I'd disagree with both your assessment of sendmail. It took about an hour to
configure 4 OpenBSD systems to route mail for about 12 domains, and include
both whitelist and blacklist entries for addresses and servers. Its also
easy to set to run in a protected shell environment.

Qmail isn't all that much easier to configure. Either way, if you don't
understand DNS, and I mean REALLY understand DNS with respect to mail flow,
neither will work correctly.



--------------------------------------------------------------
Roger D. Seielstad - MCSE
Sr. Systems Administrator
Inovis Inc.


> -----Original Message-----
> From: Wendel, Jesse [mailto:[EMAIL PROTECTED] 
> Sent: Thursday, March 13, 2003 1:47 PM
> To: Exchange Discussions
> Subject: RE: SPAM blockin software recommendations.....
> 
> 
> Sendmail isn't easy to setup, or administrator.  We ran 
> Sendmail for years out in the DMZ, so I speak from much 
> experience.  If you must run Sendmail, then I recommend the 
> commercially supported Sendmail Switch, which will run on 
> Windows 2000, and is available from 
> http://www.sendmail.com/products/msmgr_routing.shtml.  It 
> comes with a web interface, and for someone who isn't Unix 
> experienced, is at least, doable.
> 
> My biggest issue with Sendmail is that is a HUGE security 
> risk - it has a new massive security hole about once every 
> six months.  Due to the nature of its design - one size fits 
> all - and that it runs damn near everything as root, I would 
> say it is impossible to every be truly secure.
> 
> Last week, for example, a new hole was discovered and 
> received world-wide publicity: a buffer overflow, which was 
> accessible simply by sending a specially constructed email 
> with a malformed TO, CC, or BCC line to a non-patched 
> Sendmail server.  When exploited, it gave root control of the 
> Sendmail server to the attacker.
> 
> I recommend qmail, which is not only highly secure - it has 
> NEVER had a security breach - but is also at least 4-5 times 
> as fast as Sendmail, and much, much easier to set up and configure.
> 
> Jesse Wendel
> Sr. Technical Systems Analyst
> Primary Messaging/DNS Administrator
> www.pse.com
> 
> 
> > -----Original Message-----
> > From: Jim Helfer [mailto:[EMAIL PROTECTED]
> > Sent: Wednesday, March 12, 2003 12:15 PM
> > To: Exchange Discussions
> > Subject: RE: SPAM blockin software recommendations.....
> > 
> > 
> > 
> >   How hard is it to set up Sendmail ?  I had a hard enough
> > time figuring out
> > Exchange! 
> > 
> >  Jim H
> > 
> > 
> > Wendel, Jesse wrote:
> > > Out in the dmz we use qmail with a loop to spamassassin, 
> for inbound 
> > > traffic to our internal Exchange organization.
> > > 
> > > If the email is ranked as spam, the envelope gets 
> rewritten and sent 
> > > inbound to a quarantine mailbox which gets reviewed daily 
> by staff. 
> > > We're grabbing over 10,000 spams per week, with less than one (1) 
> > > false positive per week (yes, that is  over 1/10,000 or 
> better than
> > > .9999 of reliability!)    
> > > 
> > > And with the Bayesian filters - 
> > > http://www.paulgraham.com/antispam.html - enabled by default, 
> > > spamassassin automatically learns what is spam for our 
> enterprise, 
> > > and what isn't.  Not to mention that we can and do train 
> the filters
> > > specifically for both non-spam (ham) and spam.    
> > > 
> > > Our users love us.  And we love both qmail and spamassassin.
> > > Greatest thing since (insert your own metaphor here.) 
> > > 
> > > Jesse Wendel
> > > Sr. Technical Systems Analyst
> > > Primary Messaging/DNS Administrator
> > > www.pse.com
> > > 
> > > 
> > >> -----Original Message-----
> > >> From: Ed Crowley [mailto:[EMAIL PROTECTED]
> > >> Sent: Tuesday, March 11, 2003 2:21 PM
> > >> To: Exchange Discussions
> > >> Subject: RE: SPAM blockin software recommendations.....
> > >> 
> > >> 
> > >> There are lists of them at http://www.slipstick.com and 
> > >> http://www.mail-resources.com.
> > >> 
> > >> Ed Crowley MCSE+Internet MVP
> > >> Freelance E-Mail Philosopher
> > >> Protecting the world from PSTs and Bricked Backups!T
> > >> 
> > >> 
> > >> -----Original Message-----
> > >> From: [EMAIL PROTECTED]
> > >> [mailto:[EMAIL PROTECTED] On Behalf Of
> > Brian Dugas
> > >> Sent: Tuesday, March 11, 2003 6:36 AM
> > >> To: Exchange Discussions
> > >> Subject: SPAM blockin software recommendations.....
> > >> 
> > >> 
> > >> Good Morning,
> > >> 
> > >> I am currently using Trend eManager to block SPAM(in 
> trial version 
> > >> still), it is not appearing to be very effective. What are some 
> > >> other options for blocking SPAM?
> > >> 
> > >> Thanks in advance.
> > >> 
> > >> Brian
> > >> 
> > >> 
> > >> _________________________________________________________________
> > >> List posting FAQ:       
> http://www.swinc.com/resource/exch_faq.htm
> > >> Archives:     
>           http://www.swynk.com/sitesearch/search.asp
> > >> To unsubscribe:         mailto:[EMAIL PROTECTED]
> > >> Exchange List admin:    [EMAIL PROTECTED]
> > >> 
> > >> 
> > >> _________________________________________________________________
> > >> List posting FAQ:       
> http://www.swinc.com/resource/exch_faq.htm
> > >> Archives:     
>           http://www.swynk.com/sitesearch/search.asp
> > >> To unsubscribe:         mailto:[EMAIL PROTECTED]
> > >> Exchange List admin:    [EMAIL PROTECTED]
> > >> 
> > > 
> > > _________________________________________________________________
> > > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > > Archives:               http://www.swynk.com/sitesearch/search.asp
> > > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > > Exchange List admin:    [EMAIL PROTECTED]
> > 
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Archives:               http://www.swynk.com/sitesearch/search.asp
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > 
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Archives:               http://www.swynk.com/sitesearch/search.asp
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
> 

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to