ok, and now let's start a broad discussion which one is the best: qmail, sendmail, postfix, whichever, and pleeze all pro's and con's in the highest details sorry, couldn't resist ---- Run the newest version of Sendmail. The default for it is a closed relay. ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.12.1.tar.gz If you want to read up on it: http://www.sendmail.org/8.12.1.html --Brian Owner Gryphon Technical At 08:40 AM 11/28/2001, you wrote:
Hi all,
I have a problem with our qmail-server. It´s a open relay. I have run some bugfixes but it doesn´t fix this. Have anybody a idear? thanks
-- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
-- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
Hi, I tend to think that each of the programs you mention can do the job quite well if configured correctly. Some will prefer postfix or qmail over sendmail because sendmail is known to be a little hard to configure. That doesn't mean that it's _better_ or _worse_ than some other mailer - a decision pro or contra a certain SMTP daemon has a lot to do with what you are using it for and how much effort you are willing to put into setting it up (and maintaining it) the right way. All I know is that sendmail _was_ an open relay per default on most distributions not so long ago which made me change to postfix at some point. Anyway, I think we can avoid a (maybe) useless dicussion on this topic and (re)-read http://www.seifried.org/lasg/network-servers/email/index.html This should be enough material for everyone to make their own decision about what mailer to use without getting into a war ;-) Erwin --- Bitzer,Gerd wrote:
ok, and now let's start a broad discussion which one is the best: qmail, sendmail, postfix, whichever, and pleeze all pro's and con's in the highest details
sorry, couldn't resist
----
Run the newest version of Sendmail. The default for it is a closed relay.
ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.12.1.tar.gz
If you want to read up on it:
http://www.sendmail.org/8.12.1.html
--Brian Owner Gryphon Technical
At 08:40 AM 11/28/2001, you wrote:
Hi all,
I have a problem with our qmail-server. It´s a open relay. I have run some bugfixes but it doesn´t fix this. Have anybody a idear? thanks
-- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
-- Erwin Zierler | web- / host- / postmaster - stubainet.at | erwin.zierler@stubainet.at / webmaster@stubainet.at | Tel.: 0 5225 - 64325 Fax 99 Mobil: 0664 - 130 67 91
Hi everybody, does anyone have some experiences with the Juniper firewall toolkit or especially with the SMTPD from http://www.obtuse.com ?!? I would like to use it for a mail store and forward proxy (located in a DMZ) with an email virus scanner (as was also suggested in the debian-security-list and the Linux Journal 12/2001 see: http://www.linuxjournal.com/article.php?sid=4882 Any hints are welcome - thanks in advance Christoph -- .-. Ruhr-Universitaet Bochum /v\ L I N U X Lehrstuhl fuer Biophysik // \\ >Penguin Computing< c/o Christoph Wegener /( )\ Gebaeude ND 04/Nord ^^-^^ D-44780 Bochum, GERMANY Tel: +49 (234) 32-25754 Fax: +49 (234) 32-14626 mailto:cwe@bph.ruhr-uni-bochum.de http://www.bph.ruhr-uni-bochum.de
On Wed, 28 Nov 2001, Christoph Wegener wrote:
does anyone have some experiences with the Juniper firewall toolkit or especially with the SMTPD from http://www.obtuse.com ?!? I would like to use it for a mail store and forward proxy (located in a DMZ) with an email virus scanner (as was also suggested in the debian-security-list and the Linux Journal 12/2001 see: http://www.linuxjournal.com/article.php?sid=4882
I used it in the past within the old amavis stuff (the patch is still available at http://www.computer-networking.de/~link/security/amavis-patch-old.php3#rlsmt... IIRC Juniper wasn't updated for a long time. I'd suggest to read http://www.linux.ie/pipermail/ilug/2001-November/039565.html But bear in mind Lars is one of the AMaViS Developers, so he's probably biased (as I am, too) ;-) I'd recommend to use postfix as SMTP gateway. best regards, Rainer Link -- Rainer Link | SuSE - The Linux Experts link@suse.de | Developer of A Mail Virus Scanner (www.amavis.org) www.suse.de | Founder OpenAntiVirus Project (www.openantivirus.org)
Rainer Link wrote:
IIRC Juniper wasn't updated for a long time. I'd suggest to read http://www.linux.ie/pipermail/ilug/2001-November/039565.html But bear in mind Lars is one of the AMaViS Developers, so he's probably biased (as I am, too) ;-)
Hi Rainer, well thanks for the link - I must admit, that the points Lars made may be serious for networks of larger scale beside the point of security...
I'd recommend to use postfix as SMTP gateway.
