From owner-freebsd-current@FreeBSD.ORG Mon Feb 24 08:42:49 2014 Return-Path: Delivered-To: current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id A9D879B2; Mon, 24 Feb 2014 08:42:49 +0000 (UTC) Received: from theravensnest.org (theraven.freebsd.your.org [216.14.102.27]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 7490C1827; Mon, 24 Feb 2014 08:42:49 +0000 (UTC) Received: from [192.168.0.7] (cpc28-cmbg15-2-0-cust64.5-4.cable.virginm.net [86.27.189.65]) (authenticated bits=0) by theravensnest.org (8.14.7/8.14.5) with ESMTP id s1O8gh1B053497 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Mon, 24 Feb 2014 08:42:47 GMT (envelope-from theraven@FreeBSD.org) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 7.1 \(1827\)) Subject: Re: Import of DragonFly Mail Agent From: David Chisnall In-Reply-To: <20140224083502.GY1699@ithaqua.etoilebsd.net> Date: Mon, 24 Feb 2014 08:42:36 +0000 Content-Transfer-Encoding: quoted-printable Message-Id: <1C9C5D61-493D-419D-9FCC-FFA1C10B3748@FreeBSD.org> References: <20140223211155.GS1699@ithaqua.etoilebsd.net> <20140224073418.GX1699@ithaqua.etoilebsd.net> <20140224083502.GY1699@ithaqua.etoilebsd.net> To: Baptiste Daroussin X-Mailer: Apple Mail (2.1827) Cc: Julio Merino , "current@freebsd.org Current" X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Feb 2014 08:42:49 -0000 On 24 Feb 2014, at 08:35, Baptiste Daroussin wrote: > dma can exactly do that :) while being smaller than opensmtpd (which = is very > very nice as well, this is the one I use when I need a full smtp setup = :)) Sounds excellent then. We definitely should be moving to a world where = all of the base system services are compartmentalised with capsicum and = given the attack surface and complex security requirements of an MTA, it = sounds like it would be an excellent idea. If you're willing to do the = work then that's excellent (and makes you the de-facto winner of any = resulting bikeshed)! It would be good to have it merged to 10 for 10.2 so that people can = play with it early. If we decide to switch for 11, then it would also = be a good idea to teach the upgrade process how to recognise non-default = sendmail configurations (or, at least, ask the question), move them to = /usr/local, and install a sendmail port, so that people who want to be = using it will keep doing so. I'm only using sendmail because I learned = just enough of the config file syntax to do what I wanted 10 or so years = ago and then I had a working config and never overcame the inertia = required to switch - a clean and modern replacement in base would give = me the right incentive! David