I want to replace our ailing mail server with a new one. It should have an smtp server (of course), pop and imap servers and also a webmail solution. Can you suggest a combination of programs for all of the above that are scalable and most importantly secure? For smtp server, I have only used sendmail until now but I like what I have read about qmail and would prefer to use it if I can find secure and stable imap and webmail solutions that would work with it. Thanks, Selcuk <=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=> < Selcuk Ozturk <+> Email: > < MIS Deputy Director <+> sozturk@eMediaMillWorks.com > <=============================<#>===================================> < <+> eMediaMillWorks > < Fax : (301)883-2482 x121 <+> 1100 Mercantile Lane, Ste 119 > < Fax : (301)883-9754 <+> Largo, MD 20774 > <=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=>
I personally prefer to use Qmail (for smtp) and vpopmail (for pop). I've never setup an imap server, so I can't help on that one. And off hand I can't remember the addon for qmail, but you can have a web-based email viewer, through http or https/ssl. IMHO, Qmail is the most secure smtp server out there, with LOTS of good options to set it how ever you want, like virtual domains. IMHO, sendmail is highly insecure and should be replaced. Anyone else got any suggestions on a good mail daemon? Steven Senior Network Nazi -----Original Message----- From: Selcuk Ozturk [mailto:sozturk@emediamillworks.com] Sent: Monday, August 14, 2000 6:45 AM To: suse-security@suse.com Subject: [suse-security] Secure Mail Server suggestions I want to replace our ailing mail server with a new one. It should have an smtp server (of course), pop and imap servers and also a webmail solution. Can you suggest a combination of programs for all of the above that are scalable and most importantly secure? For smtp server, I have only used sendmail until now but I like what I have read about qmail and would prefer to use it if I can find secure and stable imap and webmail solutions that would work with it. Thanks, Selcuk <=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=> < Selcuk Ozturk <+> Email: > < MIS Deputy Director <+> sozturk@eMediaMillWorks.com > <=============================<#>===================================> < <+> eMediaMillWorks > < Fax : (301)883-2482 x121 <+> 1100 Mercantile Lane, Ste 119 > < Fax : (301)883-9754 <+> Largo, MD 20774 > <=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=> --------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
postfix is probably as secure as qmail, somewhat easier to configure, and seems to have a more tolerant mail list. it can deliver to maildir's if you need that (i do). i recently moved my mailserver from qmail, which i'd been running for about 2 years, to postfix. www.postfix.org -- michael On Mon, 14 Aug 2000, Magus Ba'al wrote:
I personally prefer to use Qmail (for smtp) and vpopmail (for pop). I've never setup an imap server, so I can't help on that one. And off hand I can't remember the addon for qmail, but you can have a web-based email viewer, through http or https/ssl. IMHO, Qmail is the most secure smtp server out there, with LOTS of good options to set it how ever you want, like virtual domains.
IMHO, sendmail is highly insecure and should be replaced.
Anyone else got any suggestions on a good mail daemon?
