From owner-freebsd-security@FreeBSD.ORG  Mon Jun  2 10:17:54 2003
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 3DE5537B401
	for <security@FreeBSD.org>; Mon,  2 Jun 2003 10:17:54 -0700 (PDT)
Received: from axl.seasidesoftware.co.za (axl.seasidesoftware.co.za
	[196.31.7.201])	by mx1.FreeBSD.org (Postfix) with ESMTP id F0BA243F93
	for <security@FreeBSD.org>; Mon,  2 Jun 2003 10:17:52 -0700 (PDT)
	(envelope-from sheldonh@starjuice.net)
Received: from sheldonh by axl.seasidesoftware.co.za with local (Exim 4.20)
	id 19MswH-00044o-Ja; Mon, 02 Jun 2003 19:17:41 +0200
Date: Mon, 2 Jun 2003 19:17:41 +0200
From: Sheldon Hearn <sheldonh@starjuice.net>
To: Avleen Vig <lists-freebsd@silverwraith.com>
Message-ID: <20030602171741.GW84604@starjuice.net>
References: <20030602170718.GU294@silverwraith.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20030602170718.GU294@silverwraith.com>
User-Agent: Mutt/1.5.4i
Sender: Sheldon Hearn <sheldonh@starjuice.net>
cc: security@FreeBSD.org
Subject: Re: Exim as default MTA?
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Jun 2003 17:17:54 -0000

On (2003/06/02 10:07), Avleen Vig wrote:

> Yes, I've been reading /. :)
> But this isn't the first time this has occured to me.
> 
> With all the security vulnerbilties, would it be unreasonable to either
> change the default MTA from sendmail to Exim/Qmail/Postfix, or give
> people the option of installing something instead of Sendmail at install
> time?

Please check this subject out in the mailing list archives before
dredging it up again.

The short answer is no.  The long answer is that the project would be
willing to accept a change sysinstall so that it allowed a choice of MTA
at install time, with sendmail being the default.

This requires work which nobody has stepped up to perform. :-)

Ciao,
Sheldon.