From owner-freebsd-security Sun Nov 17 22:11:59 1996 Return-Path: owner-security Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id WAA14269 for security-outgoing; Sun, 17 Nov 1996 22:11:59 -0800 (PST) Received: from mexico.brainstorm.eu.org (root@mexico.brainstorm.fr [193.56.58.253]) by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id WAA14243 for ; Sun, 17 Nov 1996 22:11:24 -0800 (PST) Received: from brasil.brainstorm.eu.org (brasil.brainstorm.fr [193.56.58.33]) by mexico.brainstorm.eu.org (8.7.5/8.7.3) with ESMTP id HAA13581 for ; Mon, 18 Nov 1996 07:11:11 +0100 Received: (from uucp@localhost) by brasil.brainstorm.eu.org (8.6.12/8.6.12) with UUCP id HAA08168 for freebsd-security@FreeBSD.ORG; Mon, 18 Nov 1996 07:10:47 +0100 Received: (from roberto@localhost) by keltia.freenix.fr (8.8.2/keltia-uucp-2.9) id HAA23355; Mon, 18 Nov 1996 07:06:21 +0100 (MET) Message-ID: Date: Mon, 18 Nov 1996 07:06:20 +0100 From: roberto@keltia.freenix.fr (Ollivier Robert) To: freebsd-security@freebsd.org Subject: Re: BoS: Exploit for sendmail smtpd bug (ver. 8.7-8.8.2). References: <199611180134.RAA14418@salsa.gv.ssi1.com> X-Mailer: Mutt 0.50.05 Mime-Version: 1.0 X-Operating-System: FreeBSD 3.0-CURRENT ctm#2686 In-Reply-To: <199611180134.RAA14418@salsa.gv.ssi1.com>; from Don Lewis on Nov 17, 1996 17:34:25 -0800 Sender: owner-security@freebsd.org X-Loop: FreeBSD.org Precedence: bulk According to Don Lewis: > Qmail doesn't do all the ESMTP negotiation that sendmail does. It keeps > qmail simpler and less likely to be buggy, but not as functional. For > instance sendmail 8.7.x supports: 8BITMIME, SIZE, DSN, VERB, ONEX, but > whatever version of qmail I just checked only supports 8BITMIME and > PIPELINING. Sendmail 8.8.x adds ETRN. I don't think it handles 8BITMIME at all even if it announces it. Does it support rewriting from 8bit to 7bit and reverse ? > Sendmail's support of UUCP isn't wonderful (mostly a problem of > getting DNS totally disabled). How well does qmail support UUCP? That's a common misunderstanding. UUCP support in sendmail is pretty good (see my other mail). qmail is BAD for UUCP (and the author doesn't care). -- Ollivier ROBERT -=- The daemon is FREE! -=- roberto@keltia.freenix.fr FreeBSD keltia.freenix.fr 3.0-CURRENT #28: Sun Nov 10 13:37:41 MET 1996