Slashdot Mirror


Postfix 2.1 Released

MasTRE writes "After an extended period of polishing and testing, Postfix 2.1 is released. Some highlights: complete documentation rewrite (long overdue!), policy delegation to external code, real-time content filtering _before_ mail is accepted (a top 10 most requested feature in previous versions), major revision of the LDAP/MySQL/PGSQL code. Version 2.2 is in thw works, which promises even more features like client rate limiting and integration of the TLS and IPv6 patches into the official tree. There's never been a better time to migrate from Sendmail (just _had_ to get that in there ;)."

286 comments

  1. Aaargghhh! by gowen · · Score: 5, Interesting

    It would be nice if, during product announcements, if the submitter actually included a sentence SAYING WHAT THE SOFTWARE DOES.

    Yes, I know its an SMTP server, but sheesh, is it so hard to start it "After an extended period of polishing and testing, Postfix, the popular open source mail transfer agent, has reached version 2.1

    --
    Athletic Scholarships to universities make as much sense as academic scholarships to sports teams.
    1. Re:Aaargghhh! by Anonymous Coward · · Score: 1

      I argee it's a common problem here, but in this case I thought "There's never been a better time to migrate from Sendmail" was pretty obvious. You just had to read a lot first.

    2. Re:Aaargghhh! by mattdm · · Score: 4, Funny

      Pssh. C'mon, what kind of geek hasn't heard of Postfix? I mean, sure, this'd be a valid complaint if we were talking about exim....

      *grin*

    3. Re:Aaargghhh! by StormyMonday · · Score: 2, Interesting

      I'll second that.

      On far too many Open Source projects, it's a real struggle to figure out what the durn thing is supposed to do. Go to the website, get a list of contributers, a changelog, and perhaps some press releases. Fire it up, click "help->about" and get a logo. Nothing says what it does.

      WHAT THE BLEEP IS IT SUPPOSED TO DO?

      --
      Welcome to the Turing Tarpit, where everything is possible but nothing interesting is easy.
    4. Re:Aaargghhh! by UnassumingLocalGuy · · Score: 1, Funny

      Postfix:

      4 = 2 2 +

      /oh wait...

      --
      "Hu, ho, ho-ah-oh-oh-oh. Hu, ho ho-ah-oh-oh-oh. Mario Paint! Whoaaa!"
    5. Re:Aaargghhh! by Billy+the+Mountain · · Score: 4, Funny

      Pssh. C'mon, what kind of geek hasn't heard of Postfix?

      I agree postfix is ubiquitous, although prefix and infix have their merits as well!

      BTM

      --
      That was the turning point of my life--I went from negative zero to positive zero.
    6. Re:Aaargghhh! by Anonymous Coward · · Score: 1, Informative
      "Exim is a message transfer agent (MTA) developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal of flexibility in the way mail can be routed, and there are extensive facilities for checking incoming mail. Exim can be installed in place of sendmail, although the configuration of exim is quite different to that of sendmail."

      http://www.exim.org/

    7. Re:Aaargghhh! by Anonymous Coward · · Score: 1, Funny

      Microsoft Encarta has far more enterprise features than MySQL and is faster.

    8. Re:Aaargghhh! by Doug+Neal · · Score: 1

      that would be 2 2 + 4 =, no?

    9. Re:Aaargghhh! by spektr · · Score: 1

      I agree postfix is ubiquitous, although prefix and infix have their merits as well!

      I never understood why computer scientists often use the word "postfix", because this is a term invented by biologists (anatomy). Linguists and mathematicians say "suffix" instead. Those are fields of knowledge which should be much closer to computer science than biology. I mean, what does the average CS student know about anatomy? *g*

    10. Re:Aaargghhh! by Anonymous Coward · · Score: 4, Interesting

      I never understood why computer scientists often use the word "postfix", because this is a term invented by biologists (anatomy). Linguists and mathematicians say "suffix" instead.

      I use both words, and I use them to mean different things. "Suffix" (in my idiolect) means "a bound morpheme attached to the end of a word"; "postfix" means "an unbound morpheme attached at the end of a word".

      Are you saying mathematicians really refer to the style of "2 3 +" as "suffix notation"?

    11. Re:Aaargghhh! by Anonymous Coward · · Score: 0
      that would be 2 2 + 4 =, no?

      Depends on the program, really.
      $ dc -e "2 2 + 4 ="
      dc: unexpected EOS

      $ dc -e "2 2 + p"
      4
    12. Re:Aaargghhh! by NZBeeMan · · Score: 1

      Does this mean that Exim could replace postfix then?

    13. Re:Aaargghhh! by spektr · · Score: 3, Informative

      I use both words, and I use them to mean different things. "Suffix" (in my idiolect) means "a bound morpheme attached to the end of a word"; "postfix" means "an unbound morpheme attached at the end of a word".

      Interesting. After doing some more research, I think it's time for me to give the word "postfix" a bigger place in my heart.

      Are you saying mathematicians really refer to the style of "2 3 +" as "suffix notation"?

      No, I found this entry in the Oxford English Dictionary: "MATH. An inferior index written to the right of a symbol, a subscript".

    14. Re:Aaargghhh! by Profane+MuthaFucka · · Score: 4, Informative

      Yes, I'd recommend that you look at both. Both are excellent, but in my experience some people who can't make sense of postfix configuration find Exim to be intuitive. And vice-versa. You won't know if you are a postfix or an exim person until you look at both.

      --
      Fascism trolls keeping me up every night. When I starts a preachin', he HITS ME WITH HIS REICH!
    15. Re:Aaargghhh! by MrChuck · · Score: 1
      Wouldn't it nice to assume that "news for nerds" is aimed at people who KNOW what it does?

      Or, if you have to ask, you should be elsewhere.

      Even that "developers" grouping should be a giveaway.

      A milter-alike is killer (make decisions on the content DURING the smtp connection). be nice if it actually used the (barely documented and evolving) milter interface - I can buy commercial Milter products from McAfee and Trend and Sendmail and others...

      And IPv6! Wow, sendmail was shipping that commercially in March of 2000. (it was in the free mta before that (commercial is prebuilt mta+gui+management of gangs of machines)).

      I like Postfix. I like Weitse. he, and the sendmail folk, can be really helpful and not launch ad hominum attacks on a whim. That's good.

    16. Re:Aaargghhh! by cos(0) · · Score: 3, Informative

      Are you saying mathematicians really refer to the style of "2 3 +" as "suffix notation"?

      No, they refer to it as Reverse Polish Notation.

    17. Re:Aaargghhh! by Anonymous Coward · · Score: 0

      Both are unnecessarily difficult and I look forward to something better to whine about in the future.

    18. Re:Aaargghhh! by Eric+Savage · · Score: 1

      Wow, I must have missed the memo where a bad joke is now called a troll.

      --

      This is not the greatest sig in the world, this is just a tribute.
  2. Why does everyone alwasy gotta knock sendmail?? by darthcamaro · · Score: 4, Interesting

    I've been running sendmail 4ever - sure it's complicated as hell - and a bit of a resource hog at times..but it freaking works and is rock solid over more years of production use than any other MTA ever will be in our lifetimes.

    1. Re:Why does everyone alwasy gotta knock sendmail?? by geek · · Score: 1, Insightful

      Because of the design flaws in it and the fact that muh better MTA's now exist yet many people, some like you, refuse to migrate for the betterment of the internet.

      My preference is qmail, only because I haven't used postfix in a production environment yet.

    2. Re:Why does everyone alwasy gotta knock sendmail?? by Anonymous Coward · · Score: 0

      Maybe cuz it's complicated as hell? That remotely via email root exploit not too long ago didn't help things either.

    3. Re:Why does everyone alwasy gotta knock sendmail?? by darthcamaro · · Score: 1

      Great..are we now gonna have some kinda religious debate about legacy software being crap?
      qmail is nice but it's not ubiquitous...for whatever reason sendmail still is - a correctly configured sendmail setup is still gonna meet the needs/requirements of most users.

    4. Re:Why does everyone alwasy gotta knock sendmail?? by cookem · · Score: 1

      postfix is tons better than sendmail and it works great at moving our 100s of thousands of email a day on our mail proxies

      plus there is no a security bug a week like sendmail

    5. Re:Why does everyone alwasy gotta knock sendmail?? by astellar · · Score: 1

      Maybe somebody have no time to read manuals ? ;)

    6. Re:Why does everyone alwasy gotta knock sendmail?? by Anonymous Coward · · Score: 0

      Sorry for my bad english...

      Well, I use Postfix and I'm very happy (in a big ISP production). But why you don't explain your "X is betther than Y, because I tell this..." ???

      I like too sendmail, and I don't understand what would you say whith "there is no a security bug a week like sendmail". My BSD's machines run sendmail, and without bugs since a lot of month's... ??

      Please, explain your "why's". I understand you like more one soft than another soft, but this is one, and another is to be serious and talk with one or more reasons "in mind"... ;-)

    7. Re:Why does everyone alwasy gotta knock sendmail?? by geek · · Score: 1, Insightful

      If by religious you mean common sense discussion then sure. There is literally ZERO reason to use sendmail now. There is nothing you can do with sendmail that can't be done with Postfix or qmail and you'll get better performance and security to boot.

      Technology like everything else has a life span. Sendmails ended long ago, get over it.

    8. Re:Why does everyone alwasy gotta knock sendmail?? by woulduno · · Score: 4, Insightful

      Cause Postfix was built for people who do not understand how to properly configure a mailserver. It assumes you are new and keeps it locked down by default. Where sendmail is more customizable and faster (http://www.benchmarks.dmz.ro/article.php?story=20 02081221400018), although Qmail is faster, for standard configurations.. Sendmail is great for large high volume sites, where postfix is great for the home user or smaller sites. Although it can still be used in larger sites.. I personally have been using sendmail for years and cannot remember a security issue that applied to me. Mostly because I know how to configure sendmail and it is very well tuned. I worked with a company that sent stock notifications where we pushed over 5 million messages in under 30 minutes with 8 Sun Netra's with 440 mhz CPU's.. In case you do not get the math that is about 20,833 thousand messages per minute per machine! Running sendmail..

    9. Re:Why does everyone alwasy gotta knock sendmail?? by Anonymous Coward · · Score: 1, Informative

      Actually sendmail has better SMTP performance for sending multiple copies to multiple rcpts at same destination, but it's true that there's no reason for using sendmail except perhaps for outgoing SMTP.

    10. Re:Why does everyone alwasy gotta knock sendmail?? by ahodgson · · Score: 1

      Sendmail used to cause me endless problems. Queue runs running amok. Mail backed up. DNS resolver problems. You name it, Sendmail did it. Except deliver mail reliably without constant babysitting.

      Qmail just works. Postfix just works 99.999% of the time. Sendmail certainly may have improved in the years since I've admin'd it, but I'll never go through the effort of finding out, bcause better alternatives exist.

    11. Re:Why does everyone alwasy gotta knock sendmail?? by localman · · Score: 1

      Whatever works for you is fine. But when I had sendmail installed, I had to patch it regularly to keep my boxes safe. And even then it's not really "safe" because by the time I see a patch someone could already have exploited the hole. This happened to me twice, actually.

      Since I installed qmail, I have never had to patch, and there's been no vulnerabilities for years. And it does everything I need it to.

      I haven't set up PostFix myself, but several good friends recommend it. I'm comfortable with qmail for now, but I don't think I'd ever go back to sendmail.

      Cheers.

    12. Re:Why does everyone alwasy gotta knock sendmail?? by Christianfreak · · Score: 4, Interesting

      The last study I read showed the exact opposite. With Postfix being the fastest, sendmail close behind and qmail way slower than the other two.

      Cause Postfix was built for people who do not understand how to properly configure a mailserver.

