From owner-freebsd-hackers@FreeBSD.ORG Thu Jun 26 12:13:14 2003 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CF3F637B404 for ; Thu, 26 Jun 2003 12:13:13 -0700 (PDT) Received: from storm.FreeBSD.org.uk (storm.FreeBSD.org.uk [194.242.157.42]) by mx1.FreeBSD.org (Postfix) with ESMTP id F1D3443F93 for ; Thu, 26 Jun 2003 12:13:11 -0700 (PDT) (envelope-from mark@grondar.org) Received: from storm.FreeBSD.org.uk (Ugrondar@localhost [127.0.0.1]) by storm.FreeBSD.org.uk (8.12.9/8.12.9) with ESMTP id h5QJDA1f071774; Thu, 26 Jun 2003 20:13:10 +0100 (BST) (envelope-from mark@grondar.org) Received: (from Ugrondar@localhost)h5QJDA6P071773; Thu, 26 Jun 2003 20:13:10 +0100 (BST) X-Authentication-Warning: storm.FreeBSD.org.uk: Ugrondar set sender to mark@grondar.org using -f Received: from grondar.org (localhost [127.0.0.1])h5QJDIig001490; Thu, 26 Jun 2003 20:13:18 +0100 (BST) (envelope-from mark@grondar.org) From: Mark Murray Message-Id: <200306261913.h5QJDIig001490@grimreaper.grondar.org> To: Alin-Adrian Anton In-Reply-To: Your message of "Wed, 25 Jun 2003 09:47:28 +0300." <3EF94580.90001@reversedhell.net> Date: Thu, 26 Jun 2003 20:13:17 +0100 Sender: mark@grondar.org X-Spam-Status: No, hits=0.2 required=5.0 tests=EMAIL_ATTRIBUTION,FROM_NO_LOWER,IN_REP_TO, QUOTED_EMAIL_TEXT,REPLY_WITH_QUOTES version=2.55 X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp) cc: freebsd-hackers@freebsd.org Subject: Re: replacing sendmail with qmail X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 26 Jun 2003 19:13:14 -0000 Alin-Adrian Anton writes: > Hi guys, > > As sendmail showed to be so vulnerable in the past, and even in the > recent past, I was wondering to propose removing it from the default > install on freebsd. Currently, sendmail comes with the system sources, > and runs as root. I think this is bad, and it could be replaced with > qmail, for example. Or, something else, if you think something else is > more secure. Please let me know if this is possible, or why if not, and > to whom shall I address this idea (I wonder why it didn't happen yet). Please look for this topic in the archives. It has been discussed VERY many times. M -- Mark Murray iumop ap!sdn w,I idlaH