Slashdot Mirror
Postfix: A Secure and Easy-to-Use MTA
BSD Forums writes "On March 3rd, 2003, Internet Security Systems, in cooperation with the Department of Homeland Security, issued a warning regarding a hole found in Sendmail. The warning, echoed by CERT, warned system admins that any version lower than 8.12.8 was vulnerable to a serious root exploit. Sendmail has a long history of security holes, most of which have been thoroughly documented on security sites. While Sendmail runs half the mail servers in the world, there are smaller and easier-to-use mail transfer agents (MTAs). Network administrator Glenn Graham demonstrates how Postfix gives you most of the power with a fraction of the pain."
1) Get hacked every other day.
2) ?
3) Switch from sendmail to postfix.
4) Secure!
windows users don't have to worry about this!
hahaha
(it's a joke ok ? i use unix.....)
Phew lucky I'm running exchange and don't have these damn sendmail SECURITY fixes to worry about ;)
Do they do anything else?
Japan surrenders; war over
JFK Assassinated in Dallas
Moon landing a success
Wall falls, Berlin united
Slashdot. For up-to-the-minute news.
email server, and well, make it stop serving email?
My postfix installation is extremely secure, I can't get it to receive any email at all. If anyone could help me unsecure it by teaching it to deliver mail to my computer, could they shoot me an email? (bassettgabriel @qwest.net). I'm not a system administrator, just a guy w/ linux at home and the simple setup just isn't working for some reason.
I do security
A Washington Post article says Microsoft Windows is insecure by design. Quote: 'Between the Blaster worm and the Sobig virus, it's been a long two weeks for Windows users. But nobody with a Mac or a Linux PC has had to lose a moment of sleep over these outbreaks -- just like in earlier "malware" epidemics.
Of course, they were too busy upgrading/patching Sendmail.
yeap, and it's the same homeland security that after buying that issued this warning. I suppose I should be glad they're looking out, because you and I both know that the terrorists might come into the country next through the finger exploit.
-=-=-=-=-=--=-=-=-=-=-=-
What would Yossarian do?
No one will answer you....
Probably because nobody can be bothered to respond to such an imbecilic remark. Sendmail and postfix are Mail Transport Agents, not Groupware. If you wanted to compare Exchange with a Linux equivalent, then there have been umpteen threads here in the past on the topic. This one, for example. Personally, I like this one but it isn't free. (At least not free as in beer. It's built on top of similar software to the free ones though.)
But do go on comparing apples with oranges if you wish. It doesn't hurt anyone, and it gives many of us a sense of smug superiority.
I can not complain about having to patch sendmail for the same
I'm so sorry, but you seem to be reading an imaginary slashdot thread in your own head, as opposed to this one, which is about the security holes in Sendmail and how using Postfix may be a better approach because of what a pain it is to keep it updated?
Perhaps you'd like to share your imaginary one with the rest of us and entertain us all some more?
Yes. Yes it is.
No, SuSE and Mandrake have been shipping Postfix by default for a few years (Mandrake at least since 7.1). Of course, sendmail is still available and supported (pity, otherwise there may be space for other secure mail servers
I think it's only the Redhat users who get an insecure MTA by default
It seems Debian may have also seen the light