      Feeling a bit up on yourself are you? I've used all three and as a busy sysadmin I have to say I don't have time to screw around with with Sendmail security patches and overly complex setup or qmail's complete lack of flexability. I have a fairly complex Postfix setup that stores my users in Mysql, does spam and virus checking and handles about 40 domains. I set it all up in about half a day ... I don't even want to think about how long it would have taken to do it with sendmail.

    13. Re:Why does everyone alwasy gotta knock sendmail?? by mcocke · · Score: 1

      I used to run sendmail, now I run postfix. My system runs twice as fast under a heavier load. You can talk about benchmarks all week, I know what I see. That was my only complaint about sendmail.

    14. Re:Why does everyone alwasy gotta knock sendmail?? by Anonymous Coward · · Score: 0

      I started setting up a similar system with Sendmail last month. I'll let you know when it's done.

    15. Re:Why does everyone alwasy gotta knock sendmail?? by ckaminski · · Score: 2, Interesting

      Right, I have time to read an 800 page configuration guide. Personally, I prefer a system that's locked down to start, is easy to get going, and is scalable. Everything that sendmail is not (or wasn't under 8.x). ;-)

      I've used sendmail, and I've used postfix. I definitely prefer postfix. I didn't think I would, I had a serious sendmail bias a few months ago, but I'm a convert. PGSQL support did it for me, I think.

  3. As my head explodes.... by lacrymology.com · · Score: 5, Funny

    Wait, wouldn't post fix Postfix 2.1 actually be fix 2.2?

    -m

    --

    #
    # Modus Ponens
    #
    1. Re:As my head explodes.... by suwain_2 · · Score: 1

      I think you're thinking of Prefix 2.0

      --
      ________________________________________________
      suwain_2 :: quality slashdot p
    2. Re:As my head explodes.... by Nahor · · Score: 2, Funny

      No, no, you don't get it, it's because of all the filters. It fixes posts. So now, pe0ple kan wreite az badi az the want & get there pausts fyxt too a corekt form@t. This is a big help for spam filtering, no more v.iagr@, v1 gra, and stuff.

      I wonder if this technology would work for /. to spelling.

  4. I'm waiting for competitor updates... by Anonymous Coward · · Score: 1, Funny

    Suffix, Prefix, and Radix.

    1. Re:I'm waiting for competitor updates... by Lobo93 · · Score: 1

      Suffix, Prefix, and Radix.

      You forgot Suxchange from Microdix...

      Oh, btw, this message was approved by the Ministry of Silly Walks.

      --
      "The only clear view is from atop the mountain of our dead selves." - Peter Carroll
    2. Re:I'm waiting for competitor updates... by Anonymous Coward · · Score: 0

      I think Infix would be the more appropriate candidate.

  5. versioning by pizza_milkshake · · Score: 1
    Version 2.2 is in the works, which promises even more features

    i was under the impression that the standard methodology in the unix-ish/open source-ish world was that odd sub-versions (.1, .3, etc.) were for adding features and even sub-versions (.2, .4, etc.) were for stabilizing the code, bug fixes, etc.

    am i incorrect or does the postfix project simply not follow this model? just curious.

    1. Re:versioning by gowen · · Score: 4, Informative

      That was basically Linus's idea. Some people have copied it (Gnome and Gimp hackers spring to mind), but its by no means all pervasive.

      --
      Athletic Scholarships to universities make as much sense as academic scholarships to sports teams.
    2. Re:versioning by Ded+Bob · · Score: 1

      i was under the impression that the standard methodology in the unix-ish/open source-ish world was that odd sub-versions (.1, .3, etc.) were for adding features and even sub-versions (.2, .4, etc.) were for stabilizing the code, bug fixes, etc.

      That is just Linux.

    3. Re:versioning by Anonymous Coward · · Score: 3, Funny

      You're forgetting the parent post authors theory on the world, Linux is the same thing as Unix, and Linux is the world, with out it, the earth would stop spinning and we'd all be thrown off into space.

    4. Re:versioning by pizza_milkshake · · Score: 1
      You're forgetting the parent post authors theory on the world, Linux is the same thing as Unix, and Linux is the world, with out it, the earth would stop spinning and we'd all be thrown off into space.

      i do sometimes forget that /. has warped me. i apologize.

    5. Re:versioning by hmallett · · Score: 2, Funny

      Gimp hackers...
      Don't pick on them just because of the version numbers they coose, you insensitive clod...

    6. Re:versioning by ckaminski · · Score: 1

      Yea, some of us do crazy things like release version 2.1-stable, and 2.2-unstable which might eventually become 2.2-stable, or might evolve into 3.0-stable depending on feature set. :-)

      Developers are a crazy bunch.

  6. Already Upgraded...works great. by haplo21112 · · Score: 4, Informative

    I upgraded first thing this morning when I saw the listing on freshmeat. So far its a drop in replacement.

    Download
    tar -zxvf
    cd postfix-2.1.0
    make
    make upgrade
    postfix stop
    postfix start

    No issues what so ever!

    Even working correctly with TMDA whitelisting/blacklisting spam filter, which had been my one real concerns did anything happen that could screw up TMDA. NOPE! Runs fine.

    Have to go ahead and look into setup and using some of the new features now I suppose.

    --
    Power Corrupts,Absolute Power Corrupts Absolutely, leaving one person(group)in charge is absolutely corrupt.
    1. Re:Already Upgraded...works great. by Anonymous Coward · · Score: 0

      What are you, an MCSE who got the root login by accident? Good lord man, I hope you never touch one of my production systems.

    2. Re:Already Upgraded...works great. by _Qiang_ · · Score: 0

      ohh, you really shouldn't have done it on the production box and kept your fingers cross.

      oh, wait. do most of administrators do it this way? I think so. :-*

    3. Re:Already Upgraded...works great. by Stinco+Giovanni · · Score: 1

      i agree. postfix is terribly easy to compile and configure. sendmail of qmail are harder to setup. i mean, for a newbie :)

    4. Re:Already Upgraded...works great. by Anonymous Coward · · Score: 0

      It figures.. Look at all the a-holes who just HAVE to post inflammatory remarks and attempting to look superior. Typical inferiority complex that is common in sysadmins.

      NOWHERE does the guy say that he did this on some critical production box. Yet that's always assumed to try and give your false argument some sort of "merit".

      Lame. Very lame.

  7. Re:Next time... by Anonymous Coward · · Score: 5, Funny


    Many of us are happy with Sendmail

    .. as are the kiddies that've r00ted your mail server.

  8. Comparisons by thebra · · Score: 2, Informative

    on sendmail, qmail, exim, and postfix. HERE

    1. Re:Comparisons by jrumney · · Score: 1, Interesting
      From the linked page:
      ...security-focussed features of qmail (binaries in /var,...

      Since when is it a security-focussed feature to install your binaries in a writable partition?

    2. Re:Comparisons by Ryquir · · Score: 5, Informative

      Yeah your comparisons link is seriously outdated (cicra 2001) and only compares mta descriptions. It is neither indepth nor does it touch on the features that existed at the time. With statements like "Add to this sendmail's renowned inefficiency" or "Postfix is quite flexible in its configuration file, but not to the extent of Exim" this document can't be anything more then a abstract draft written up for basic filler in attempt to sell a book idea to publishers.

      This wouldn't have been a good comparison at the time it was written let alone now. Next time try googling a little harder perhaps you would have found this link: http://www.geocities.com/mailsoftware42/ or heck google it for yourself here http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF -8&q=MTA+comparison&btnG=Google+Search

    3. Re:Comparisons by Anonymous Coward · · Score: 0

      Since when is it a security-focussed feature to install your binaries in a writable partition?

      Well, for one thing it makes it a lot easier to apply security patches.

  9. Postfix performs quite well by bigberk · · Score: 4, Interesting

    I recently configured a 200 MHz Pentium host (with slow IDE drives etc.) as an ISP's mail server. It handles over 10,000 emails daily and the load average hangs around at 0.10 -- it's using Postfix with the renattach attachment filter as a content filter (catches all those windows viruses). I was pretty impressed that Postfix performed so well on such an ancient machine :)

    1. Re:Postfix performs quite well by Anonymous Coward · · Score: 0
      I recently configured a 200 MHz Pentium host (with slow IDE drives etc.) as an ISP's mail server.


      That's just sad. I definitely agree with using postfix, but man, if you're really working on this for an ISP they need to pony up three grand for a low end Dell server. Do they even have a backup device hooked up?
    2. Re:Postfix performs quite well by wscott · · Score: 0
      An ancient machine?

      The only 200 MHz Pentium was the Pentium Pro. That is a server class part. That is the processor that allowed Walnut Creek CDROM to set all those records on an FTP server.

      10,000 emails a day is nothing.

      I guess I am reminiscing about the good o days...

    3. Re:Postfix performs quite well by Fweeky · · Score: 1

      Hm? My first PC was a P200 MMX; I'm pretty sure that's not a Pro :)

    4. Re:Postfix performs quite well by wscott · · Score: 1

      You are right. I am an idiot. It my mind Intel processors start with the 'Pro. I memory is very hazy before that.

    5. Re:Postfix performs quite well by Anonymous Coward · · Score: 0

      10000 emails/day? ISP? Come on. Say 10000 emails/minute and we're talking about decent performance.

  10. Screw sendmail by Anonymous Coward · · Score: 0

    And qmail

    Postfix will dominate the world.
    This mail software actually has developers. It's faster than qmail, it has much more sophisticated UCE controls.

    There are also few, if any, patches to apply to get just about any custom system working.

    The UCE controls alone help it kick the crap out of qmail. It doesn't have to accept 70% of emails up front, thus it has less to process.

    The advantage is, even most morons can write mail software. The disadvantage is, most don't follow RFCs, especially as well as postfix.

    The database support is second to none, it's mailling list is more active than mysql's. It's implentation rate is growing exponentially.

    That is all.

  11. Re:A big shout out to teh postfix guys by Anonymous Coward · · Score: 0

    The only stupid security issue with qmail is people like you spreading false rumors. So if postfix isn't missing any important features why are they planning 2.2?

  12. improved documentation.. by Anonymous Coward · · Score: 1, Funny
    ...complete documentation rewrite...

    http://www.postfix.org/documentation.html: The requested URL /documentation.html was not found on this server.

    Ah, so this is what they mean :)

    1. Re:improved documentation.. by Anonymous Coward · · Score: 1, Informative

      or you go to the actual link
      http://www.postfix.org/docs.html
      and it magically works.

  13. because it's an ugly, lumbering dinosaur by SuperBanana · · Score: 5, Interesting

    I've been running sendmail 4ever - sure it's complicated as hell - and a bit of a resource hog at times..but it freaking works and is rock solid over more years of production use than any other MTA ever will be in our lifetimes.

    On a Axil 320(110mhz, I think? I forget which sparc chip) running Solaris w/320MB of ram and one single SCSI drive, on a Mailman list with about 2,000 subscribers and 100 posts a day, we went from delivery times of an hour+(and load averages well over 4) to under 5 minutes(and load averages between .5 and 2).

    Proponents of Sendmail will say "oh, it just needs to be tuned properly".

    Nope, sorry. Proper software doesn't need tuning to do its job. Ever notice that the only proponents of the "it just needs someone who knows how to tune it" model are...well...the limited number of people who know how to tune it, and are fast finding themselves out of jobs?

    1. Re:because it's an ugly, lumbering dinosaur by darthcamaro · · Score: 2, Interesting

      Under 5 minutes? that's sweet - you did this with Postfix? and how did you manage the MTA change in all your apps or did you only have to do in GNU/Mailman?

    2. Re:because it's an ugly, lumbering dinosaur by ffsnjb · · Score: 1

      I would seriously hope that GNU/Mailman could care less about the MTA in use. I use postfix, but enver had a need for Mailman, so I have no idea.

