Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 12 Jun 2001 21:11:57 -0400 (EDT)
From:      "Ian P. Thomas" <ipthomas_77@yahoo.com>
To:        scanner@jurai.net
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Yanking Sendmail need something easier to understand
Message-ID:  <200106130111.VAA02765@scraemondaemon.my.domain>
In-Reply-To: <Pine.BSF.4.21.0106122002480.53347-100000@sasami.jurai.net> from "scanner@jurai.net" at Jun 12, 2001 08:06:30 PM

next in thread | previous in thread | raw e-mail | index | archive | help
	Where did I say Postfix was insecure by design?  It is a good
replacement for Sendmail due to the fact that unlike Sendmail, it does not
use any setuid programs.  Its design is actually rather secure.  Configured
properly, I beleive Sendmail can also be quite secure.  I get most of my
information from online sources and the O Reilly books.  In fact one in
particular, Building Internet Firewalls, has many good points to make about
all MTA's.  It makes a point of recommending Postfix if you choose not to
run Sendmail.

Ian

In the last episode, scanner@jurai.net stated...
> 
> On Tue, 12 Jun 2001, Ian P. Thomas wrote:
> 
> > 	I've never used postfix, but from what I've heard, it was built as
> > a replacement for Sendmail due to Sendmail's numerous security problems.
> > YMMV.  I run Sendmail with the smrsh option, this allows Sendmail to use a
> > shell other than sh for its activities.  The smrsh was developed as a
> > secure replacement for sh.  You can even specify which user commands smrsh
> > will execute by putting them in /usr/adm/sm.bin/.  Performance wise, I can
> > only speak from my own experience and say that Sendmail has always worked
> > for me, but I only get around 200-300 email through my machine daily.
> 
> Hahah. Where did you hear this? 
> 
> Postfix has as one main goal to be a drop in replacement for sendmail as
> in compatability thats all. It's more secure then qmail and sendmail. And
> performs 300% faster then qmail. Where ever you heard Postfix is insecure
> by design, I would find a new place of information.
> 
> =============================================================================
> -Chris Watson         (316) 326-3862 | Sr. Unix Administrator 
> Work:           chris.watson@twa.com | Trans World Airlines, Kansas City, MO
> Home:              scanner@jurai.net | http://www.twa.com
> =============================================================================
> WINDOWS: "Where do you want to go today?"
> LINUX: "Where do you want to go tomorrow?"
> BSD: "Are you guys coming or what?"
> =============================================================================
> irc.openprojects.net #FreeBSD -Join the revolution!
> ICQ: 20016186
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200106130111.VAA02765>