Re: replacing sendmail with qmail

From: Peter Pentchev (roam_at_ringlet.net)
Date: 06/27/03

  • Next message: MailScanner: "Warning: E-mail viruses detected"
    Date: Fri, 27 Jun 2003 11:37:17 +0300
    To: Soeren Straarup <xride@x12.dk>
    
    
    

    On Fri, Jun 27, 2003 at 09:39:36AM +0200, Soeren Straarup wrote:
    >
    > Well my point is that every one (that is interrested in security) knows
    > that Sendmail and bind and so on have their exploits..
    >
    > And I like that they are the one that is comming with some more or less
    > insecure services, this is due to that it really gives ppl the freedom
    > choose the services that they want to use. But the generic ones works for
    > home networks with no external access too.
    >
    > Freedom of religion.
    >
    > Well with freedom comes responsibility.

    And this responsibility is handled excellently by the FreeBSD Security
    Officer team and the FreeBSD sendmail maintainer, George Shapiro.
    I don't think that there would be a better way to handle the existing
    and published Sendmail vulnerabilities than the current practice of
    timely patches and updates to both -current, -stable, *and* the various
    security branches, so that everyone tracking the security advisories is
    aware of the need to update, and update *now*, as soon as there is
    actually something to update to. Great job, folks!

    With that said, you could always do what I do and cut your own releases
    with appropriate NO_* knobs in make.conf ;) This is *not* to say that I
    don't trust the security officer team and the maintainers of the various
    pieces of contributed software that I exclude from my own builds; it's
    just a matter of personal preference.

    Here's hoping this is the last post in this thread :) (The last word?
    Me? Naah, that's just lack of morning coffee getting to you :P )

    G'luck,
    Peter

    -- 
    Peter Pentchev	roam@ringlet.net    roam@sbnd.net    roam@FreeBSD.org
    PGP key:	http://people.FreeBSD.org/~roam/roam.key.asc
    Key fingerprint	FDBA FD79 C26F 3C51 C95E  DF9E ED18 B68D 1619 4553
    This sentence was in the past tense.
    
    



  • Next message: MailScanner: "Warning: E-mail viruses detected"

    Relevant Pages

    • Security and Freedom
      ... There cannot be freedom without security nor true security without ... that free peoples bring to war. ... and the military turn on their despised government. ...
      (alt.politics.bush)
    • [Full-disclosure] Stop aiding an industry that just hurts humanity
      ... "In the end, more than freedom, they wanted security. ... If not for the Internet, little would be known about the atrocities our government attempts to commit in secret. ...
      (Full-Disclosure)
    • Re: OT - Constitution and Terrorism
      ... A society has the right to pick security over freedom. ... is against the government passing laws abridging ... Yet there are speed limit laws and seat ...
      (alt.sports.football.pro.ne-patriots)
    • RE: Ann coulter.
      ... If you have to choose between freedom and security, ... I do however want my freedom and if somebody threatens my security or messes with my family, trust me, they will be dealt with, if not by me directly, then some of my surviving and not so savory friends. ... Saint Edward the Great - Order of the Perpetual Sorrows - Minnesota ...
      (rec.bicycles.misc)
    • Re: Change One Thing
      ... >> transaction which you may consider fair apart from this particular ... >> point, security is purchased at the cost of freedom, or freedom is ... >> purchased at the cost of security. ... >> a fundamental social principle in a handful of borrowed mathematical ...
      (rec.arts.sf.written)