      --
      "Why do you consent to live in ignorance and fear?" - Bad Religion
    3. Re:because it's an ugly, lumbering dinosaur by beegle · · Score: 4, Informative

      Postfix has a sendmail-compatable setup where it creates a binary named "sendmail" that accepts common sendmail flags. In most setups, a switch-over is totally transparent.

      The hardest part is deciding which of your Sendmail optimizations are still necessary on Postfix.

      Sendmail is mostly around because of inertia. It can also do a few sick things (like bridging SNMP and non-SNMP mail systems) that are not necessary for most sane people.

      --
      --
    4. Re:because it's an ugly, lumbering dinosaur by beegle · · Score: 4, Funny

      Sigh. s/SNMP/SMTP/g

      If an SNMP-based mail system exists, I don't want to know about it. :-)

      --
      --
    5. Re:because it's an ugly, lumbering dinosaur by Anonymous Coward · · Score: 0

      postfix is a drop-in replacement for sendmail, butt-tard. No managing changes required.

    6. Re:because it's an ugly, lumbering dinosaur by Just+Some+Guy · · Score: 5, Insightful
      Proper software doesn't need tuning to do its job.

      You may or may not be correct in this particular case, but as a general statement, that's just stupid.

      Do you really mean that the exact same settings for a little desktop (high priority to input-related tasks, swap only when needed) would work well for a high-load server (high priority to compute-related tasks, swap agressively to make RAM quickly available)? There are a lot of settings on a modern system that just can't be inferred by the system itself. Stating the opposite like it's an obvious fact is ignorant, misleading, or both.

      A real-world example: a Usenet spool and an MP3 repository may be the same size, but benefit hugely from tweaked bytes-per-inode or journal settings. In some cases, once the system is running, it's too late to easily change your mind (like bytes-per-inode). In other cases, you can switch at will, but not without unmounting the filesystem (ext3 journaling options). You, as the administrator, make those decisions. Either way, even if the computer were capable of recognizing that you'd made a bad decision, it's not in a position to correct them.

      A real-world example: I tuned Sendmail to use delayed sending so that when a client blasted 20,000 copies of a newsletter (yes, opt-in), then it would wait for several minutes so that it could efficiently aggregate recipients by domain. In there situation, telling Sendmail to leave email in the queue for 10 minutes meant a 50% savings in bandwidth. How on earth would you expect a self-tuned MTA to ever make that discovery on its own?

      Computers do some things well. Predicting the future usage patterns of their owners without mounds of previous input is not one of them. That's where manual tuning comes in, and why real system administrators still paid decently.

      --
      Dewey, what part of this looks like authorities should be involved?
    7. Re:because it's an ugly, lumbering dinosaur by Just+Some+Guy · · Score: 1
      Sweet! So I can drop-in Postfix without making any changes at all to my virtual hosting configuration, Cyrus IMAP setup (delivers mail internally), or spam/virus filters? Man, it's come a long way since three months ago when it couldn't do any of that automatically. Why, I think I'll skip my coffee break to swap out my mail transfer system!

      Yeah, I'm being sarcastic. Do you really believe what you wrote, or have I been trolled?

      --
      Dewey, what part of this looks like authorities should be involved?
    8. Re:because it's an ugly, lumbering dinosaur by Gudlyf · · Score: 1
      "Proper software doesn't need tuning to do its job."

      For someone using Solaris, that's an odd statement to make. I can't tell you how much F'ing tuning I've had to do on Solaris to get it working properly on our dev systems. I finally got things to where they needed to be, but I've seen more than my share of the 'ndd' command.

      Not that I think he's right about Sendmail. I've moved to Postfix and don't plan on looking back.

      --
      Trolls lurk everywhere. Mod them down.
    9. Re:because it's an ugly, lumbering dinosaur by Anonymous Coward · · Score: 0
      ...(like bridging SNMP and non-SNMP mail systems)...

      Worked too much for a telco? :-)

    10. Re:because it's an ugly, lumbering dinosaur by rolla · · Score: 1

      So you think proper software does need to be tuned to work right so everything in the world is the same? and all mail servers should be treated the same? That is very flawed logic I must say. You just ruined the whole model of linux and unix in one blast. The main reason must be use linux/unix is because they can tune it to the needs they have not what someones else thought was a good idea like having a windows webserver that requires a GUI just to boot. Think before you speak but since I see that you are a Bush hater already proves my point that you do not. Have a nice day.

      --
      "That wasn't an attack. It was preemptive retaliation!"
    11. Re:because it's an ugly, lumbering dinosaur by sporty · · Score: 1
      NO no no! This is bloody wrong. Sendmail is quite powerful in that in the rules, you can manipulate addresses in scary ways. Much more powerful than qmail or postfix is. It does a lot of evaluation on the fly because it is built for that flexibility.


      Sounds like you just used the wrong tool for the wrong job.

      --

      -
      ping -f 255.255.255.255 # if only

    12. Re:because it's an ugly, lumbering dinosaur by Anonymous Coward · · Score: 0

      it should need to be tuned to have adequate performance.

      thats what the parent is saying.

      yes things should be tunable to gain more performance for specific tasks. but it should be absolute crap by not tuning it either.

      postfix provides good performance for the mass of options it has. it can always be tuned for the areas of importance, but thats above and beyond it already being GOOD.

    13. Re:because it's an ugly, lumbering dinosaur by mattdm · · Score: 2, Informative

      and how did you manage the MTA change in all your apps or did you only have to do in GNU/Mailman?

      On fedora: run 'system-switch-mail', pick postfix, hit okay, you're done.

    14. Re:because it's an ugly, lumbering dinosaur by iainf · · Score: 2, Informative

      how did you manage the MTA change in all your apps

      Postfix presents itself as sendmail; it just drops in as a direct replacement. From my Mandrake box:

      % file `which sendmail` /usr/sbin/sendmail: symbolic link to `/etc/alternatives/mta'
      % file /etc/alternatives/mta /etc/alternatives/mta: symbolic link to `/usr/sbin/sendmail.postfix'

    15. Re:because it's an ugly, lumbering dinosaur by perlchild · · Score: 1

      I believe he meant the delivery time, not the transition. Although postfix is meant to be a drop-in replacement for sendmail, and many facilities are provided to make the transition as smooth, easy and painless as possible.

      On redhat, from sendmail to postfix, the transition DOES take five minutes... Provided you don't have thousands of special cases...

    16. Re:because it's an ugly, lumbering dinosaur by Martin+Blank · · Score: 2, Funny

      I sense a new project coming on SourceForge... :)

      --
      You can never go home again... but I guess you can shop there.
    17. Re:because it's an ugly, lumbering dinosaur by Anonymous Coward · · Score: 0

      Errr obviously you have only surface knowledge of what on-the-fly manipulations are possible in other MTAs... Not that sendmail is especially limited in this regard, but sendmail's hardly the only one with a turing-complete rewriting set of instructions. Exim will actually let you put a whole perl interpreter in there, actually. Postfix is only marginally less capable.

    18. Re:because it's an ugly, lumbering dinosaur by slittle · · Score: 1
      a little desktop (high priority to input-related tasks, swap only when needed) would work well for a high-load server (high priority to compute-related tasks, swap agressively to make RAM quickly available)?
      Desktops do that too. Users are prone to starting large apps at random, so it helps to have plenty of spare RAM available by quietly swapping out/syncing caches in the background.
      --
      Opportunity knocks. Karma hunts you down.
    19. Re:because it's an ugly, lumbering dinosaur by Just+Some+Guy · · Score: 1
      Desktops do that too.

      ...as evidenced by the fact that whenever I first touch my keyboard or mouse in the morning, every app runs like frozen molasses until the drive quits grinding. I just which Linux wouldn't decide to page out every possible byte when left alone for a while. :)

      Still, I agree that this is generally preferable behavior for desktops, too, although perhaps not to the same degree.

      --
      Dewey, what part of this looks like authorities should be involved?
    20. Re:because it's an ugly, lumbering dinosaur by ckaminski · · Score: 2, Informative

      He meant for clients, not server config. The typical:

      system("/usr/bin/sendmail -m user@host.tld");

      Is unchanged when migrating to postfix. The backend, however, has some extremely significant differences.

      You weren't trolled, you just didn't understand his argument correctly.

    21. Re:because it's an ugly, lumbering dinosaur by Anonymous Coward · · Score: 0

      Actually, I was trolling, but thanks for watching my back anyway. :)

  14. to update or not to update? by Chuck+Bucket · · Score: 2, Interesting

    that's the question.

    I've been running Postfix for 8 months now, and I much, much prefer it to my life of running Sendmail for the previous 2 years. Anyway, I've been running Postfix, it has worked perfectly for me, and my 8 other mail users, and I have kept up to date on all/any security patches. Is there any compelling reason for me to upgrade? If the newer one is faster, more effiecent, that's great, but for a small server like mine I'm not sure if I'm even going to notice.

    Anyone with helpful advice is appreciated. TIA.

    VSCB

    1. Re:to update or not to update? by arcanumas · · Score: 5, Funny
      dude, with 8 users you could use trained pigeons and not see a difference.

      --
      Slashdot Sig. version 0.1alpha. Use at your own risk.
    2. Re:to update or not to update? by Chuck+Bucket · · Score: 1

      Thanks, very helpful!

      CVB

    3. Re:to update or not to update? by Eric_Cartman_South_P · · Score: 1
      :) lol. No shit. I have a friend who things he needs a P4 3.2 ghz machine to handle web serving for a dozen low-end sites. The load could probrably run off of a 386-DX 25mhz for christs sake. Anyway, funny post.

    4. Re:to update or not to update? by WindBourne · · Score: 1

      I would suggest staying with what you have for a time. The new stuff enables a different set of plugins for dealing with e-mail during the sending process. If you have a need and/or wish to test some of this, then it would be worthwhile, but otherwise....

      --
      I prefer the "u" in honour as it seems to be missing these days.
    5. Re:to update or not to update? by feloneous+cat · · Score: 1

      We DID use trained pigeons...

      Then we found out how poorly payed our IT guy was.

      Apparently, they taste just like chicken. So do the pigeons.

      --
      IANAL, but I've seen actors play them on TV
    6. Re:to update or not to update? by Anonymous Coward · · Score: 0

      This place is full of armpits and their snide, non-helpful responses.

  15. Converting from sendmail? by marko_ramius · · Score: 3, Interesting

    > There's never been a better time to migrate
    > from Sendmail (just _had_ to get that in
    > there ;).

    So is there any documentation describing a good way to convert from sendmail? Like, how the directives in sendmail map to directives in postfix?

    mr

    1. Re:Converting from sendmail? by Anonymous Coward · · Score: 0

      Postfix was made as a drop in replacement for sendmail.

      Why don't you grow some balls, and try it.

    2. Re:Converting from sendmail? by bearl · · Score: 5, Informative

      In the source directory there's a text file named INSTALL that has detailed instructions for the three installation options, including "Replace sendmail altogether."

      I won't quote them here in case some of the steps have changed, but it's a very nice step by step list of what to do, what to type, and when to type it.

    3. Re:Converting from sendmail? by Zapman · · Score: 1

      To follow up on the other child post, the INSTALL file is pretty cool. Just read through it a couple of times to make sure you know where you're going before you start (MTA's being moderatly important)

      As for the 'sendmail directives' bit, there's not a good doc for that because it's mostly not needed. The main.cf file comes with about 10 lines of comments per 'command'. You need to uncomment about 3 of them to get a working MTA. If you're doing something funky with sendmail (UUCP gateway type stuff) then it will take a bit more doing, but postfix should work.

      To be fair, there are some real corner cases where sendmail works and nothing else will (like playing the Towers of Hanoi on port 25).

