From owner-freebsd-current@FreeBSD.ORG Mon Feb 24 08:32:27 2014 Return-Path: Delivered-To: current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 450DA3F6; Mon, 24 Feb 2014 08:32:27 +0000 (UTC) Received: from theravensnest.org (theraven.freebsd.your.org [216.14.102.27]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 115AD1748; Mon, 24 Feb 2014 08:32:26 +0000 (UTC) Received: from [192.168.0.7] (cpc28-cmbg15-2-0-cust64.5-4.cable.virginm.net [86.27.189.65]) (authenticated bits=0) by theravensnest.org (8.14.7/8.14.5) with ESMTP id s1O8WJwk053446 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Mon, 24 Feb 2014 08:32:23 GMT (envelope-from theraven@FreeBSD.org) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 7.1 \(1827\)) Subject: Re: Import of DragonFly Mail Agent From: David Chisnall In-Reply-To: <20140224073418.GX1699@ithaqua.etoilebsd.net> Date: Mon, 24 Feb 2014 08:32:13 +0000 Content-Transfer-Encoding: quoted-printable Message-Id: References: <20140223211155.GS1699@ithaqua.etoilebsd.net> <20140224073418.GX1699@ithaqua.etoilebsd.net> To: Baptiste Daroussin X-Mailer: Apple Mail (2.1827) Cc: Julio Merino , "current@freebsd.org Current" X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Feb 2014 08:32:27 -0000 On 24 Feb 2014, at 07:34, Baptiste Daroussin wrote: > Usual complains about sendmail in base until now has been: > - complex configuration > - long history of security concerns > - no need for a full mta in base The other complaint is that sendmail is only half of a useable MTA in = base. If you actually want to use it for anything other than local = delivery, then you need to turn on authentication, which means = installing the saslauthd port and then recompiling sendmail from source. = As soon as you do a freebsd-update, email stops working and you need to = recompile sendmail again, meaning that you can't get binary security = updates for one of the parts of the system with the worst security = record. I would love to have something in the base system that can handle mail = delivery and authenticated relaying out of the box. OpenBSD now ships = with osmpd, which seems to work quite well for this, and if dma can as = well then I'm very much in favour of it. David