Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 5 Sep 2007 17:04:08 -0400
From:      "Jim Stapleton" <stapleton.41@gmail.com>
To:        "Ted Mittelstaedt" <tedm@toybox.placo.com>
Cc:        Nikola Lecic <nlecic@eunet.yu>, "Russell E. Meek" <rmeek@russellmeek.net>, freebsd-questions@freebsd.org
Subject:   Re: mail server setup questions
Message-ID:  <80f4f2b20709051404l6091bafas48d63fd4076e8fef@mail.gmail.com>
In-Reply-To: <BMEDLGAENEKCJFGODFOCMEFDCAAA.tedm@toybox.placo.com>
References:  <80f4f2b20709050354q4d186df4y6958e2f81d5dfc66@mail.gmail.com> <BMEDLGAENEKCJFGODFOCMEFDCAAA.tedm@toybox.placo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
> I would submit you think you do.  For example, are you planning on
> putting a webmail interface on the server?  A lot of people do.  Well
> if you do and you put a scrap of CGI on there that has a hole in it
> a spammer can come along and cause that to relay mail from incoming
> http right into your mail queue.  He doesen't need root access to
> do this.

I have never stated interest in putting web mail up in my to-do list,
and in fact, have explicitly stated at least once, I've no intention
of doing that. To be blunt, I don't trust it. I only use it for things
on which I don't care about the security (ex. reading mailing lists).
I care about the security of my server.

-Jim Stapleton



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?80f4f2b20709051404l6091bafas48d63fd4076e8fef>