Re: replacing sendmail with qmail

From: Soeren Straarup (xride_at_x12.dk)
Date: 06/27/03

  • Next message: Bogdan TARU: "netstat: sysctl: net.inet.udp.pcblist: Cannot allocate memory" 
    Date: Fri, 27 Jun 2003 09:39:36 +0200 (CEST)
To: Jeremy Messenger <mezz7@cox.net>

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    Well my point is that every one (that is interrested in security) knows
    that Sendmail and bind and so on have their exploits..

    And I like that they are the one that is comming with some more or less
    insecure services, this is due to that it really gives ppl the freedom
    choose the services that they want to use. But the generic ones works for
    home networks with no external access too.

    Freedom of religion.

    Well with freedom comes responsibility.

    Best regards Søren

    *----------------------------------------------------------------*
    | Soeren Straarup Mobile: +45 20 27 62 44 |
    | FreeBSD wannabe since 2.2.6-R http://xforce.dk |
    | Also running OpenBSD and NetBSD aka OZ2DAK aka Xride |
    *----------------------------------------------------------------*

    On Thu, 26 Jun 2003, Jeremy Messenger wrote:

    > On Wed, 25 Jun 2003 09:47:28 +0300, Alin-Adrian Anton
    > <aanton@reversedhell.net> wrote:
    >
    > > Hi guys,
    > >
    > > As sendmail showed to be so vulnerable in the past, and even in the
    > > recent past, I was wondering to propose removing it from the default
    > > install on freebsd. Currently, sendmail comes with the system sources,
    > > and runs as root. I think this is bad, and it could be replaced with
    > > qmail, for example. Or, something else, if you think something else is
    > > more secure. Please let me know if this is possible, or why if not, and
    > > to whom shall I address this idea (I wonder why it didn't happen yet).
    >
    > It is possible to delete the sendmail and replace to the different MTA on
    > your own. To not have or change the different MTA by default in FreeBSD
    > isn't going to happen anytime soon, anyway. I would love to see to get rid
    > of sendmail too, thought. I don't have Sendmail in my server, which it has
    > been replaced to qmail and sometime I want to try to replace from BIND to
    > djb's libdjbdns.
    >
    > If anyone want to get rid of BIND, Sendmail and etc by default, the only
    > way that I can see at the moment is.... *cough* fork FreeBSD *cough*.. or
    > wait until libh project finishes or in future version of FreeBSD like 6.0,
    > 7.0, 8.0 or so (maybe never)..
    >
    > Cheers,
    > Mezz
    >
    >
    > > Best Regards,
    > > Alin.
    >
    >
    > --
    > bsdforums.org 's moderator, mezz.
    > _______________________________________________
    > freebsd-hackers@freebsd.org mailing list
    > http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
    > To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org"
    >
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.2.1 (FreeBSD)

    iD8DBQE++/S6XTGeGCdlN14RApoOAJwI0P/l+GHY4pXP4E6X/FMkBF9+xQCgvdTZ
    46eth1FjC+RcyoDyTEErve4=
    =RERF
    -----END PGP SIGNATURE-----

    _______________________________________________
    freebsd-hackers@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
    To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org"

  • Next message: Bogdan TARU: "netstat: sysctl: net.inet.udp.pcblist: Cannot allocate memory"

    Relevant Pages

    • Re: replacing sendmail with qmail
      ... Currently, sendmail comes with the system sources, ... To not have or change the different MTA by default in FreeBSD ... If anyone want to get rid of BIND, Sendmail and etc by default, the only ...
      (freebsd-hackers)
    • RE: Cannot su or have root access after changing loader.conf
      ... Installing FreeBSD on large disk>2TB ... How I use sendmail to send mail? ...
      (freebsd-questions)
    • [Full-Disclosure] Sidewinder G2 Thanks and a question or two
      ... This was VERY disturbing. ... >other service protection is not vulnerable to the exploits against BIND ... >versions of BIND and Sendmail. ...
      (Full-Disclosure)
    • Re: BIND update?
      ... or criticism with a positive approach. ... the fact that DNS ... the BIND installation in the base is not intended to ... security advisories to write, FreeBSD ...
      (FreeBSD-Security)
    • Re: FreeBSD bind performance in FreeBSD 7
      ... Ted Mittelstaedt wrote: ... FreeBSD bind performance in FreeBSD 7 ... I saw this bind benchmarks just some minutes ago, ... Even to a hobbyist like myself was not clear why did they chose to test OpenBSD 4.1 ...
      (freebsd-questions)