I never understood how anyone could be a mail admin without REALLY understanding DNS.  
Which I do.

That isn't meant as a dig at you, Roger, or at anyone else.  I mean it just as I said 
it.

And yes - you're correct; if your dns is messed up, neither sendmail or qmail is going 
work, for sure.

   DNS and mail
   MX and reverse lookup
   Screw up?  Mail flow stops.

Have a good weekend everyone.  May your pager and cell phone remain silent.

Jesse Wendel
Sr. Technical Systems Analyst
Primary Messaging/DNS Administrator
www.pse.com




> -----Original Message-----
> From: Roger Seielstad [mailto:[EMAIL PROTECTED]
> Sent: Friday, March 14, 2003 8:01 AM
> To: Exchange Discussions
> Subject: RE: SPAM blockin software recommendations.....
> 
> 
> I'd disagree with both your assessment of sendmail. It took 
> about an hour to
> configure 4 OpenBSD systems to route mail for about 12 
> domains, and include
> both whitelist and blacklist entries for addresses and 
> servers. Its also
> easy to set to run in a protected shell environment.
> 
> Qmail isn't all that much easier to configure. Either way, if 
> you don't
> understand DNS, and I mean REALLY understand DNS with respect 
> to mail flow,
> neither will work correctly.
> 
> 
> 
> --------------------------------------------------------------
> Roger D. Seielstad - MCSE
> Sr. Systems Administrator
> Inovis Inc.
> 
> 
> > -----Original Message-----
> > From: Wendel, Jesse [mailto:[EMAIL PROTECTED] 
> > Sent: Thursday, March 13, 2003 1:47 PM
> > To: Exchange Discussions
> > Subject: RE: SPAM blockin software recommendations.....
> > 
> > 
> > Sendmail isn't easy to setup, or administrator.  We ran 
> > Sendmail for years out in the DMZ, so I speak from much 
> > experience.  If you must run Sendmail, then I recommend the 
> > commercially supported Sendmail Switch, which will run on 
> > Windows 2000, and is available from 
> > http://www.sendmail.com/products/msmgr_routing.shtml.  It 
> > comes with a web interface, and for someone who isn't Unix 
> > experienced, is at least, doable.
> > 
> > My biggest issue with Sendmail is that is a HUGE security 
> > risk - it has a new massive security hole about once every 
> > six months.  Due to the nature of its design - one size fits 
> > all - and that it runs damn near everything as root, I would 
> > say it is impossible to every be truly secure.
> > 
> > Last week, for example, a new hole was discovered and 
> > received world-wide publicity: a buffer overflow, which was 
> > accessible simply by sending a specially constructed email 
> > with a malformed TO, CC, or BCC line to a non-patched 
> > Sendmail server.  When exploited, it gave root control of the 
> > Sendmail server to the attacker.
> > 
> > I recommend qmail, which is not only highly secure - it has 
> > NEVER had a security breach - but is also at least 4-5 times 
> > as fast as Sendmail, and much, much easier to set up and configure.
> > 
> > Jesse Wendel
> > Sr. Technical Systems Analyst
> > Primary Messaging/DNS Administrator
> > www.pse.com
> > 
> > 
> > > -----Original Message-----
> > > From: Jim Helfer [mailto:[EMAIL PROTECTED]
> > > Sent: Wednesday, March 12, 2003 12:15 PM
> > > To: Exchange Discussions
> > > Subject: RE: SPAM blockin software recommendations.....
> > > 
> > > 
> > > 
> > >   How hard is it to set up Sendmail ?  I had a hard enough
> > > time figuring out
> > > Exchange! 
> > > 
> > >  Jim H
> > > 
> > > 
> > > Wendel, Jesse wrote:
> > > > Out in the dmz we use qmail with a loop to spamassassin, 
> > for inbound 
> > > > traffic to our internal Exchange organization.
> > > > 
> > > > If the email is ranked as spam, the envelope gets 
> > rewritten and sent 
> > > > inbound to a quarantine mailbox which gets reviewed daily 
> > by staff. 
