Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 24 Nov 1996 17:23:02 -0600 (CST)
From:      peter@taronga.com (Peter da Silva)
To:        jkh@time.cdrom.com (Jordan K. Hubbard)
Cc:        peter@taronga.com, hackers@FreeBSD.org
Subject:   Re: Replacing sendmail (Re: non-root users binding to ports < 1024 (was: Re: BoS: Exploit for sendmail smtpd bug (ver. 8.7-8.8.2
Message-ID:  <199611242323.RAA06615@bonkers.taronga.com>
In-Reply-To: <2872.848861218@time.cdrom.com> from "Jordan K. Hubbard" at Nov 24, 96 10:46:58 am

next in thread | previous in thread | raw e-mail | index | archive | help
> > Remove sendmail. Make it an option. Make qmail the primary mail transport
> > agent on FreeBSD. If someone needs a really complex mail routing environment

> Needless to say, this is a terrible idea.

Why? sendmail will *never* be secure. You already have sysinstall options
to load the pcnfs and apache ports, why not have another question. Something
like:

	"Sendmail is a large, complex mail transport mechanism. Qmail
	 is small, tight, and designed to be secure. Qmail provides
	 most of the functionality of sendmail. Which mail transport
	 should be installed by default?"

For people who know what sendmail is, then they know enough to answer
the question. For people who don't, well, qmail is a lot easier to
understand than sendmail starting out fresh...

> The user QA alone would murder us.

You ever tried to explain to someone how to set up a virtual domain
in sendmail?



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199611242323.RAA06615>