      --
      Zapman
  16. But.. by Anonymous Coward · · Score: 0

    I spent all of this time getting postfix, procmail, spamassassin and clamav playing nicely together. Do I really *want* to upgrade so I can filter mail before its accepted?

    Yes. This oughta be fun!

  17. Re:A big shout out to teh postfix guys by Anonymous Coward · · Score: 1, Informative
  18. Re:A big shout out to teh postfix guys by cookem · · Score: 1

    postfix just plan gets the job done....it is by far the best MTA out there for linux

  19. missing step by SuperBanana · · Score: 4, Insightful
    [long list of software install steps snipped]

    Nowhere did I see:

    "-read the changelog notes to see if any of the numerous changes classified as "incompatible" affected me or my users".

    1. Re:missing step by Anonymous Coward · · Score: 0

      Bah. They modded you "funny" for that.

    2. Re:missing step by Pig+Hogger · · Score: 1

      And no backup of the existing setup either...

  20. Linux Kernel by Ian_Bailey · · Score: 1

    That's the model used by the developers of the Linux kernel, but it is by no means a standard, even in the open source world.

    1. Re:Linux Kernel by stevenbdjr · · Score: 1

      I think some of the guys at Microsoft may have used this at some point, also. Odd numbered NT service packs were a nightmare.

      In particular, NT4 SP5 was about as stable as Windows ME on a Cyrix chip...

    2. Re:Linux Kernel by hoggoth · · Score: 1

      I think the odd/even versioning also applies to Star Trek movies (suck/good/suck/good...) and Beethovan symphonies (suck/good/suck/good...).

      --
      - For the complete works of Shakespeare: cat /dev/random (may take some time)
    3. Re:Linux Kernel by gowen · · Score: 2, Funny

      Its the other way round with /. UIDs. Odd numbers are gurus and geniuses, even numbers are dweebs and wannabes. Its a pretty clever algorithm that gives them out.

      --
      Athletic Scholarships to universities make as much sense as academic scholarships to sports teams.
    4. Re:Linux Kernel by ceesco · · Score: 1

      Are you actually suggesting that Ludwig Van's 9th SUCKS? It's one of the most perfect pieces of music ever written, and he did in WHEN HE WAS DEAF!

      --
      Ceci n'est pas un sig
    5. Re:Linux Kernel by Anonymous Coward · · Score: 0
      And most people would put the 5th up there with the greats too.

      The mind boggles.

    6. Re:Linux Kernel by hoggoth · · Score: 1

      No, I am suggesting that the ODD symphonies are his great ones and the EVEN symphonies are uninspired.
      My GOOD/SUCKS/GOOD/SUCKS were out of synch.

      So both you and the AC posted below actually *agree* with me.

      --
      - For the complete works of Shakespeare: cat /dev/random (may take some time)
    7. Re:Linux Kernel by ckaminski · · Score: 1

      That makes me a wannabe, I guess... So which version of Linux do I use, 9.0, or 10.0? :-P

      -Chris

  21. damnit! by Anonymous Coward · · Score: 0

    Ive been stuck at qmail 1.03 for years now?! when is that lazy djb bastard gonna get off his ass and release a newer version?!?!? Im sure there are just tons of bugs in it waiting to be fixed.. ;)

    -dirtbag

    1. Re:damnit! by Anonymous Coward · · Score: 0, Offtopic

      DJB is a fuckin moron, that thinks enviroment variables in his dns servers are required to run.
      His so called secure programming is his ability to deny security issues.

      If you use his software, you're not helping the GNU cause. You're mearly contributing to an author who has a distorted reality, and inability to admit fault.

    2. Re:damnit! by Anonymous Coward · · Score: 0

      Don't forget you'll need a mega-terabyte /var partition 'cuz that's where DJB likes his crap to live.

  22. Postfix Heaven by Chromodromic · · Score: 5, Informative
    I just finished installing and configuring Postfix with TLS, Cyrus SASL, Maildir storage (which Postfix simply "does" by appending a "/" at the end of a mailbox path), and virtual users alongside Courier-IMAP, and, man, was it easy. I had the help of O'Reilly's Postfix: The Definitive Guide and between that, the provided documentation and the wealth of resources available on the Web, I was able to get everything up and running in record time.

    I know this sounds like a commercial, but it's hard not to sound that way when everything just kind've worked the first time. I now have authenticated, encrypted SMTP and POP and my users are, literally, thanking me. My experience has been that using Postfix was an easy way for me to look good.

    Here's a Postfix SASL HOWTO which came in handy, but there are a lot of resources on the Web, especially at the Postfix site.

    --
    Chr0m0Dr0m!C
    1. Re:Postfix Heaven by jefe7777 · · Score: 1

      As an MCSE from NT4 days, having switched to linux a few years ago, I found that one of my greatest needs was a setup that approximated Exchange. Postfix, Cyrus-imapd, Cyrus-sasl, Horde, Squirrelmail and various addons, has proven to be an awesome setup.

      I have a business partner who is a php wiz, and has filled in the shared calendars and shared contacts features(also available in horde).

      Server has been fairly bullet-proof. The only couple of problems were caused by me or the other admin.

      Postfix as the base for all of it, has worked flawlessly. Sure there's a learning curve, but after the hardwork up front, it's so simple to manage.

    2. Re:Postfix Heaven by questforme · · Score: 1

      Had almost this same exact experience with a client of mine(although they were using Windows 2000 not NT4). At the time Me and a friend of mine replaced their Win 2000 Server/Exchange Server setup with a Linux box and the email server we chose to use is Postfix, it's coming up on the 1 year install anniversary with no problems. Mind you I've never used/setup Sendmail but after all the horror stories I've heard I don't think I want to.

    3. Re:Postfix Heaven by Anonymous Coward · · Score: 0

      Here's another SASL-TLS howto if you need to get it done chrooted with the daemon.. the Postfix community rocks.

  23. Re:reading a lot... by airdrummer · · Score: 0

    is this an instance of the famous tv-induced a.d.d.?

    or is this the result of our school systems?

    or did the o.p. just think it would be helpful to reach more people if that quote were the subject?;-)

  24. this SMTP server vs Qmail and Sendmail by astellar · · Score: 3, Interesting

    I use QMail and Sendmail on several hosting servers. Which advantages will my customers get with Postfix ?

  25. insight needed by U.I.D+754625 · · Score: 2, Interesting

    Is it worthwhile to migrate to postfix from qmail? Qmail has a weird license scheme preventing binary distribution that sort of urked me, not to mention hit-or-miss setup documentation, but it's been running great for years now. I've wanted to add some virtual domains and spam filtering and it might just be easier to swap the whole MTA.

    --


    //Blessed are they that run around in circles, for they shall be known as wheels.
    1. Re:insight needed by Xenophon+Fenderson, · · Score: 3, Informative

      I don't see any compelling reasons to migrate if everything is working fine in Qmail.

      If you want a cookbook on how to set up Postfix and SpamAssassin and friends, there are several really good resources: Jeffrey Posluns, Jim Seymour, Meng Wong (old but still useful). Posluns' guide is probably where you should start first.

      --
      I'm proud of my Northern Tibetian Heritage
    2. Re:insight needed by Anonymous Coward · · Score: 0
      Yes. With Postfix I don't have to apply patches to get SMTP AUTH support (that may or may not work with my distribution's source package). Or any of the other features that qmail doesn't provide natively.

      I migrated from qmail to postfix almost two years ago and haven't looked back.

    3. Re:insight needed by Anonymous Coward · · Score: 0

      Try looking at this site for adding virtual domains and spam filtering: www.qmailrocks.org. It's what I used for getting my RH 9 mail server working (though I did replace the Courier-IMAP server with the Binc-IMAP server so I could use radius authentication w/o creating any local user accounts). It includes spamassassin, clam anti-virus, and other usefull goodies. The instruction guide is good for several linux distros and FreeBSD. (disclaimer: I've only used the RH instructions and they worked ok.)
      jrbless

    4. Re:insight needed by slittle · · Score: 1

      Are your users virtual or real (ie. have unix accounts)?

      I do spam filtering in my .qmail files, rather than system wide (means patching qmail... bugger that).

      --
      Opportunity knocks. Karma hunts you down.
    5. Re:insight needed by Anonymous Coward · · Score: 0

      >Qmail has a weird license scheme preventing binary distribution

      You're a software distributor?

      >I've wanted to add some virtual domains and spam filtering

      Oh, so you're just a small time admin? I thought you're a Linux distribution or something.

      >and it might just be easier to swap the whole MTA.

      I hope you do that; looking at your comments it's sooo obvious you don't deserve the right to use qmail under any circumstances.

    6. Re:insight needed by ahodgson · · Score: 2, Informative

      Postfix + Amavis is a wicked combo for content filtering. For virtual domain admin, check out Jamm. If you want great POP/IMAP mailbox support for your virtual domains, add Courier IMAP to your setup.

      Some of the features you might like in Postfix over Qmail include SMTP AUTH, TLS/SSL support, nice content-filtering support, great spam blocking features (HELO checking, RHSbl support, DNSbl support, sender address checking, many others), and extensive database and LDAP support. The virtual domain support is full-featured, although very different to Qmail's in terms of implementation, and with something like Jamm your users can have full control of their domains and/or mailboxes via a web interface.

      And yes, I know there are patches for Qmail to do most or all of the above. It's just easier to do with Postfix IMO.

    7. Re:insight needed by misleb · · Score: 1

      I use qmail on my server that does virtual domain hosting and Postfix for everything else. I just couldn't find anything for Postfix that compared to qmail virtualdomains and vmailmgr. To do virtual domains with Postfix I needed a MySQL backend (or worse, manage plain text files). Also, I couldn't find any simple tools for managing it. With Qmail, virtual domains are easy. Take a real unix user, assign a domain to that user in qmail/virtualdomains, run "vsetup" as that user, and you have a virtual domain ready to go. All domain info is maintained in that unix user's home dir. With oMail Admin (PHP web GUI for vmailmgr) that unix user can manage their own virtual domain (users, aliases, passwords, etc). If I didn't need to host virtual domains, I would ditch qmail in a heartbeat.

      -matthew

      --
      "THERE IS NO JUSTICE, THERE IS ONLY ME." -Death
    8. Re:insight needed by U.I.D+754625 · · Score: 1

      My users are real right now, but I'd like to go all virtual. Believe it or not, I don't have any spam filtering in place on the server, but the tide is slowly building up. Thunderbird's bayesian filtering has been working good enough, but I know its time will be up soon.

      I would also like to thank everyone that gave me advice in this thread!

      --


      //Blessed are they that run around in circles, for they shall be known as wheels.
    9. Re:insight needed by U.I.D+754625 · · Score: 1

      Whether or not I deserve to use qmail is irrelevant. Their license effectively stops the distribution of qmail in my favorite distros, and will break package managemnet systems. It also eliminates linux vendor support for qmail, since they can't verify and test your setup in house before it is shipped to you. Also, I've had trouble patching and compiling qmail myself (I'm not a developer), whereas binaries would have fixed all that.

      --


      //Blessed are they that run around in circles, for they shall be known as wheels.
  26. SASL, spam, viruses by gtoomey · · Score: 2, Insightful
    SASL authentication was a shocker to get working with Postfix. Some people had not problems, but Murphy'y Law meant I never got it working properly. Lets hope its fixed.

    And it looks like content filtering (spam & virus filters) has been improved with version 2.1

    1. Re:SASL, spam, viruses by Kalzus · · Score: 1

      I'm afraid SASL authentication is pretty much still just as goofy as previously. Once one understands just where SASL ended up on a given system, it's straightforward.

      As I hinted, the problem revolves around just where SASL is installed. Unless you installed from tarballs, your vendor's SASL probably has SASL-related files in different places. Tracking them down (as well as knowing what lives in which directory) is a pain.

