtDoH6KpTqf265L75UYfhKyA=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta;
	h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
	b=d9e3Pti+kEvl1VB05Z0HOIxIMsoqyrqQAp6cHsUBhD+WEPTEAB/3kq5RGz7YZFM20SoZ1PaAbp2BOZsXHL8pVV5C8yKOnKHMemhWhftzzD2JoGcAyrdK27Gaj1eilYtgqKvxMc1f3R4o2m33nn8IS0DapUtsva2YgrFuE7o1Oqw=
Received: by 10.82.183.19 with SMTP id g19mr17084226buf.1189026248157;
	Wed, 05 Sep 2007 14:04:08 -0700 (PDT)
Received: by 10.82.191.14 with HTTP; Wed, 5 Sep 2007 14:04:08 -0700 (PDT)
Message-ID: <80f4f2b20709051404l6091bafas48d63fd4076e8fef@mail.gmail.com>
Date: Wed, 5 Sep 2007 17:04:08 -0400
From: "Jim Stapleton" <stapleton.41@gmail.com>
To: "Ted Mittelstaedt" <tedm@toybox.placo.com>
In-Reply-To: <BMEDLGAENEKCJFGODFOCMEFDCAAA.tedm@toybox.placo.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <80f4f2b20709050354q4d186df4y6958e2f81d5dfc66@mail.gmail.com>
	<BMEDLGAENEKCJFGODFOCMEFDCAAA.tedm@toybox.placo.com>
Cc: Nikola Lecic <nlecic@eunet.yu>, "Russell E. Meek" <rmeek@russellmeek.net>,
	freebsd-questions@freebsd.org
Subject: Re: mail server setup questions
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 05 Sep 2007 21:04:18 -0000

> I would submit you think you do.  For example, are you planning on
> putting a webmail interface on the server?  A lot of people do.  Well
> if you do and you put a scrap of CGI on there that has a hole in it
> a spammer can come along and cause that to relay mail from incoming
> http right into your mail queue.  He doesen't need root access to
> do this.

I have never stated interest in putting web mail up in my to-do list,
and in fact, have explicitly stated at least once, I've no intention
of doing that. To be blunt, I don't trust it. I only use it for things
on which I don't care about the security (ex. reading mailing lists).
I care about the security of my server.

-Jim Stapleton