From owner-freebsd-security Sun Feb 11 4:45: 1 2001 Delivered-To: freebsd-security@freebsd.org Received: from hotmail.com (f291.law8.hotmail.com [216.33.240.166]) by hub.freebsd.org (Postfix) with ESMTP id D4BFC37B401 for ; Sun, 11 Feb 2001 04:44:34 -0800 (PST) Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Sun, 11 Feb 2001 04:44:34 -0800 Received: from 62.7.249.7 by lw8fd.law8.hotmail.msn.com with HTTP; Sun, 11 Feb 2001 12:44:34 GMT X-Originating-IP: [62.7.249.7] From: "Dominic Marks" To: jedgar@fxp.org Cc: freebsd-security@freebsd.org Subject: Re: Secure Servers (SMTP, POP3, FTP) Date: Sun, 11 Feb 2001 12:44:34 -0000 Mime-Version: 1.0 Content-Type: text/plain; format=flowed Message-ID: X-OriginalArrivalTime: 11 Feb 2001 12:44:34.0701 (UTC) FILETIME=[63015BD0:01C09428] Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Thanks, Thats cleared some things out Dominic >From: Chris Faulhaber >To: Dominic Marks >CC: freebsd-security@freebsd.org >Subject: Re: Secure Servers (SMTP, POP3, FTP) >Date: Sun, 11 Feb 2001 07:42:01 -0500 >MIME-Version: 1.0 >Received: from [209.26.95.40] by hotmail.com (3.2) with ESMTP id >MHotMailBC4FD397001540043191D11A5F28048E0; Sun Feb 11 04:42:00 2001 >Received: from jive.44bsd.net (oca-pm3-5-32.hitter.net [207.192.77.32])by >peitho.fxp.org (Postfix) with ESMTPid 08F8C1360C; Sun, 11 Feb 2001 07:41:58 >-0500 (EST) >Received: by jive.44bsd.net (Postfix, from userid 1000)id C6C90E1; Sun, 11 >Feb 2001 07:42:01 -0500 (EST) >From jedgar@www.fxp.org Sun Feb 11 04:42:16 2001 >Message-ID: <20010211074201.B1396@jive.44bsd.net> >Mail-Followup-To: Chris Faulhaber ,Dominic Marks >,freebsd-security@freebsd.org >References: >User-Agent: Mutt/1.2.5i >In-Reply-To: ; from >dominic_marks@hotmail.com on Sun, Feb 11, 2001 at 11:39:01AM -0000 >Sender: jedgar@jive.44bsd.net > >On Sun, Feb 11, 2001 at 11:39:01AM -0000, Dominic Marks wrote: > > Hello, > > > > I'd really appreciate some opinions on the performance of some daemons. >I'm > > trying to assess which is the best choice to offer both security and > > performance under FreeBSD 4.2. Apache seems like a pretty defacto choice >for > > HTTP which I'm very happy with but I'm a little less sure what choose on > > others, in particular for ftp and mail servers. > > > >Well, the following seems a bit backwards: > > > FTP Options: > > 1. proFTPd - Seems secure and has "enterprise" features > >Not sure... > > > 2. wu-Ftpd - Good security (bad History) excellent performance > >I doubt that it is now in the 'good security' category with numerous >remote root holes per year (and I am sure more to come). > > > 3. ftpd - Dodgy security? Doesn't seem to be used very much > >Not sure where you get 'dodgy security' from. Our ftpd hasn't been >vulnerable in quite a while (including not being vulnerable to the hole >OpenBSD's ftpd was last year). > >The big question is: what features do you need? If the base ftpd has >the features you require, why install something else with a poor >history? > > > > > Mail Options: > > 1. Qmail - Secure, written for FreeBSD (Qwest?), Fast, Configurable > >But the code is unauditable and the license stinks. > > > 2. Sendmail - Industry standard, works fine, big user base > > 3. Postfix - Secure, quite light on system resources, growing support > >Along with easy to configure > > > I'd appreciate some feedback on any of these, any comments you might >have > > would be very helpful, or perhaps links to articles on this subject. > > > >-- >Chris D. Faulhaber - jedgar@fxp.org - jedgar@FreeBSD.org >-------------------------------------------------------- >FreeBSD: The Power To Serve - http://www.FreeBSD.org ><< attach3 >> _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message