      --
      "The Devil does not know a lot because He's the Devil, He knows a lot because he's old." -- unknown
  27. Developers?? by shift · · Score: 3, Insightful

    Why is this in the developers section? Wouldn't it be more appropriately placed in a topic for system administrators?

  28. Real-time filtering by DustMagnet · · Score: 5, Informative
    Cool, what's that about? I found this written by Wietse Venema the author/maintianer for postfix:
    When used with a real-time SPAM filter, this approach allows Postfix to reject mail before the SMTP mail transfer completes, so that Postfix does not have to return rejected mail to the sender. Mail that is not accepted remains the responsibility of the client.

    In all other respects this content filtering approach is inferior to the existing content filter (see FILTER_README) which processes mail AFTER it is queued.

    The problem with real-time content filtering is that the remote SMTP client expects an SMTP reply within a deadline. As the system load increases, fewer and fewer CPU cycles remain available to answer within the deadline, and eventually you either have to stop accepting mail or you have to accept unfiltered mail.

    Too bad it doesn't have a counter attack mode, yet.
    --
    'SBEMAIL!' is better than a goat!!
    1. Re:Real-time filtering by thogard · · Score: 1

      I've found if you process the filters as you deal with the message, you can do it quickly but you have to be selective about what you filter aginst and keep it simple. The best way to filter aginst the virus of the week is as the data comes in since you can't bounce it anyway. In the past I even built a patch that simply looks for TVqQAAMAAAAEAAA in a line and blows away the connection. Its good for thousands of messages a minute too.

    2. Re:Real-time filtering by ZeekWatson · · Score: 1
      When used with a real-time SPAM filter, this approach allows Postfix to reject mail before the SMTP mail transfer completes, so that Postfix does not have to return rejected mail to the sender. Mail that is not accepted remains the responsibility of the client.
      Sounds like Wietse Venema is a fool -- all this does is cause the remote SMTP server (when there is one) to bounce the spam to some innocent person. This is what is known as a "Joe job". Poor Joe gets 10000000 bounces in his mailbox. A real mess to clean up, it happened to me. :(

      Spams and mass mailing viruses should be discarded. Rejecting email is for people who don't understand SMTP, namely because it doesn't do what you think it does (go back to the sender).
  29. Re:Qmail by sgifford · · Score: 1
    While that's a bug, it's not a security issue. It can't cause execution of arbitrary code. In fact, all it does is causes the SMTP session sending the message to shut down. It may be possible to take advantage of this to delay mail slightly, but it's really not something to worry about.

    Additionally, a group of qmail hackers have put together netqmail-1.05, a patchset which addresses this and other issues.

  30. Sendmail upgrade? by Anonymous Coward · · Score: 5, Informative
    There's never been a better time to migrate from Sendmail
    It seems Exim 4 was released Feb 2002. It includes IPV6, TLS, and SMTPAUTH via PAM, LDAP, MYSQL, PostgreSQL and more.. There is also client rate limiting, and realtime spam/virus filtering no need to accept and bounce junk.
    If you're using Postfix and have been waiting for any of these "new features", go ahead and try Exim.
    Exim home page
    1. Re:Sendmail upgrade? by Zapman · · Score: 3, Informative

      Every single one of these has been in postfix for at least 2-3 years. They have been UPDATED in postfix 2.1, not new features.

      --
      Zapman
    2. Re:Sendmail upgrade? by Anthony+Boyd · · Score: 2, Insightful
      It seems Exim 4 was released Feb 2002. It includes IPV6, TLS, and SMTPAUTH via PAM, LDAP, MYSQL, PostgreSQL and more.

      I wrote a Perl-based whitelist program. My biggest problem in the Exim vs. Postfix wars is that Exim (at the time I wrote the whitelist app) doesn't offer all the status codes that Postfix does. So my ability to bounce email with informative messages is limited in Exim. Postfix, no problem. But since you seem to know all about Exim's features, what can you tell me about the last 18 months of development? Do it offer more in the way of response codes?

    3. Re:Sendmail upgrade? by wolverine1999 · · Score: 1

      I wouldn't go to Exim from Postfix.

      Postfix is a great robust program and I wouldn't go to anything else from it.

  31. SMTP time scanning, finally. by stevenbdjr · · Score: 5, Informative
    real-time content filtering _before_ mail is accepted

    About time. I've been doing this with Exim and Exiscan for almost 2 years now. It's nice to see other MTA's begin to incorporate this functionality. Now, if everyone upgrades and takes advantage of this wonderful feature, maybe the number of false NDR's I receive due to forged senders will start to go down...

    1. Re:SMTP time scanning, finally. by rlangis · · Score: 1

      I've been rejecting spam via header and body checks with postfix for about that long myself... Thanks Security Sage!

      --
      GIR: I'm going to sing the Doom song now. Doom doom doom doom doom doom de-doom doom doom doom doom doom doom...
  32. Sure, Qmail is good thing. by astellar · · Score: 1

    May be a bit complicated, but works excellent.

  33. Great software, bad hardware by Anonymous Coward · · Score: 1, Insightful

    I hope you designed for failure. When that old CPU fan craps out, a fast Postfix will do no good. Free software should not mean using old, unreliable hardware for critical tasks.

    1. Re:Great software, bad hardware by bigberk · · Score: 2, Informative
      When that old CPU fan craps out, a fast Postfix will do no good.
      You're absolutely right. We're in the process of moving to some proper FreeBSD colocated servers (but then, what will I do with all the spare computing power)?
    2. Re:Great software, bad hardware by wagemonkey · · Score: 2, Interesting

      I'm sure someone can come up with a joke about beowulf clusters....
      Shift some services to it, network monitoring, security scans. Stuff you can easily run somewhere else if it dies but it's handy not to. Or donate it to a charity that wants it. MP3 server, CD jukebox server. Write something spiffy to act as a voicemail system...

    3. Re:Great software, bad hardware by wagemonkey · · Score: 2, Interesting

      Did 200MHz Pentiums have CPU fans, or just heatsinks?

    4. Re:Great software, bad hardware by 74nova · · Score: 1

      well, i had a fan on mine, but only because it was actually a 180 running at 233. for the most part, i think fans started really happening on cpus around the 166 or so. i could be wrong, and im sure it varied by manufacturer. 75's didnt have them and 180's usually did.

      --
      use your turn signal! you people act like it's divulging information to the enemy
    5. Re:Great software, bad hardware by Fweeky · · Score: 1

      They had ickle 40mm fans, typically. They'd usually run quite happily with just the heatsink though, given they only disapated, what, 15w or so?

    6. Re:Great software, bad hardware by Ctrl-Z · · Score: 2, Interesting

      My 486 had a CPU fan. Then again, it didn't really need it since it ran for about 3 years after the fan died on it. On the other hand, the power supply only ran without a fan for about 6 months before it died. Ah, the glory days of computing.

      --
      www.timcoleman.com is a total waste of your time. Never go there.
    7. Re:Great software, bad hardware by Anonymous Coward · · Score: 0

      I have a machine with 2 P-II 450Mhz chips -- Heatsinks only, no HSF. Of course, it's a custom Compaq case with big ass fans everywhere else. I don't think HSF were "required" until around 1 Ghz.

    8. Re:Great software, bad hardware by Anonymous Coward · · Score: 0

      Mine does. Fan died once and I never noticed for about 2 years. Ran just fine. Grandparent post is just another "I know more than you, nya, nya" ass.

    9. Re:Great software, bad hardware by Anonymous Coward · · Score: 0

      "Of course, it's a custom Compaq case with big ass fans everywhere"

      So in other words, your 450MHz chips DO need HSFs.

      Thanks.

    10. Re:Great software, bad hardware by satanami69 · · Score: 1

      I'll save everyone that's going to try postfix on FreeBSD 5.2.1 about 2 hours:

      cd /etc
      ln -s /etc/mail/aliases.db aliases.db

      newaliases

      For some reason, aliases.db moved from /etc to /etc/mail

      --
      I really hate Dan Patrick.
  34. The Doc by anarcat · · Score: 5, Informative

    Yeah, that's good. I always had trouble finding my way into the postfix documentation, now it's a lot clearer. I especially like the listing of all main.cf settings (now if there would be a manpage for master.cf too...) and the bottleneck analysis tool.

    I do miss however the "big pictures" yellow + blue graphs that seduced me into trying out postfix long time ago. Now we're stuck with pityful text-only rendering

    Still great, after all those years, postfix is my MTA of choice: ease of use, power and security.

    --
    Semantics is the gravity of abstraction
  35. Re:this SMTP server vs Qmail and Sendmail by Just+Some+Guy · · Score: 4, Informative
    It's Free Software (unlike Qmail) without Sendmail's security record (unlike Sendmail).

    Personally, I still use Sendmail everywhere, but Postfix is designed to be a fast, secure, easy-to-configure MTA. It would be my migration path of choice if I were ever having problems in any of those three areas.

    --
    Dewey, what part of this looks like authorities should be involved?
  36. Re:Qmail by Anonymous Coward · · Score: 0

    Great! Where can I download the RPM?

  37. Re:this SMTP server vs Qmail and Sendmail by afd8856 · · Score: 0, Flamebait

    Just like KDE is not Free Software because it is based on Qt, which has a comercial license? Well, hell, is it me or I didn't have to pay anything for my Qmail server, and it came with source code? What else does it need to qualify for the Free Software title?

    --
    I'll do the stupid thing first and then you shy people follow...
  38. Postfix + TLS/SSL + SMTP-AUTH HOWTO by phoxix · · Score: 4, Informative

    Hi guys,

    Postfix + TLS/SSL + SMTP-AUTH HOWTO

    I wrote this howto a while back ago. It explains what is needed to be done in setting up a secure Postfix SMTP server with TLS/SSL and SMTP-AUTH. It isn't fully done (but the meat is there). I hope someone will find it useful.

    Sunny Dubey

    PS: no I have *not* submitted it to postfix.org, for it is not done, and its doesn't have all that I want in it. (Must add virus/spam scanning to it first)

  39. Bzzzzzzz! by stridebird · · Score: 0, Troll
    MySQL

    It uses MySQL. So doesn't that mean it gets a lathering from the DB cult here at slash? Cue tedious theoretical discussion from hightoned types defending their $$$ investment in tech education...

  40. Grudgingly going back to Sendmail. by IGnatius+T+Foobar · · Score: 4, Interesting

    One of my servers is a big Sparc box (running Linux, not Solaris) that performs backup MX and other relay services for about a hundred domains at a hosting center. It gets constantly pounded on all day long. Originally it ran Sendmail, and it was badly loaded down. Installing Postfix cleared up all the problems. It's just that much better.

    Unfortunately, with all the extra mail traffic now due to MORE spam, MORE viruses, and all the bounces generated by the above, we have to expand again. And we have to go back to Sendmail because of one particular feature: you can have multiple Sendmail instances sharing an NFS-mounted queue. Since the new system is multiple Sparc boxes in a load-balanced cluster, we have to go back to Sendmail because Postfix doesn't support this. :(

    --
    Tired of FB/Google censorship? Visit UNCENSORED!
    1. Re:Grudgingly going back to Sendmail. by Alex · · Score: 1

      sharing an NFS-mounted queue.

      I feel dirty just hearing about it,

      Alex

    2. Re:Grudgingly going back to Sendmail. by DavidTC · · Score: 3, Informative
      Why the hell are you sharing a mail queue? It's not like more than one server can send the message at a time, or receive it. And postfix supports NFS mailboxes just fine.

      And why the hell are you bouncing spam? Delete spam or reject spam, do not bounce spam.

      It sounds like you don't know what you're doing, or have a really stupid setup.

