I never understood how anyone could be a mail admin without REALLY understanding DNS. Which I do.
That isn't meant as a dig at you, Roger, or at anyone else. I mean it just as I said it. And yes - you're correct; if your dns is messed up, neither sendmail or qmail is going work, for sure. DNS and mail MX and reverse lookup Screw up? Mail flow stops. Have a good weekend everyone. May your pager and cell phone remain silent. Jesse Wendel Sr. Technical Systems Analyst Primary Messaging/DNS Administrator www.pse.com > -----Original Message----- > From: Roger Seielstad [mailto:[EMAIL PROTECTED] > Sent: Friday, March 14, 2003 8:01 AM > To: Exchange Discussions > Subject: RE: SPAM blockin software recommendations..... > > > I'd disagree with both your assessment of sendmail. It took > about an hour to > configure 4 OpenBSD systems to route mail for about 12 > domains, and include > both whitelist and blacklist entries for addresses and > servers. Its also > easy to set to run in a protected shell environment. > > Qmail isn't all that much easier to configure. Either way, if > you don't > understand DNS, and I mean REALLY understand DNS with respect > to mail flow, > neither will work correctly. > > > > -------------------------------------------------------------- > Roger D. Seielstad - MCSE > Sr. Systems Administrator > Inovis Inc. > > > > -----Original Message----- > > From: Wendel, Jesse [mailto:[EMAIL PROTECTED] > > Sent: Thursday, March 13, 2003 1:47 PM > > To: Exchange Discussions > > Subject: RE: SPAM blockin software recommendations..... > > > > > > Sendmail isn't easy to setup, or administrator. We ran > > Sendmail for years out in the DMZ, so I speak from much > > experience. If you must run Sendmail, then I recommend the > > commercially supported Sendmail Switch, which will run on > > Windows 2000, and is available from > > http://www.sendmail.com/products/msmgr_routing.shtml. It > > comes with a web interface, and for someone who isn't Unix > > experienced, is at least, doable. > > > > My biggest issue with Sendmail is that is a HUGE security > > risk - it has a new massive security hole about once every > > six months. Due to the nature of its design - one size fits > > all - and that it runs damn near everything as root, I would > > say it is impossible to every be truly secure. > > > > Last week, for example, a new hole was discovered and > > received world-wide publicity: a buffer overflow, which was > > accessible simply by sending a specially constructed email > > with a malformed TO, CC, or BCC line to a non-patched > > Sendmail server. When exploited, it gave root control of the > > Sendmail server to the attacker. > > > > I recommend qmail, which is not only highly secure - it has > > NEVER had a security breach - but is also at least 4-5 times > > as fast as Sendmail, and much, much easier to set up and configure. > > > > Jesse Wendel > > Sr. Technical Systems Analyst > > Primary Messaging/DNS Administrator > > www.pse.com > > > > > > > -----Original Message----- > > > From: Jim Helfer [mailto:[EMAIL PROTECTED] > > > Sent: Wednesday, March 12, 2003 12:15 PM > > > To: Exchange Discussions > > > Subject: RE: SPAM blockin software recommendations..... > > > > > > > > > > > > How hard is it to set up Sendmail ? I had a hard enough > > > time figuring out > > > Exchange! > > > > > > Jim H > > > > > > > > > Wendel, Jesse wrote: > > > > Out in the dmz we use qmail with a loop to spamassassin, > > for inbound > > > > traffic to our internal Exchange organization. > > > > > > > > If the email is ranked as spam, the envelope gets > > rewritten and sent > > > > inbound to a quarantine mailbox which gets reviewed daily > > by staff. > > > > We're grabbing over 10,000 spams per week, with less > than one (1) > > > > false positive per week (yes, that is over 1/10,000 or > > better than > > > > .9999 of reliability!) > > > > > > > > And with the Bayesian filters - > > > > http://www.paulgraham.com/antispam.html - enabled by default, > > > > spamassassin automatically learns what is spam for our > > enterprise, > > > > and what isn't. Not to mention that we can and do train > > the filters > > > > specifically for both non-spam (ham) and spam. > > > > > > > > Our users love us. And we love both qmail and spamassassin. > > > > Greatest thing since (insert your own metaphor here.) > > > > > > > > Jesse Wendel > > > > Sr. Technical Systems Analyst > > > > Primary Messaging/DNS Administrator > > > > www.pse.com > > > > > > > > > > > >> -----Original Message----- > > > >> From: Ed Crowley [mailto:[EMAIL PROTECTED] > > > >> Sent: Tuesday, March 11, 2003 2:21 PM > > > >> To: Exchange Discussions > > > >> Subject: RE: SPAM blockin software recommendations..... > > > >> > > > >> > > > >> There are lists of them at http://www.slipstick.com and > > > >> http://www.mail-resources.com. > > > >> > > > >> Ed Crowley MCSE+Internet MVP > > > >> Freelance E-Mail Philosopher > > > >> Protecting the world from PSTs and Bricked Backups!T > > > >> > > > >> > > > >> -----Original Message----- > > > >> From: [EMAIL PROTECTED] > > > >> [mailto:[EMAIL PROTECTED] On Behalf Of > > > Brian Dugas > > > >> Sent: Tuesday, March 11, 2003 6:36 AM > > > >> To: Exchange Discussions > > > >> Subject: SPAM blockin software recommendations..... > > > >> > > > >> > > > >> Good Morning, > > > >> > > > >> I am currently using Trend eManager to block SPAM(in > > trial version > > > >> still), it is not appearing to be very effective. What > are some > > > >> other options for blocking SPAM? > > > >> > > > >> Thanks in advance. > > > >> > > > >> Brian > > > >> > > > >> > > > >> > _________________________________________________________________ > > > >> List posting FAQ: > > http://www.swinc.com/resource/exch_faq.htm > > > >> Archives: > > http://www.swynk.com/sitesearch/search.asp > > > >> To unsubscribe: mailto:[EMAIL PROTECTED] > > > >> Exchange List admin: [EMAIL PROTECTED] > > > >> > > > >> > > > >> > _________________________________________________________________ > > > >> List posting FAQ: > > http://www.swinc.com/resource/exch_faq.htm > > > >> Archives: > > http://www.swynk.com/sitesearch/search.asp > > > >> To unsubscribe: mailto:[EMAIL PROTECTED] > > > >> Exchange List admin: [EMAIL PROTECTED] > > > >> > > > > > > > > > _________________________________________________________________ > > > > List posting FAQ: > http://www.swinc.com/resource/exch_faq.htm > > > > Archives: > http://www.swynk.com/sitesearch/search.asp > > > > To unsubscribe: mailto:[EMAIL PROTECTED] > > > > Exchange List admin: [EMAIL PROTECTED] > > > > > > > > > _________________________________________________________________ > > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > > Archives: http://www.swynk.com/sitesearch/search.asp > > > To unsubscribe: mailto:[EMAIL PROTECTED] > > > Exchange List admin: [EMAIL PROTECTED] > > > > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Archives: http://www.swynk.com/sitesearch/search.asp > > To unsubscribe: mailto:[EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]