Sendmail has several security problems. One is that it runs as root, possibly giving someone root access. The other is that it can be very difficult to set up and keep out the baddies. Postfix has the advantage in that it's daemons don't run as root but it can also be a bit difficult to set up.
Quote: Originally posted by mairving Sendmail has several security problems. One is that it runs as root, possibly giving someone root access. The other is that it can be very difficult to set up and keep out the baddies. Postfix has the advantage in that it's daemons don't run as root but it can also be a bit difficult to set up.
If you want the ultimate in security, try [b]Qmail. [/B]
Just about everything in Unix has security problems of some sort - I run sendmail on my servers and those of my clients - but it requires that you stay on top of the patches, releases, and mailing lists to ensure that your setup is secure.
PostFix and QMail are also great email programs - I've used them in the past. You've got to go with what you're most comfortable using (and securing) for yourself and/or your clients.
Back when I was a sysadmin we used to say:
If you configured sendmail once you are a hero.
If you did it twice you are stupid.
Use postfix.
It's far easier to configure.
Can handle thousands of users (on a small box).
And the user mailling-list is great.
Did I mention that it has far less security problems ...
anti
Want to join the discussion? Create an account or log in if you already have one. Joining is fast, free and painless! We’ll even whisk you back here when you’ve finished.
mairving posted this at 18:53 — 27th July 2001.
They have: 2,256 posts
Joined: Feb 2001
Sendmail has several security problems. One is that it runs as root, possibly giving someone root access. The other is that it can be very difficult to set up and keep out the baddies. Postfix has the advantage in that it's daemons don't run as root but it can also be a bit difficult to set up.
If you want the ultimate in security, try Qmail.
Mark Irving
I have a mind like a steel trap; it is rusty and illegal in 47 states
bstrawse posted this at 18:05 — 9th August 2001.
They have: 12 posts
Joined: Aug 2001
Just about everything in Unix has security problems of some sort - I run sendmail on my servers and those of my clients - but it requires that you stay on top of the patches, releases, and mailing lists to ensure that your setup is secure.
PostFix and QMail are also great email programs - I've used them in the past. You've got to go with what you're most comfortable using (and securing) for yourself and/or your clients.
Bryan
Gondolin Technologies - Sites - Newsletters - Advertising
Web Development, Managed Services, and Web Sites
mairving posted this at 18:18 — 9th August 2001.
They have: 2,256 posts
Joined: Feb 2001
Really the main problem with Sendmail is the configuring part. Sure it can be secured very nicely but can be trouble for a newbie to configure.
anti posted this at 22:57 — 23rd August 2001.
They have: 453 posts
Joined: Jan 1999
Back when I was a sysadmin we used to say:
If you configured sendmail once you are a hero.
If you did it twice you are stupid.
Use postfix.
It's far easier to configure.
Can handle thousands of users (on a small box).
And the user mailling-list is great.
Did I mention that it has far less security problems ...
anti
Want to join the discussion? Create an account or log in if you already have one. Joining is fast, free and painless! We’ll even whisk you back here when you’ve finished.