Slashdot Mirror


The Exim SMTP Mail Server

ollyg writes "Exim is a mail transfer agent that can be run as an alternative to Sendmail on most Unix and Unix-like systems. At my organization we use it to relay around half a million messages per day, although it's suitable for many other types of installation including those with local delivery, and far larger (or smaller) ISPs." Ollyg reviews here the official guide to Exim's current release, which weighs in at a hefty 621 pages. The Exim SMTP Mail Server: Official Guide for Release 4 author Philip Hazel pages 621 publisher UIT Cambridge rating Recommended reviewer Oliver Gorwits ISBN 0954452909 summary A thorough guide to the configuration and deployment of Exim v4.x

A bit of history, first. Exim is currently in its fourth version, and is developed by Philip Hazel at the University of Cambridge Computing Service. The third release was accompanied by an O'Reilly book, also written by Philip, but there were enough fundamental differences that this release warranted its own volume. And what a book: more than 600 pages straight from the horse's mouth (as it were); you can't go wrong.

The structure is flat, being twenty-two chapters and two appendices long, but I'd say there were three main acts if you take it cover to cover. Philip begins with five chapters that introduce the reader to Internet mail, Exim, and some rudimentary runtime configurations. There's nothing to fear here, as the text is beautifully self-contained, covering topics from the DNS to routing lookups. As Exim's runtime configuration is both flexible and easy to read, the quite technical examples given early on can be understood without flicking to and from other chapters in the book.

The next four chapters cover in a rather succinct manner the parts of Exim that route and transport your messages. By this point you should have a grasp of the philosophy and design of Exim, which allows Philip just to give you the details. This section does feel most like a reference manual but I'm not sure there's another way he could present the information without confusing the reader. The remainder of the book covers each of the Big Features of Exim, one per chapter. I'm guessing that Philip just kept on writing until he ran out of features, rather than time or space! These chapters feel far more like the heart of the book, and the author treads a fine line between thorough process description and distracting technicalities. The two appendices cover regular expression syntax and special variables (both being available to Exim's configuration).

The book would be ideal if, for example, you manage a mail system on your own and don't have a great deal more admin experience close at hand. Its great strength is the vast number of scenarios that Philip has thought up; it seems that if you can think of something that you want the application to do, it'll be in there somewhere. At my site however we do have a good number of people who are familiar with Exim, so armed with a copy of the (equally well written) reference manual we can usually get along just fine.

Those expecting the chatty, irreverent style of an O'Reilly text may be in for a disappointment. Philip writes in a clear, precise manner, and obviously knows the subject matter (literally) inside-out; but there's no messing around and you have to be committed to learning about the subject in question. Having said that, I don't want these last two paragraphs to put you off. If there's even a whiff of a chance of you having to come into contact with Exim or its runtime configuration, then I can do nothing else but strongly recommend this book. The detail's there in spades, it reads very well, and is a fine complement to the reference manual.

For more information, see also the Exim home page, as well as this book's website. You can't yet purchase the book from American retailers, though if you're in a hurry, bn.com stocks the previous version. Slashdot welcomes readers' book reviews -- to see your own review here, read the book review guidelines, then visit the submission page.

13 of 233 comments (clear)

  1. Re:Why would I want to use exim? by Anonymous Coward · · Score: 5, Funny

    I understand windows, I like windows, and windows works. Forgive me if I don't feel the need to use some random unproven OS.

    Security is the answer my friend.

  2. Exchange by Anonymous Coward · · Score: 5, Interesting


    Sorry, I have to post this as an AC..

    My employer has ~5000 employees across Canada. We have 8 or 10 MS-Exchange racks around the country (one per location and a big one in Ontario).

    Two dual Xeons for primary and backup and another for the domain controller. I *know* how much traffic we have and this is gross overkill. Mind you, Exchange needs a lot of horsepower for the bloat. Anyhow, some rough numbers showed that we could eliminate all the Exchange servers with a *single* dual CPU FreeBSD 5.x box running Postfix.

    Would the bureaucrats listen? No, in fact one fellow gave an ultimatum that if we didn't run Exchange, he'd quit.

    So around the country we have little Unix systems popping up that act more reliably and without the spam (we use blackhole lists)

  3. Re:hefty? by mdvolm · · Score: 5, Funny

    Would you say then that sendmail is baroque beyond repair?

  4. Exim on a Home Network by dochood · · Score: 4, Interesting

    I use Exim on my home network. It runs on my firewall machine (yeah, I know... probably not the safest thing to do, but port 25 is blocked from coming in... it's local only) so that my wife, kids and I can use it as our SMTP server, to quickly send stuff out. I also use Fetchmail, SpamAssassin, and Procmail to filter spam and nasty attachments. We use IMAP, so everything gets backed up from one place.

    I use Exim, because when I installed it with Debian, it asked about 5 reasonable questions, and then it just ran. That's it. There's no point in trying to learn Sendmail's complex file format, when we only need to serve 4 users. It's a great way to get an e-mail server up and running quickly for a small network. I was quite surprised, though, about the post above that said they use it for 1/2 million messages a day! I didn't know it could handle such a big load!

    dochood

  5. Props to exim! by larry+bagina · · Score: 5, Interesting
    Honestly, I don't know why Red Hat and others include sendmail. This isn't the 1980s anymore, and there are better (as in, fewer bugs, root exploits, easier to configure) options. Like exim and qmail (which I prefer, though I use exim at work).

    We used to use sendmail at work. The justification being that's what we always used, and that's what the support contracts listed.

    Then the mail admin was on vacation for a week, and nobody noticed the security alert for the remote relay exploit. A spammer found us, and we had to shut down all mail for 6 hours until we could figure out what happened. And are still trying to get our IP off some spam lists.

