From owner-freebsd-hackers  Sun Nov 24 15:17:31 1996
Return-Path: owner-hackers
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.5/8.7.3) id PAA18504
          for hackers-outgoing; Sun, 24 Nov 1996 15:17:31 -0800 (PST)
Received: from ami.tom.computerworks.net (AMI.RES.CMU.EDU [128.2.95.1])
          by freefall.freebsd.org (8.7.5/8.7.3) with SMTP id PAA18469
          for <hackers@FreeBSD.org>; Sun, 24 Nov 1996 15:17:12 -0800 (PST)
Received: from bonkers.taronga.com by ami.tom.computerworks.net with smtp
	(Smail3.1.29.1 #3) id m0vRnmx-0021UqC; Sun, 24 Nov 96 18:16 EST
Received: (from peter@localhost) by bonkers.taronga.com (8.6.11/8.6.9) id RAA06615; Sun, 24 Nov 1996 17:23:02 -0600
From: peter@taronga.com (Peter da Silva)
Message-Id: <199611242323.RAA06615@bonkers.taronga.com>
Subject: Re: Replacing sendmail (Re: non-root users binding to ports < 1024 (was: Re: BoS: Exploit for sendmail smtpd bug (ver. 8.7-8.8.2
To: jkh@time.cdrom.com (Jordan K. Hubbard)
Date: Sun, 24 Nov 1996 17:23:02 -0600 (CST)
Cc: peter@taronga.com, hackers@FreeBSD.org
In-Reply-To: <2872.848861218@time.cdrom.com> from "Jordan K. Hubbard" at Nov 24, 96 10:46:58 am
X-Mailer: ELM [version 2.4 PL24]
Content-Type: text
Sender: owner-hackers@FreeBSD.org
X-Loop: FreeBSD.org
Precedence: bulk

> > Remove sendmail. Make it an option. Make qmail the primary mail transport
> > agent on FreeBSD. If someone needs a really complex mail routing environment

> Needless to say, this is a terrible idea.

Why? sendmail will *never* be secure. You already have sysinstall options
to load the pcnfs and apache ports, why not have another question. Something
like:

	"Sendmail is a large, complex mail transport mechanism. Qmail
	 is small, tight, and designed to be secure. Qmail provides
	 most of the functionality of sendmail. Which mail transport
	 should be installed by default?"

For people who know what sendmail is, then they know enough to answer
the question. For people who don't, well, qmail is a lot easier to
understand than sendmail starting out fresh...

> The user QA alone would murder us.

You ever tried to explain to someone how to set up a virtual domain
in sendmail?