At 10:46 13-03-2003 -0800, you wrote:
Sendmail isn't easy to setup, or administrator. We ran Sendmail for years out in the DMZ, so I speak from much experience. If you must run Sendmail, then I recommend the commercially supported Sendmail Switch, which will run on Windows 2000, and is available from http://www.sendmail.com/products/msmgr_routing.shtml. It comes with a web interface, and for someone who isn't Unix experienced, is at least, doable.

I'm a admin for both Sendmail and Exchange, and not just 2 of each.. I don't think Sendmail is harder then Exchange, in fact I think it's easier.
Hmmm but I do have Linux experience, on Linux I refuse to use anything that looks a GUI. Nothing beats vi or pico.


My biggest issue with Sendmail is that is a HUGE security risk - it has a new massive security hole about once every six months. Due to the nature of its design - one size fits all - and that it runs damn near everything as root, I would say it is impossible to every be truly secure.

Yeah, sure, but almost everything you say goes for Exchange too, security issues, need to patch frequently.. one size fits all..
Sendmail configuration is just compile and install it, install your own .cf (created from one file and added what you need).
Sendmail security has improved much, right know only a part runs as root, the other as smmsp (an user with almost no privs at all).


Last week, for example, a new hole was discovered and received world-wide publicity: a buffer overflow, which was accessible simply by sending a specially constructed email with a malformed TO, CC, or BCC line to a non-patched Sendmail server. When exploited, it gave root control of the Sendmail server to the attacker.

I think an MS admin has other things to worry about right now. I think I remember there is a new code red..


I recommend qmail, which is not only highly secure - it has NEVER had a security breach - but is also at least 4-5 times as fast as Sendmail, and much, much easier to set up and configure.

Now here we finally agree.. qmail has had no security issues at all (not that I'm aware of). You may want to think about Postfix too..


When it comes to security it doesn't really matter which OS you run. We need to patch both Windows and Linux.

Everything I could think of in favor of one of them is left out. I don't intend to start a discussion about which OS is the best or the most secure. For everyone who do want to discuss this there are newsgroups like alt.computer.linux.advocacy and alt.computer.windows.advocacy or something like that.



B.


_________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]

Reply via email to