From owner-freebsd-security  Sun Nov 17 16:51:02 1996
Return-Path: owner-security
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.5/8.7.3) id QAA26010
          for security-outgoing; Sun, 17 Nov 1996 16:51:02 -0800 (PST)
Received: from rover.village.org (rover.village.org [204.144.255.49])
          by freefall.freebsd.org (8.7.5/8.7.3) with SMTP id QAA26003
          for <freebsd-security@freebsd.org>; Sun, 17 Nov 1996 16:50:51 -0800 (PST)
Received: from rover.village.org [127.0.0.1] 
	by rover.village.org with esmtp (Exim 0.56 #1)
	id E0vPHuF-0003Re-00; Sun, 17 Nov 1996 17:49:47 -0700
To: Adam Shostack <adam@homeport.org>
Subject: Re: BoS: Exploit for sendmail smtpd bug (ver. 8.7-8.8.2). 
Cc: pgiffuni@fps.biblos.unal.edu.co, freebsd-security@freebsd.org
In-reply-to: Your message of "Sun, 17 Nov 1996 19:05:45 EST."
		<199611180005.TAA09457@homeport.org> 
References: <199611180005.TAA09457@homeport.org>  
Date: Sun, 17 Nov 1996 17:49:47 -0700
From: Warner Losh <imp@village.org>
Message-Id: <E0vPHuF-0003Re-00@rover.village.org>
Sender: owner-security@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

In message <199611180005.TAA09457@homeport.org> Adam Shostack writes:
: My suggestion was meant to imply the possibility of removing
: sendmail from the FreeBSD distribution, and only shipping qmail.

I think that would be ill-advised.  There are many other good, worthy
mailers than just sendmail and qmail (exim and smail come to mind).
Sendmail is well understood and well maintained with a very long track
record.  Other mailers, no matter how much better, don't match this
track record.

Or more succinctly: Better the devil you know...

Warner