Antken,

> From: "Steve Fink" <[EMAIL PROTECTED]>
> Date: Fri, 5 Apr 2002 08:45:53 -0700
>
<snip>

A mail server *must* have persistent storage (*more* than a RAM-disk),
the RFCs more or less dictate that.  The nice thing about a LEAF is
that the only persistent storage is physically write protected!  If
you go adding a hard disk as your mail spool you are starting down the
slippery slope that leads to insecurity...


> Best solution is running a mail server behind the firewall with
> ports 25 and 110 port forwarded to the mail server.  That way the
> only exposure to the mail server is those specific ports.

I quite agree (do you need to forward 110, I don't have to?), I have
done this at work (first an isdn LRP, now an ADSL LEAF) and at home
(ADSL LEAF).  Works a treat.


> Always bearing in mind that if the mail daemons you choose have
> security holes these could be utilized to penetrate your network.

That is why I use 'Postfix' <www.postfix.org>.  Up to now it has never
had an exploitable security failure (yes, it did have a minor DOS
exploit for a while).  It is faster and *much* easier to configure
than Sendmail, and Postfix's author Wietse Venema is much friendlier
than QMail's Dan Bernstein! ;-)


> Best of luck,
> 
> Steve


Greetings

Mark Plowman


_______________________________________________
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user

Reply via email to