So I would I now... ;)) Do you think the solution mentioned in the German Linux-Magazin in June this year by Micheal Wiesmer is favourable?!? Thanks a lot Christoph -- .-. Ruhr-Universitaet Bochum /v\ L I N U X Lehrstuhl fuer Biophysik // \\ >Penguin Computing< c/o Christoph Wegener /( )\ Gebaeude ND 04/Nord ^^-^^ D-44780 Bochum, GERMANY Tel: +49 (234) 32-25754 Fax: +49 (234) 32-14626 mailto:cwe@bph.ruhr-uni-bochum.de http://www.bph.ruhr-uni-bochum.de
On Wed, 28 Nov 2001, Christoph Wegener wrote:
I'd recommend to use postfix as SMTP gateway.
So I would I now... ;)) Do you think the solution mentioned in the German Linux-Magazin in June this year by Micheal Wiesmer is favourable?!?
You mean http://www.linux-magazin.de/ausgabe/2001/06/Amavis/amavis.html, yes? :-) (it's a very well written article, btw :)) Well, amavis-perl/amavisd works very well with postfix (for obvious reasons, as Lars and myself use only/mainly postfix). amavisd is faster, as forking a child is faster than creating a new perl process for every mail. For speed reasons I'd suggest to use a virus scanning daemon, such as Kaspersky kavdaemon or Sophie for Sophos Sweep. Please see the amavis-user ML archive for details here. Alternatives are i.e. avcheck, which was "designed" for use with kavdaemon or H+BEDV AntiVir, Trend InterScan VirusWall or Sophos new SMTP-scanner (the latter ones can all be configured to use postfix content_filter method, i.e. listening on port 10025 to receive the mails from postfix and sending non-infected mails back to to postfix via port 10026). But I haven't tried out the new Sophos product with postfix yet. HTH best regards, Rainer Link -- Rainer Link | SuSE - The Linux Experts link@suse.de | Developer of A Mail Virus Scanner (www.amavis.org) www.suse.de | Founder OpenAntiVirus Project (www.openantivirus.org)
That page is horribly out of date, but on my todo list of pages to update next month. -Kurt ----- Original Message ----- From: "Erwin Zierler - stubainet.at" <erwin.zierler@stubainet.at> To: <suse-security@suse.com> Sent: Wednesday, November 28, 2001 1:24 PM Subject: Re: AW: [suse-security] Open Relay - qmail
Hi, I tend to think that each of the programs you mention can do the job quite well if configured correctly. Some will prefer postfix or qmail over sendmail because sendmail is known to be a little hard to configure. That doesn't mean that it's _better_ or _worse_ than some other mailer - a decision pro or contra a certain SMTP daemon has a lot to do with what you are using it for and how much effort you are willing to put into setting it up (and maintaining it) the right way. All I know is that sendmail _was_ an open relay per default on most distributions not so long ago which made me change to postfix at some point. Anyway, I think we can avoid a (maybe) useless dicussion on this topic and (re)-read http://www.seifried.org/lasg/network-servers/email/index.html
This should be enough material for everyone to make their own decision about what mailer to use without getting into a war ;-)
Erwin
--- Bitzer,Gerd wrote:
ok, and now let's start a broad discussion which one is the best: qmail, sendmail, postfix, whichever, and pleeze all pro's and con's in the highest details
sorry, couldn't resist
----
Run the newest version of Sendmail. The default for it is a closed relay.
ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.12.1.tar.gz
If you want to read up on it:
http://www.sendmail.org/8.12.1.html
--Brian Owner Gryphon Technical
At 08:40 AM 11/28/2001, you wrote:
Hi all,
I have a problem with our qmail-server. It´s a open relay. I have run some bugfixes but it doesn´t fix this. Have anybody a idear? thanks
-- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
-- Erwin Zierler | web- / host- / postmaster - stubainet.at | erwin.zierler@stubainet.at / webmaster@stubainet.at | Tel.: 0 5225 - 64325 Fax 99 Mobil: 0664 - 130 67 91
-- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
We might learn something security related... new features get added.. I like discussions.. I use sendmail.. sorry, could'nt resist either.. On Wed, 28 Nov 2001, Bitzer,Gerd wrote:
ok, and now let's start a broad discussion which one is the best: qmail, sendmail, postfix, whichever, and pleeze all pro's and con's in the highest details
sorry, couldn't resist
participants (6)
-
Bitzer,Gerd -
Christoph Wegener -
Erwin Zierler - stubainet.at -
Kurt Seifried -
Rainer Link -
S.T.Ryder