      And, BTW, if you're getting hammered because you're the backup MX, which spammers like to pound, it might make sense to set up a tertiary MX server that doesn't actually exist. Spammers will go after that, instead, and never hit you, as almost all spamming software is written by complete fucking morons. Whereas actual mail that failed to get your primary server will just your backup. (Or, failing to get your backup, they will then fail to get your tertiary and just queue the mail, and start back over when they retry.)

      I, personally, set up a 'backup MX' record to point at one of my IPs that didn't actually run a mail server, and cut my daily spam attempts by 30%.

      --
      If corporations are people, aren't stockholders guilty of slavery?
    3. Re:Grudgingly going back to Sendmail. by gnuman99 · · Score: 3, Insightful

      Uhhhm, why now just use the cluster to filter stuff, and then just map the mail to an internal SMTP server which moves the traffic to user accounts. That way your cluster will not need to use NFS, but just their own disks (which is faster, most of the time), and the internal SMTP server will not get loaded that much since it does nothing that CPU intensive (no filtering).

    4. Re:Grudgingly going back to Sendmail. by Azghoul · · Score: 3, Insightful

      Way to help the guy actually learn something. Real friendly there, buddy.

      Too bad the rest of us aren't experienced mail administrators like you are.

    5. Re:Grudgingly going back to Sendmail. by 110010001000 · · Score: 1

      "I, personally, set up a 'backup MX' record to point at one of my IPs that didn't actually run a mail server, and cut my daily spam attempts by 30%."

      Huh? That makes zero sense. How would this cut down on spam? I know nothing about mail servers but the 'backup MX' record is for the machine that handles the mail if the primary MX can't be contacted.

    6. Re:Grudgingly going back to Sendmail. by ahodgson · · Score: 1

      As others have said, mount your mailboxes NFS or AFS, not the queue. Use Maildir's of course, if you're going to do this.

    7. Re:Grudgingly going back to Sendmail. by Just+Some+Guy · · Score: 2, Informative
      Some brain-dead spam broadcasters pick MXes at random to deliver to, and some deliberately target lower-priority exchanges (the idea being that a mailserver may be less picky about mail it receives from one of its backup MXes than other hosts). If a low-priority MX is listed but doesn't really exist, the spammer may attempt to deliver mail to that MX, and then give up when it fails.

      It's kludgey, broken, and something I wish I'd thought of earlier.

      --
      Dewey, what part of this looks like authorities should be involved?
    8. Re:Grudgingly going back to Sendmail. by IGnatius+T+Foobar · · Score: 2, Informative

      So much flamebait, so little time...

      Why the hell are you sharing a mail queue? It's not like more than one server can send the message at a time, or receive it. And postfix supports NFS mailboxes just fine.

      One server, one message? We're talking hundreds of thousands of messages per day spread out over dozens of individual mail systems. There are no local mailboxes -- this is strictly a relaying system.

      I, personally, set up a 'backup MX' record to point at one of my IPs that didn't actually run a mail server, and cut my daily spam attempts by 30%.

      And you probably dropped the reachability of legitimate mail too. I'm sure that works well in your little playground, but this is a real environment and we have SLA's to honor.

      --
      Tired of FB/Google censorship? Visit UNCENSORED!
    9. Re:Grudgingly going back to Sendmail. by Anonymous Coward · · Score: 0

      actually it's not a bad move if you make it the lowest priority mta

      properly wirtten implemetnations will hit the real mail servers first so it won't be an issue

      bad implementions ie spam tools are likly to be much less selective

    10. Re:Grudgingly going back to Sendmail. by asdfghjklqwertyuiop · · Score: 1


      Why the hell are you sharing a mail queue? It's not like more than one server can send the message at a time, or receive it. And postfix supports NFS mailboxes just fine.

      One server, one message? We're talking hundreds of thousands of messages per day spread out over dozens of individual mail systems. There are no local mailboxes -- this is strictly a relaying system.


      What's the advantage of having one queue shared among all the servers instead of multiple queues?
    11. Re:Grudgingly going back to Sendmail. by DavidTC · · Score: 2, Insightful
      And I suppose you have some explanation of how having an unreachable backup MX lowers your chances of getting email to your primary MX?

      ...

      I thought not. SMTP doesn't work that way. A mail server tries all possible MX servers, in order.

      If my primary is, for god know what reason, unreachable, then it wastes a single second of the mail sender's time to check the backup before queueing the mail. That's the entire net effect. You'll get your delayed mail a second later, in theory, which doesn't actually happen because no one runs around setting retry timers that trigger the exact second anyway.

      As for relay servers...you need hundreds of those why, exactly? You're operating one of those crazy-ass overloaded networks, apparently, where mail bounces through two or even three SMTP servers both going in and out.

      Those networks are brokenly designed. Sorry, but it's true. I understand why you can't fix them at this point, but it doesn't mean they were designed correctly.

      There's absolutely no reason not to have a single incoming point (Or even sets of points, via NFS directories.) for each account, where a message comes in and is stored 'locally', and absolutely no reason not to have one outgoing server for each outgoing message, when then sends the message directly to the recepient. (Those can be the same system, or not.) And maybe backup MXs for collecting mail when the system is down. No one has ever explained to me why a mail system needs to be more complicated than that. Anything more complicated than that is probably just historical nonsense laying around.

      --
      If corporations are people, aren't stockholders guilty of slavery?
    12. Re:Grudgingly going back to Sendmail. by DavidTC · · Score: 2, Informative
      Because someone's a loon who's made an amazingly complicated mail system, that's why.

      He's not only building relay servers that transfer mail between themselves, which there is absolutely no reason to do, (They should accept mail from X and forward to Y, not play hot potato with it. Having more than one server is fine, but they don't have anything to say to each other.) he's making them transfer mail between themselves using the mail queue instead of SMTP.

      Which is rather akin to setting up a shuttle bus system between the airport and a hotel, realizing you need more than one bus to handle the load, and coming up with the 'solution' of running each bus halfway and transferring all the passengers at the midway point. Each bus driver only needs to be able to handle half the route, think of all the time and training he'll save!

      With postfix, of course, he'd have to build a delivery station to offload the passengers to, but with sendmail, he apparently can transfer passengers directly from bus to bus! (Which, despite sendmail's shortcomings, I doubt was intentional.)

      --
      If corporations are people, aren't stockholders guilty of slavery?
    13. Re:Grudgingly going back to Sendmail. by IGnatius+T+Foobar · · Score: 1

      He's not only building relay servers that transfer mail between themselves, which there is absolutely no reason to do, (They should accept mail from X and forward to Y, not play hot potato with it. Having more than one server is fine, but they don't have anything to say to each other.) he's making them transfer mail between themselves using the mail queue instead of SMTP.

      Wrong again. It's a shared mail queue on a relay only configuration. All of the mail systems we provide relay services for are connected using good old SMTP.

      The benefit of the shared queue is simply to add capacity. Any node can accept messages and add them to the queue. Any node can pull messages from the queue and perform delivery on them. And when it comes time to manage the queue (delete all messages from or to a particular address or domain, that sort of thing) it only has to be done on one queue, not on a separate queue for every node in the cluster.

      --
      Tired of FB/Google censorship? Visit UNCENSORED!
    14. Re:Grudgingly going back to Sendmail. by Shdwdrgn · · Score: 1

      I assume you're referring to INCOMING email in a shared queue? I set up DNS to point to all of my postfix servers, so simple round-robin balancing is done. I have mail delivered directly to the user's .maildir folder, which is shared across NFS. I also have /var/spool/postfix shared via NFS. Mail comes into a single queue, each server only processes a portion of the total mail, and it's quickly scanned and delivered to the user's folder.

      As far as outgoing email... use the DNS trick again, so each user trying to send email gets pointed to the next server.

    15. Re:Grudgingly going back to Sendmail. by Anonymous Coward · · Score: 0

      "Current Peeve: The mindset that the Internet is some sort of school for novice sysadmins and that everyone not doing stupid dangerous things should act like patient teachers with the ones who are."
      --Bill Cole, news.admin.net-abuse.email

    16. Re:Grudgingly going back to Sendmail. by kashani · · Score: 1

      Running mutiple instances of any MTA tied to its own local drive will be faster than NFS mounted stangeness. I built a qmail server with 6 drives and a 128MB RAID card, 5 qmail instances with a drive left over for the OS and logging, that can relay around 2-3 million messages a day on standard Intel hardware.

      kashani

      --
      - Why is the ninja... so deadly?
    17. Re:Grudgingly going back to Sendmail. by kashani · · Score: 1

      Your problem isn't that simple. Relaying a significant amount of email in unfortunately I/O bound, not CPU bound. Additionally your average email is roughly 10-20k, which is known for beating down file systems. All you will be doing is concentrating all your I/O in one place and adding CPU's to the cluster. I can't see how this will make relaying faster.

      Honestly you're going to be much better off getting three Intel servers, with a nice raid cards w/128MB cache to buffer all those short reads and writes. Also use ResierFS which is faster for small files and watch your problems go away.

      Also you can adjust the amount of mail Postfix can attempts to send at one time. Search the main.cf file for concurrency settings.

      kashani

      --
      - Why is the ninja... so deadly?
    18. Re:Grudgingly going back to Sendmail. by thogard · · Score: 1

      You say the machine was blady loaded with sendmail but not postfix. How do you know that? Did you use load average? If so, research what load average is saying. Its only a useful indicator for the enviroment where it was 1st intorduced which is machines that do lots of batch processing and many users loged in. Since users shouldn't be using shells on your mail sever, the stat makes no sense. All its saying is how many processes are in the runque that want to run or may run in the near future. It has nothing to do with total pending work on the machine. A program that forks to deal with more work will increase the loadaverage number while a program that keeps everything queued its self and sucks down 100% of the CPU won't.

    19. Re:Grudgingly going back to Sendmail. by Anonymous Coward · · Score: 0

      As a reply to that guy's quote:

      "If you don't want to teach people, then shut the fuck up and quit complaining about it. People like him are a big part of the problem."

    20. Re:Grudgingly going back to Sendmail. by DavidTC · · Score: 2, Informative
      That's exactly what I said. You've built a system where one system will accept a message, and then one system will attempt to deliver it, which provides no benefit at all over having one system deliver it from start to finish, except you've added race conditions and file sharing and waste all around.

      As for talking about deleting things out of the queue, that's just crazy. There are commands to do that, and they run just fine remotely. (Not that running around deleting mail from a delivery queue is a normal action in the first place, and I suspect you came up with that because you know what you're talking about is silly.)

      --
      If corporations are people, aren't stockholders guilty of slavery?
    21. Re:Grudgingly going back to Sendmail. by DavidTC · · Score: 2, Insightful
      That's what I'm saying.

      If you're having an excessively large volume of mail, and want to add more relay servers, the solution is to add more identical servers with round-robin DNS, and possibly a larger pipe.

      Having them pass mail among themselves via a shared NFS server isn't going to help anything at all. The ideal solution would be to have most mail in and out in ten seconds.

      And, if large amounts of undeliverable mail are piling up, a shared queue just hurts things, not helps them. That just means every server will check every message to see if it's time to deliver it, repeatedly. Over the network.

      Now, if he wants to do something sort of like this that actually help, a solution would be what postfix calls a 'fallback relay'...a server where mail that can't get delivered in X time goes. Where you can have some extra sanity checking that will quickly delete mail that can't ever be delivered, but you don't want to run on every message.

      --
      If corporations are people, aren't stockholders guilty of slavery?
    22. Re:Grudgingly going back to Sendmail. by Anonymous Coward · · Score: 0

      Restatement of reply to Bill Cole: "WAAAAAAAAH!"

  41. Re:this SMTP server vs Qmail and Sendmail by DavidTC · · Score: 5, Informative
    qmail isn't free software because it's non-forkable.