    Since then, we've gone to exim, and it justs works.

    If anybody needs half a dozen sendmail books, let me know :)

    --
    Do you even lift?

    These aren't the 'roids you're looking for.

    1. Re:Props to exim! by lunenburg · · Score: 4, Informative

      Honestly, I don't know why Red Hat and others include sendmail.

      Red Hat includes both Sendmail and Postfix on their CDs - sendmail is just the default.

      You can install Postfix, and then use "redhat-switch-mail" to activate Postfix. And with that, you're running a not-Sendmail mailer.

    2. Re:Props to exim! by pla · · Score: 5, Interesting

      I don't know why a home user linux box even NEEDS a mail server.

      Assuming you didn't mean that sarcastically, in a "why would anyone need more than 640k of RAM" manner...

      Because some of us don't like having our personal email stored on (or ever even passing unencrypted through) our ISP's systems.

      A decade ago, well over half of my friends worked (mostly in some network admin style position) for local ISPs. Let's just say that I found this... "enlightening". Do not trust the privacy of ANYTHING stored on or passing over the net unencrypted. I don't say this out of paranoia, but real, concrete experience.

      One friend (an extreme example, but probably more common than we'd like to believe) had a "stalkee of the week". He'd pick a random user, and read all their mail, check out what web sites they visited and what they downloaded, scan through their telnet, IRC, and any other unencrypted sessions... By the end of the week, he'd know more about them than their wives did.

      Legal? Probably not (without a lot of evidence, he could have just claimed that he only monitored a suspected intruder). But could anyone catch him? Very unlikely, even if they knew about his "hobby".

      My point with this little anecdote... Basically, you most certainly do have a good reason to run your own mail server, assuming you have even a passing interest in privacy.

  6. Exim is no-nonsense, no worry by ArghBlarg · · Score: 5, Insightful

    I'm having trouble understanding why people here are trashing exim; as someone else already said, Debian uses it as their default mail server; it asks a few easy to understand questions, and just works. It's much friendlier than sendmail.

    As for security, I haven't audited the code myself (honestly, have you?). However, I *do* subscribe to the BUGTRAQ mailing list, and have seen maybe two advisories on exim over the last two years -- as opposed to literally dozens for sendmail.

    Oh, and the configuration file doesn't look like line noise :-).

    --
    ERROR 144 - REBOOT ?
  7. bofh by erikdotla · · Score: 5, Funny

    I work at an organization with over 34,000 employees. We tried Linux/Sendmail, it was too complicated and the admin GUI sucked. We switched to Exchange, but the box had pointy edges and was hurty.

    Realizing that it was all very complex, we emailed all our employees their final message. It was a link to the SMTP RFC and a short list of instructions on how to use Telnet. Then we shut down the mail server and ate lunch.

    Management reported an immediate profit increase projection for that month. While I'm sure this was due to productivity improvements facilitated by my fine IT department, some skeptical colleagues of mine think it was the mass exodus of employee resignations that took place around the time the new "mail system" went into place. I'm sure it was due to the rat problem in the cafeteria but nobody will listen to me.

    --
    # Erik
  8. Re:Why would I want to use exim? by AmunRa · · Score: 4, Interesting
    Forgive me if I don't feel the need to use some random unproven MTA.
    I hate to tell you, but the ISP I used to work for used exim throughout, with 1000s of domains and 1000s of simultaneous dialup users. I also know that one of the largest ISPs in the UK Freeserve use(d) Exim for all their mail. So I wouldn't say it is unproven.
    --
    " To steal ideas from one person is plagiarism; to steal from many is research. "
  9. mmmmm religious wars..... by Akai · · Score: 4, Interesting

    I've never understood the *nix reaction (although it has spread to windows/regular PC users) that escalates any difference in opinion to a religious war...

    That being said, I have experience on three of the "big four" MTA's out there (sendmail, qmail, and exim) and currently use exim on my personal site (which also hosts a number of mailman lists for OpenSource project and friends of mine) and it handle's about 20k messages in/out on a linux box.

    I also use qmail on my work servers (cluster of quad-procesor ultrasparcs) and although I can't say I would have chosen qmail if I'd been in charge of building the servers (I inherited them from "the architect") it handles millions of emails a day just fine.

    I can't say i miss m4 (although I know real sendmail admins don't bother with wimpy scripting languages), sendmail also served it's purpose back in the day.

    Could exim handle the load on the ultasparcs? possibly, I haven't checked. Could I put qmail on my personal box? sure, but if Exim works, why not.

    To comment further on one thing, Philip has a good explination of monolithic vs modular on the exim website, which explains why he does things the way he does. At least read it before blindly attacking the system.

    --
    Please send all UCE to scally@devolution.com so I can f
    1. Re:mmmmm religious wars..... by adamy · · Score: 4, Insightful

      We call them religeous wars, but they are healthy disagreements about different approaches to problems.

      Most people that speak strongly about VI and emacs have used both. Most people that speak strongly about Exchange versus anything come from a MS background where there is only one main way to do it. If the software is free, there is nothing preventing you from trying it out. If the software costs a couple of grand, you are commited.

      --
      Open Source Identity Management: FreeIPA.org
  10. A good thing by confusion · · Score: 4, Interesting

    Exim finally getting a guide for the masses is a good thing. It is true that postfix has a leg up in some areas, but I really like the configuration style and the ability for me to process 100,000 messages per hour vs. 50,000 messages per hour just isn't that big of a deal, just as it isn't for most people, since we don't come anywhere near that volume.

    Also, when you're connecting it to a database backend to pull all the delivery info as I and many others do, it's going to be orders of magnitude slower on both platforms anyway.

    Hopefully in the future exim can polish off some more of the rough edges, but in the mean time, it's still a damn nice tool.