Sendmail > Qmail > Postfix | AAAARG!

[Robert Meyer]

--- "Dennis J. Eberl" <dje at pcom.net> wrote:
> "Bradley J. Bartram" wrote:
> 
> > I've been using postfix for a little while now (several months). 
> It seems
> > pretty stable as far as a mail platform is concerned.  It's much
> easier to
> > configure than sendmail, imho.
> >
> > I chose it because of the security features over sendmail.  (It is
> the
> > backbone mail system for a small ISP I run (for now)).
> >
> > That's my take on it, it's a pretty good alternative to sendmail
> although
> > all the MTAs have their merits and strong points.
> >
> > Brad
> > ----- sni0p -----
> 
> Interesting. Any reason you passed on Qmail? I've heard a lot of bad
> things (mostly security related) about Sendmail, which is why I
> wanted to include Qmail when someone asked me to put a link for
> Sendmail on the site. You probably won't see it until Monday at
> http://www.nflug.org, but the changes are up at
> http://www2.pcom.net/dje/, which is my "personal page" to which
> I have unfettered access.

OK, I've listened to this long enough...

I want someone to itemize for me the list of CURRENT security problems
with a correctly configured UP-TO-DATE sendmail.  I ran sendmail
successfully everywhere that I've worked.  We used sendmail for
something on the order of 6000 users in the school of engineering at UB
without issue.  The only problem that we had was not turning off
relaying in the configuration and becoming a spam site.  A quick change
in the config and all was well.

OK, guys.  Here's the challenge:  Let's hear the sendmail security
problems that YOU'VE seen.  I don't want heresay or whosay.  I want
CONCRETE experience.  I don't want anecdotal stories.

Flame shields engaged...phasers armed :-)

Bob


=====
Bob Meyer
Knightwing Communications
36 Cayuga Blvd
Depew, NY 14043
Phone: 716-308-8931 or 716-681-0076
Meyer_RM at Yahoo.com

__________________________________________________
Do You Yahoo!?
Talk to your friends online with Yahoo! Messenger.
http://im.yahoo.com