    You can freely redistribute the source and binaries compiled from clean source. And you can distribute patches to it.

    However, the point is, the qmail maintainer is the only person who can release new versions of qmail. And hence it's not free software.

    There are two very large dangers with qmail...that it will go off in a random direction no one agrees with, and you'll either have to follow along or go that way, and that the qmail maintainer will just stop releasing new versions. With free software, if enough people use it, they will simply make a fork...but they can't do that with qmail. Technically they could grab a random version and keep building patches off that, but that becomes unmaintainable real fast.

    In other words, qmail is basically 'freeware', not 'free software', although it does come in source form, and you have been granted the ability to modify it and even share the modifications. But not the end result.

    --
    If corporations are people, aren't stockholders guilty of slavery?
  42. Re:MOD PARENT DOWN by stridebird · · Score: 0, Offtopic
    How? You are parentless, top of the tree, primary node.

    Or i got my slash settings wrong.

    Or you want to mod the original article down? Yeah, that might be a useful new feature. Can we do that, slash? What if we think the article is a troll? Can we moderate the original article too?

  43. Re:this SMTP server vs Qmail and Sendmail by rsidd · · Score: 4, Insightful
    Just like KDE is not Free Software because it is based on Qt, which has a comercial license?

    I wonder when people will stop repeating this rubbish. Qt has been GPL'd for years. It is also available under a commercial licence, but that has nothing to do with KDE, it's in case you want to develop a closed-source application with Qt. (And it seems to be an excellent business model.)

    As for qmail, you're not allowed to distribute modified versions, and the rules on distributing binaries are rather stringent and almost impossible for distributors to follow. That makes it not quite "free software" (by FSF's definition) or "open source". (However, you're allowed to distribute patches, and even bundle patches with unmodified source in a tarball; you can download one such tarball, called netqmail, from http://www.qmail.org).

  44. Postfix's new policy server API by RonBurk · · Score: 5, Interesting
    One of the geek-cool things about this release of Postfix is that it finally provides a way to add your own code to the SMTP conversation without having to understand or patch Postfix at all.

    The new policy server interface is a simple sockets-based API for getting a chance to participate in the SMTP conversation as it is happening. The basic idea is:

    • tell your Postfix config file (main.cf) that you've written a "policy server" that listens on a particular Unix socket or TCP address/port. You can have the policy server get "called" at any of the points in the SMTP conversation where Postfix may make a decision about how to dispose of the message (HELO, RCPT, etc.).
    • write your policy server. It listens for connections, and each connection sends you one or more requests. Each request contains a small set of information about the mail message being transmitted (client name/address, HELO text, etc.) Your server responds with one of a broad set of actions that Postfix supports (reject, accept, defer, perform other custom checks, etc.).
    • The protocol for talking to your server is a simple text-based protocol with newlines, much like the form of HTTP. I coded an initial policy server in good ol' C in about an hour.
    In particular, this new API is a great place to implement greylisting. Your server can maintain its database of whitelisted and greylisted from/to/IP triplets all on its own and just respond to Postfix requests. And, once you've coded up your policy server, you don't have to revise it with every Postfix patch that comes down the pike. As long as the API remains backwardly compatible, your policy server code should survive any Postfix upgrades.

    Kudos to the new policy server API!

    1. Re:Postfix's new policy server API by Anonymous Coward · · Score: 0

      Way to innovate, PostFix. This capability has been in Windows since Win2k (the SMTP Protocol/Transport Event sink interface). Even better, the SMTP server built into Win2k is the same one that's used in E2K+, so your event handlers can move over to M Sexchange when you upgrade.

  45. Re:A big shout out to teh postfix guys by DavidTC · · Score: 1

    While I currently use postfix and think it's great, I will point out there's another mail server out there without the issues of sendmail or qmail, named exim, that's pretty good also.

    --
    If corporations are people, aren't stockholders guilty of slavery?
  46. Re:this SMTP server vs Qmail and Sendmail by stilwebm · · Score: 3, Informative

    It is also important to note that Postfix provides Maildir support for local delivery. This means you can have nested folders (containing both messages and more folders) on your IMAP server, where as with Sendmail's mbox format you can only have folders containing messages, and those folders are actually just long text files. Qmail provides the maildir format natively, but Postfix makes it free.

  47. When next you announce.. by Anonymous Coward · · Score: 5, Informative

    The latest version of an application... how about including a link to the release notes / changelog. No point in upgrading if you don't know the changes - RELEASE_NOTES

  48. Re:A big shout out to teh postfix guys by Anonymous Coward · · Score: 0

    Maybe because, unlike Qmail, the world moves on?

  49. Re:MOD PARENT DOWN by DavidTC · · Score: 0, Offtopic

    It's not gratuitous.

    --
    If corporations are people, aren't stockholders guilty of slavery?
  50. Re:Qmail by sgifford · · Score: 1

    I know that you already know this, but you can't; DJB's annoying choice of license forbids distributing qmail binaries built from modified sources. Instead, you simply download the source and compile it. It takes about 5 minutes on modern hardware.

    If you have a strong preference for RPMs, you can use an existing .spec file to build your own, then use that within your organization.

  51. This is a really good troll. by hummassa · · Score: 1

    [voice tone="priestly"]Free as in speech, not as in beer, my son[/voice]
    Here, consult the book of truth , and download the One True Operating System , and you shall be enlightened.
    Now seriously, besides Qt has a Free Software License (GPL), so it is Free Software, too.

    --
    It's better to be the foot on the boot than the face on the pavement. ~~ tkx Kadin2048
    1. Re:This is a really good troll. by afd8856 · · Score: 1

      I admit, I was trolling... but the received answers are very good. Actually, I'm user of both KDE and Qmail and I know all their insides, but it's good to see what other people are thinking about them.

      --
      I'll do the stupid thing first and then you shy people follow...
  52. Re:this SMTP server vs Qmail and Sendmail by kweber666 · · Score: 5, Informative

    There are two very large dangers with qmail...that it will go off in a random direction no one agrees with

    There is another theory which states that this has already happened.

    and that the qmail maintainer will just stop releasing new versions

    To quote the qmail web site: The latest published qmail package is qmail-1.03.tar.gz, which was released in June 1998. So again, this may have happened already.

  53. Like sendmail's milter? by dmeranda · · Score: 3, Interesting

    It's great to see this feature added! I've been using sendmail's milter feature (a very similar sockets-based "policy" API) for many years. And I can't live without it now, and there was no way I would even consider looking at any other MTA that didn't have a similar feature. I program my milter's in Python, a bit easier than C. But you should have your choice.

    Of course I'm one of those very happy sendmail administrators (we do exist), and I have a relatively complex setup handling hundreds of thousands of messages per day, with very complex routing, etc. But perhaps Postfix is finally serious about providing an alternative (of course I also need TLS and IPv6 built-in like sendmail's had forever).

    1. Re:Like sendmail's milter? by RonBurk · · Score: 1
      Unlike milter, the policy server interface is only processing SMTP commands -- the policy server does not get fed mail headers or body, for example (OTOH, this restriction makes it less likely you will write a policy server that slows mail processing to a crawl). The policy server can, however, insert mail headers into the target message, as that is one of the actions supported.

      If you really want to wack on the mail headers and/or body, the Postfix 2.1 way is to essentially insert your own SMTP proxy into the stream. Not nearly as easy as writing a policy server, and (like most methods of reprocessing the entire mail message stream external to the MTA itself) likely to significantly reduce your mail server's peak processing ability.

  54. Where's ZMailer? by Anonymous Coward · · Score: 2, Interesting

    What's happened to ZMailer? This thread has lots of mentions of postfix, exim, sendmail, and qmail, but I thought zmailer was supposed to be a big deal in mail server land... Has it been surpassed and forgotten now?

  55. Re:Why does everyone always gotta knock sendmail?? by winkydink · · Score: 1, Flamebait
    Hear! Hear!

    There's sendmail and then there's everything else that compares itself to sendmail.

    Imitation is the sincerest form of flattery.

    --

    "I'd rather be a lightning rod than a seismometer." -Ken Kesey

  56. Nice that MacOS X now uses Postfix by wfolta · · Score: 4, Interesting

    A pleasant surprise in the 10.3 was the adoption of Postfix. It's good to see that they apparently made a good choice and good things are happening on the Postfix front.

    (I had been rooting for exim, which is also a great package, but Postfix seems to be a good alternative. Maybe they should also include exim on XServe's?)

  57. Why all the MTA anti-sendmail holy wars? by dmeranda · · Score: 4, Insightful

    I've been using sendmail for nearly 15 years in some pretty complex environments, and am pretty happy with it. But I have nothing against Postfix either (except it has been lacking features, for me, and sendmail works just grand).

    I can't quite understand the religous flame wars over MTA choice either. I mean, I can kind of understand the whole emacs vs. vi or gnome vs. KDE. But why fight over MTA's? It seems there is an awful lot of hatred for sendmail, and for no good reason whatsoever. It's just stupid.

    I think a lot of it has to do with sendmail having such a long and rich history; anything which has existed for over a decade tends to get a lot of newbie disapproval. Also the configuration can be rather complex, and I think most people who flame about sendmail just don't want to 'fess up to being too dumb to understand it (with my asbestos suit on), and so resort to juvinile name calling.

    Also you have to remember that probably 95% or more of the /. readers never use an MTA in anything but the simplest of configurations. Most likely a home computer or a small LAN. Those who have to manage email for large corporations in very complex networks, etc., can appreciate all that raw power and flexibility of sendmail much more. But to most, it seems like an overly complex mess.

    And about the security-flaw reasoning. That's just an easy way for flammers to badmouth sendmail without really giving true reasons. Any software which has had such a long history and unbiquitous use as sendmail has a history of security flaws. For that matter Unix itself has had an absolutely abismal security record. And yes, someday Postfix will have it's own history to brag about too. But in all cases the flaws were quickly fixed, and the vast majority of flaws required a very specific configuration to even be a problem. Also many security problems result from improper installation; you can run sendmail in a very security setup if you want (just avoid all the FUD about sendmail). You can't compare Postfix and sendmail based solely upon their history of security, because sendmail's history is decades longer than Postfix's. And sendmail has processed perhaps a million trillion times as many email messages as has Postfix over it's lifetime.

    1. Re:Why all the MTA anti-sendmail holy wars? by johnnyb · · Score: 4, Insightful

      It's not the flaws, it's the architecture and development methodology, although I've heard both have been revamped in 9, I haven't checked myself.

      Postfix has several security policies:

      1) no process will ever _touch_ user data as root
      2) all data is converted into fixed-length records for internal use
      3) each program is small and does one task using the least privilege concept

      There are others, but I can't think of them right now. Up until V8, sendmail had the monolithic, let's-run-everything-as-root concept. It's not that sendmail has flaws, it's that sendmail is so susceptible to flaws just by its design.

      Again, I'm not aware of the improvements done in V9, as I had already switched to Postfix.

    2. Re:Why all the MTA anti-sendmail holy wars? by dmeranda · · Score: 2, Interesting

      Then you really need to check out the latest sendmail. It is WAY better than older releases. I think most of the FUD against sendmail is because nobody is looking at it's current features or design, only what it *was* say 5 or more years ago. Sendmail has not stood still.

      It uses capabilities, chroot jails, etc. It is nowdays very good about running with least priviledge, and only a very small kernel of code ever runs with root priviledge in a proper setup anyway. (or if at all if you OS supports capabilities).

      The one potentially bad thing about your mention of Postfix using fixed-length records, is that is usually the root cause for buffer overflows. I'm not saying that Postfix is suseptible or not, but actually fixed-length records is not necessarily a universally good security policy. But at least Postfix has some policies, so I have nothing against it. I just can't stand sendmail bashing without the facts.