Steven Senior Network Nazi
Postfix rocks! - Herman On Mon, 14 Aug 2000, Magus Ba'al wrote: ->>I personally prefer to use Qmail (for smtp) and vpopmail (for pop). I've ->>never setup an imap server, so I can't help on that one. And off hand I ->>can't remember the addon for qmail, but you can have a web-based email ->>viewer, through http or https/ssl. IMHO, Qmail is the most secure smtp ->>server out there, with LOTS of good options to set it how ever you want, ->>like virtual domains. ->> ->>IMHO, sendmail is highly insecure and should be replaced. ->> ->>Anyone else got any suggestions on a good mail daemon? ->> ->>Steven ->>Senior Network Nazi ->> ->> ->> ->>-----Original Message----- ->>From: Selcuk Ozturk [mailto:sozturk@emediamillworks.com] ->>Sent: Monday, August 14, 2000 6:45 AM ->>To: suse-security@suse.com ->>Subject: [suse-security] Secure Mail Server suggestions ->> ->> ->>I want to replace our ailing mail server with a new one. It should ->>have an smtp server (of course), pop and imap servers and also ->>a webmail solution. Can you suggest a combination of programs ->>for all of the above that are scalable and most importantly secure? ->> ->>For smtp server, I have only used sendmail until now but I like what ->>I have read about qmail and would prefer to use it if I can find ->>secure and stable imap and webmail solutions that would work with it. ->> ->>Thanks, ->>Selcuk ->> ->> ->><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=> ->>< Selcuk Ozturk <+> Email: > ->>< MIS Deputy Director <+> sozturk@eMediaMillWorks.com > ->><=============================<#>===================================> ->>< <+> eMediaMillWorks > ->>< Fax : (301)883-2482 x121 <+> 1100 Mercantile Lane, Ste 119 > ->>< Fax : (301)883-9754 <+> Largo, MD 20774 > ->><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=> ->> ->> ->>--------------------------------------------------------------------- ->>To unsubscribe, e-mail: suse-security-unsubscribe@suse.com ->>For additional commands, e-mail: suse-security-help@suse.com ->> ->> ->>--------------------------------------------------------------------- ->>To unsubscribe, e-mail: suse-security-unsubscribe@suse.com ->>For additional commands, e-mail: suse-security-help@suse.com ->>
On Mon, Aug 14, 2000 at 07:46:03AM -0700, Herman Knief wrote:
Postfix rocks!
- Herman
And I take it you see that as a pro-postfix argument? What do you do when it starts humming 'Shake, rattle & roll' ? Jurriaan PS qmail is good, but the documentation is a bit dense. You might want to scour the web for Life with Qmail which is good to help you on your way. As to postfix, I cannot imagine why someone would make a mailserver compatible to sendmail :-) -- Today is cancelled due to lack of interest. GNU/Linux 2.2.17pre16 SMP 4 users load av: 0.07 0.03 0.00
Define 'compatible to sendmail'? You mean, operates according to RFC on port 25? Since you don't like my earlier description, Postfix is a VERY secure, very light MTA that is extremely fast and flexible. I use it to run a mail list with (at last count) 228K users on it. - Herman On Mon, 14 Aug 2000 thunder7@xs4all.nl wrote: ->>On Mon, Aug 14, 2000 at 07:46:03AM -0700, Herman Knief wrote: ->>> Postfix rocks! ->>> ->>> - Herman ->> ->>And I take it you see that as a pro-postfix argument? What do you do ->>when it starts humming 'Shake, rattle & roll' ? ->> ->>Jurriaan ->> ->>PS qmail is good, but the documentation is a bit dense. You might want ->>to scour the web for Life with Qmail which is good to help you on your ->>way. As to postfix, I cannot imagine why someone would make a mailserver ->>compatible to sendmail :-) ->> ->> ->>-- ->>Today is cancelled due to lack of interest. ->>GNU/Linux 2.2.17pre16 SMP 4 users load av: 0.07 0.03 0.00 ->> ->>--------------------------------------------------------------------- ->>To unsubscribe, e-mail: suse-security-unsubscribe@suse.com ->>For additional commands, e-mail: suse-security-help@suse.com ->>
Hello, if your global goal is the security, it's a good way, to split your mail system: 1. SMTPD (Store and Proxy Mail forwarder) placed in the DMZ, without any other systems on it. but with the possibility to send trough the second firewall SMTP to the real Mail-Server. 2. The real Mailserver (I think, that sendmail is good choice) is configured only to recieve from and send to the SMTPD. Looking out for your wishes (POP3, IMAP, Web-based interface) you can install SuSE's IMAP Server on the real Mailserver. 3. To allow remote secure access to the Systems the best way is to install a VPN. If you want restict different Services for different Users you can use SecGo Solutions Crypto IP Server but it's running only on NT. There will be Linux Clients to the Crypto IP Server soon. mit freundlichen Gruessen, Oliver Grube --------------------------------------------- --IT-Secure - Mit Sicherheit gute Lösungen.-- --------------------------------------------- Security Support * oliver.grube@it-secure.de +49 2161 6897-180 * http://www.it-secure.de
participants (7)
-
Herman Knief
-
Jürgen Dollinger
-
Magus Ba'al
-
Michael Galloway
-
Oliver Grube
-
Selcuk Ozturk
-
thunder7@xs4all.nl