From owner-freebsd-current Fri Jan 1 10:09:24 1999 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id KAA06042 for freebsd-current-outgoing; Fri, 1 Jan 1999 10:09:24 -0800 (PST) (envelope-from owner-freebsd-current@FreeBSD.ORG) Received: from verdi.nethelp.no (verdi.nethelp.no [158.36.41.162]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id KAA06036 for ; Fri, 1 Jan 1999 10:09:22 -0800 (PST) (envelope-from sthaug@nethelp.no) From: sthaug@nethelp.no Received: (qmail 26930 invoked by uid 1001); 1 Jan 1999 18:08:59 +0000 (GMT) To: des@flood.ping.uio.no Cc: current@FreeBSD.ORG, freebesd-test@FreeBSD.ORG Subject: Re: HEADS UP: Postfix is coming. new uid, gid required. In-Reply-To: Your message of "01 Jan 1999 18:24:01 +0100" References: X-Mailer: Mew version 1.05+ on Emacs 19.34.2 Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Date: Fri, 01 Jan 1999 19:08:59 +0100 Message-ID: <26928.915214139@verdi.nethelp.no> Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > One more thing: whether intended or not, by importing it into the > source tree, the Project places a stamp of approval on PostFix. Are we > ready to do that? I, for one, would *never* run PostFix, as it is > today, on a computer to which regular users have shell access. I, for one, would never run *sendmail* on a computer where regular users have shell access. I put considerably more trust in postfix, even at this stage, than sendmail with its known past riddled with security holes. If I had to make a list of "trust" in mailers, it would currently have to be: 1. qmail 2. postfix 3. sendmail > If you > don't understand what I mean, read BUGTRAQ, and try the various > attacks described for yourself. Wietse Venema can't keep handwaving > those holes for much longer. If you've followed the discussion, you know that you have an alternative in the latest Postfix version, namely a setgid program instead of a world writable directory. > So please, *please* keep PostFix out of the source tree until we're > absolutely certain it's mature enough, and until the FreeBSD community > have accumulated enough experience with running PostFix on FreeBSD. I would be happy to have postfix in the source tree. Steinar Haug, Nethelp consulting, sthaug@nethelp.no To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message