> > > > We're grabbing over 10,000 spams per week, with less 
> than one (1) 
> > > > false positive per week (yes, that is  over 1/10,000 or 
> > better than
> > > > .9999 of reliability!)    
> > > > 
> > > > And with the Bayesian filters - 
> > > > http://www.paulgraham.com/antispam.html - enabled by default, 
> > > > spamassassin automatically learns what is spam for our 
> > enterprise, 
> > > > and what isn't.  Not to mention that we can and do train 
> > the filters
> > > > specifically for both non-spam (ham) and spam.    
> > > > 
> > > > Our users love us.  And we love both qmail and spamassassin.
> > > > Greatest thing since (insert your own metaphor here.) 
> > > > 
> > > > Jesse Wendel
> > > > Sr. Technical Systems Analyst
> > > > Primary Messaging/DNS Administrator
> > > > www.pse.com
> > > > 
> > > > 
> > > >> -----Original Message-----
> > > >> From: Ed Crowley [mailto:[EMAIL PROTECTED]
> > > >> Sent: Tuesday, March 11, 2003 2:21 PM
> > > >> To: Exchange Discussions
> > > >> Subject: RE: SPAM blockin software recommendations.....
> > > >> 
> > > >> 
> > > >> There are lists of them at http://www.slipstick.com and 
> > > >> http://www.mail-resources.com.
> > > >> 
> > > >> Ed Crowley MCSE+Internet MVP
> > > >> Freelance E-Mail Philosopher
> > > >> Protecting the world from PSTs and Bricked Backups!T
> > > >> 
> > > >> 
> > > >> -----Original Message-----
> > > >> From: [EMAIL PROTECTED]
> > > >> [mailto:[EMAIL PROTECTED] On Behalf Of
> > > Brian Dugas
> > > >> Sent: Tuesday, March 11, 2003 6:36 AM
> > > >> To: Exchange Discussions
> > > >> Subject: SPAM blockin software recommendations.....
> > > >> 
> > > >> 
> > > >> Good Morning,
> > > >> 
> > > >> I am currently using Trend eManager to block SPAM(in 
> > trial version 
> > > >> still), it is not appearing to be very effective. What 
> are some 
> > > >> other options for blocking SPAM?
> > > >> 
> > > >> Thanks in advance.
> > > >> 
> > > >> Brian
> > > >> 
> > > >> 
> > > >> 
> _________________________________________________________________
> > > >> List posting FAQ:       
> > http://www.swinc.com/resource/exch_faq.htm
> > > >> Archives:     
> >           http://www.swynk.com/sitesearch/search.asp
> > > >> To unsubscribe:         mailto:[EMAIL PROTECTED]
> > > >> Exchange List admin:    [EMAIL PROTECTED]
> > > >> 
> > > >> 
> > > >> 
> _________________________________________________________________
> > > >> List posting FAQ:       
> > http://www.swinc.com/resource/exch_faq.htm
> > > >> Archives:     
> >           http://www.swynk.com/sitesearch/search.asp
> > > >> To unsubscribe:         mailto:[EMAIL PROTECTED]
> > > >> Exchange List admin:    [EMAIL PROTECTED]
> > > >> 
> > > > 
> > > > 
> _________________________________________________________________
> > > > List posting FAQ:       
> http://www.swinc.com/resource/exch_faq.htm
> > > > Archives:               
> http://www.swynk.com/sitesearch/search.asp
> > > > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > > > Exchange List admin:    [EMAIL PROTECTED]
> > > 
> > > 
> > > _________________________________________________________________
> > > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > > Archives:               http://www.swynk.com/sitesearch/search.asp
> > > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > > Exchange List admin:    [EMAIL PROTECTED]
> > > 
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Archives:               http://www.swynk.com/sitesearch/search.asp
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> > 
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Archives:               http://www.swynk.com/sitesearch/search.asp
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
> 

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to