Alexander Skwar wrote:
Suranga Kasthuriarachchi wrote:
Which is the best for organization mail server.
NOT qmail - too many holes and not good performancewise.
Some clarification on the security of qmail:
qmail has no known holes be default other than still playing the MTA
game by 1998 rules which is are problems and almost as annoying as
security issues. Patches like 0.0.0.0, limit-bounce size, etc solve most
of those. It also has very few features which is sort of the root of the
problem. In order to get features (and performance) you have to patch
the hell out of qmail which is of course no longer the secure default
build. The 1.0.3-r16 ebuild has 29 possible patches. It's through the
patches that security problems are likely to be introduced, but IIRC
there has one been one or two that have been found at least in mature
non bleeding edges patches.
and then on performance:
qmail can be made to perform, but you have to add the performance
patches (qmailqueue, big-todo, big-concurrency) and do much more tuning
that you'd need to do with any other mail servers. However the one mail
per TCP session is one thing you can't get around and will limit the
speed of large installations. Most home user or small business users
won't run into that.
Or you can install Postfix/Sendmail/Exim which have had actual
development over the last eight years.
kashani
--
gentoo-user@gentoo.org mailing list