    3. Re:Why all the MTA anti-sendmail holy wars? by johnnyb · · Score: 4, Insightful

      "The one potentially bad thing about your mention of Postfix using fixed-length records, is that is usually the root cause for buffer overflows."

      Incorrect. What Postfix does is BREAK UP a message into fixed-length pieces so that a buffer overflow CANNOT occur.

      Buffer overflows are a problem when you ASSUME that a field is of X length but it's actually Y. Since Postfix breaks up lines into fixed-length quantities, it prevents lots of potential problems because there is no way that a line could overflow.

  58. maybe for 2.2 by Too+Much+Noise · · Score: 1

    SASL authentication was a shocker to get working with Postfix. Some people had not problems, but Murphy'y Law meant I never got it working properly. Lets hope its fixed.

    Erm ... no. But you can ask the devs to fix Murphy's law for the 2.2 version ^_^

  59. Good thing, then... by Inoshiro · · Score: 1

    That the first thing you see on the Postfix mainpage is, "What is Postfix? It is Wietse Venema's mailer that started life as an alternative to the widely-used Sendmail program.

    Postfix attempts to be fast, easy to administer, and secure, while at the same time being sendmail compatible enough to not upset existing users. Thus, the outside has a sendmail-ish flavor, but the inside is completely different.
    "

    And mentioning Sendmail in the /. description couldn't have hurt either :)

    --
    --
    Internet Explorer (n): Another bug -- that is, a feature that can't be turned off -- in Windows.
  60. OTOH.. by slittle · · Score: 2, Informative
    The latest published qmail package is qmail-1.03.tar.gz, which was released in June 1998. So again, this may have happened already.
    May also be read as: no known exploits for >= 5 years.
    --
    Opportunity knocks. Karma hunts you down.
    1. Re:OTOH.. by ahodgson · · Score: 4, Interesting

      Unfortunately, it has also meant no new functionality for >= 5 years, unless you want to maintain your own source tree with dozens of patches.

      I loved qmail, but all my systems run Postfix nowadays. SSL, SMTP AUTH, content filtering, too many features I needed and qmail doesn't have.

      I just hope djbdns doesn't go the same way, cause I REALLY hate BIND.

    2. Re:OTOH.. by thogard · · Score: 1

      No it can't be read as that. Look at the reward page. Now tell me why hes so eager to exclused "programs outside of qmail?" The reason is simple, thats where many bugs have been found and while sendmail has many thousands of lines of code to work around them, qmail doesn't. Which is more secure? A program that works around a broken syscall in Linux or one that ignores it?

  61. Re:this SMTP server vs Qmail and Sendmail by dasunt · · Score: 3, Informative

    It is also important to note that Postfix provides Maildir support for local delivery. This means you can have nested folders (containing both messages and more folders) on your IMAP server, where as with Sendmail's mbox format you can only have folders containing messages, and those folders are actually just long text files. Qmail provides the maildir format natively, but Postfix makes it free.

    Or you can use Sendmail + Procmail for Maildir-style storage.

  62. Re:this SMTP server vs Qmail and Sendmail by Anonymous Coward · · Score: 0

    >There are two very large dangers with qmail...

    Really? I'm trembling with fear....

    >that it will go off in a random direction no one agrees with

    So fucking what? Just keep using the old version. Anyway it hasn't changed since 5 years ago.
    Or just uninstall it and install sendmail or whatever.

    > and you'll either have to follow along or go that way, and that the qmail maintainer will just stop releasing new versions.

    I hope more packages follow that path so that people don't have to upgrade and apply security patches every month.

    >With free software, if enough people use it, they will simply make a fork...but they can't do that with qmail.

    So fucking what? It's just an MTA, it's supposed to send/receive/deliver email which it does pretty well, what for Christ's do you want to "do with (it)"? Turn it into a document management system?

    >Technically they could grab a random version and keep building patches off that, but that becomes unmaintainable real fast.

    Exactly, that's the reason for not fucking with the code in the first place.
    (See what happened to sendmail - it grew into an unmanageable monster)

    When you've got no clue about mail servers and managing mail servers, better refrain from posting worthless crap.

  63. Not a compelling reason to switch. by lorcha · · Score: 2, Informative
    You can easily do virtual domains and spam filtering in qmail. Virtual domains you can read about in "Life With Qmail". For spam filtering and virus checking,

    apt-get qmail-qfilter clamav spamassassin

    and you're there. On the other hand, you may have other reasons to change MTAs. I'm actually thinking of switching from qmail to courier since I already use courier for IMAP, so it just makes sense to use the courier MTA, too. Also, like you, I hate the oddball qmail license. I also hate the way qmail installs weird shit all over my system. Come to think of it, I don't even remember why I chose qmail other than the hate of sendmail.

    Blah.

    --
    "Avoid employing unlucky people - throw half of the pile of CVs in the bin without reading them." -- David Brent
  64. Re:this SMTP server vs Qmail and Sendmail by Kent+Recal · · Score: 2, Interesting

    Well, having a stable target for patches and extensions can be a nice thing, too.
    And if you're dealing with mailing lists (from the admin side) you definately wanna take a look at ezmlm.

    I haven't tried postfix in a while but I guess the old rule of thumb (for small sites use whatever, if you need it big stick with qmail) still applies?

  65. (off-topic) Re:Grudgingly going back to Sendmail. by Kalzus · · Score: 1

    In my neck of the woods, spammer-built SMTP engines tend to target all the listed MXes. Especially when the customer (grumble) has employees who actually sign up for stuff with their real e-mail addresses.

    --
    "The Devil does not know a lot because He's the Devil, He knows a lot because he's old." -- unknown
  66. Re:this SMTP server vs Qmail and Sendmail by Rabbitt · · Score: 4, Insightful

    Postfix is -not- written in perl. Postfix is written in C. Please, in the future, at least -know- what you are talking about before posting.

    --
    Carl P. Corliss
  67. Re:this SMTP server vs Qmail and Sendmail by Anonymous Coward · · Score: 4, Informative

    Becuase so many other posts aren't stating this I'll try to explain some of the offerings:

    Postfix is easy to configure. One of it's biggest advantages is that it uses many different type of maps for various purposes. Say I want to tell postfix what domains to relay mail for. I can have it lookup the domains in a traditional dbm/hash file or I can even specify an LDAP server to hit. In addition I can have it do the lookups in any order, dmn static entries first, then hit an old sendmail hash, then finally hit LDAP for my new point and click allocation system. This same mapping system is identical for almost all configuration parameters, aliases, virtual domains, virtual alias, maildir/mbox locations, valid recipients, valid senders, SMTP Auth users, etc., etc.

    In addition I like postfix's rate control system. Postfix will notice when a foriegn mail system is under load (judged by its response times) and throttle back the rate and number of connections to it. This means that there is less of a chance that mail will be rejected with a temporary failure by the foreign server because it's too busy. It avoids the mail being moved from the active queue to the deferred queue imposing an hour or so delay until the next delivery attempt.

    This also works for inbound mail. I can set rate limits so that if a foreign mail server tries to bomb me, postfix will notice this and throttle the connections. It does this by imposing mandatory delays in confirming the delivery to the foreign server. Again, the rates and thresholds are all configurable.

    Postfix has some nice security features. For instance one feature is From: validation. All my users must log into postfix using SMTP Auth before sending mail. I have an LDAP map that specifies the allowable From: addresses the users are allowed to use. If the From: address doesn't match what's configured for the SMTP Auth user, the message is rejected. This keep users from spoofing other user's addresses in the From: header. In addition to validating the recipient domain, postfix can validate the recipient address before the message is accepted. Again, from any map type, including LDAP.

    Postfix also has a sendmail compatibility layer. Meaning sendmail commands like 'sendmail' and 'mailq' typically work exactly like their sendmail counterparts.

    As for performance and scalability, it's right up there with Qmail and sendmail. Performance on my particular servers will be less than on a plain Qmail or sendmail setup, but I also perform tons and tons more checks and validations on each message. Each message results in about 4 LDAP lookups and also gets piped through Amavis-new, Spamassassin, and ClamAV. The idea that postfix is for small to medium sized servers is a wash. It has a feature set that is above and beyond the rest and I'm quite impressed with it.

    I used to be a die hard sendmail guy. But after going to postfix, I'll never go back.

    My $.02 anyhow....

  68. netqmail-1.05.tar.gz by Russ+Nelson · · Score: 2, Informative

    http://qmail.org/netqmail/

    'nuff said. Trolls, heh, ya gotta love 'em.
    -russ

    --
    Don't piss off The Angry Economist
    1. Re:netqmail-1.05.tar.gz by Enry · · Score: 1

      Ooh. Rockin. Thanks for the pointer.

    2. Re:netqmail-1.05.tar.gz by Tadghe · · Score: 1

      Not sure if your .sig was referring to the top posters comment about the last official qmail release being old or not, but....
      netqmail is "comprised of qmail-1.03 plus a patch file, some documentation, and a shell script which prepares the files for compilation"
      (to quote the site) Which means it's still been years since the last official qmail release. Netqmail is simply qmail (src) + patches + script to apply patches.

      --
      Bugs Bunny was right.
  69. Re:Why does everyone always gotta knock sendmail?? by tverbeek · · Score: 1
    There's sendmail and then there's everything else that compares itself to sendmail. Imitation is the sincerest form of flattery.

    Kinda like Windows, eh?

    MTAs compare themselves to SendMail because it's the nearly-ubiquitous default. The reason it has that position is a complex combination of availability, features, inertia, etc... not simply because it's "the best". Sendmail is a good tool; I've used it in the past and I may use it again somewhere someday. But it's not the best tool for every situation, which is why I currently use Postfix for my main mail system.

    --
    http://alternatives.rzero.com/
  70. Re:Why does everyone always gotta knock sendmail?? by winkydink · · Score: 1

    Hmmm..I've re-read my post a bunch of times now. Did I say it was the best?

    --

    "I'd rather be a lightning rod than a seismometer." -Ken Kesey

  71. Re:this SMTP server vs Qmail and Sendmail by zulux · · Score: 3, Interesting



    To be fair..

    Qmail is *very* well deigned and programmed. There's hasen't been a real need to issue a new package for a long time.

    I still don't like the license - but it is damn fine software.

    --

    Moneyed corporations, non-working 'poor' and criminal prisoners are turning productive citizens into tax-slaves.

  72. Re:Qmail by Anonymous Coward · · Score: 0

    You're right. I was being a smartass. However, netqmail sounds like an awful lot of trouble to go through vs the Postfix/Exim alternatives.

  73. Re:Qmail by Muppy · · Score: 0
    --
    -- uh...
  74. Re:Why does everyone always gotta knock sendmail?? by tverbeek · · Score: 1

    You gave a "hear hear" to an emphatically superlative sales pitch for it, and the obvious implication of pointing out that everyone flatters it with imitation is that it's superior. So... yeah, that's pretty much what you said.

    --
    http://alternatives.rzero.com/
  75. Re:this SMTP server vs Qmail and Sendmail by Anonymous Coward · · Score: 0

    You are right and the parent poster is wrong. Please, in the future, at least- do not be an ass- before posting.

  76. parent is so wrong, it's not even funny by Kunta+Kinte · · Score: 4, Insightful
    I was going to mod you down, but I figured I corrected you instead.

    It is not the MTA's (Mail Transfer Agent) job to put the mail on the filesystem, that's the MDA's (Mail Delivery Agent) job. Sendmail is a Mail Transfer Agent. Sendmail, for as long as I've known, as a pluggable MDA format, where you can put in any MDA you choose. You can easily build your own MDA for Sendmail. Not to mention if you use Milter.

    This is rudimentary internet mail handling.

    For example, I use Cyrus IMAP's MDA with sendmail; and thus sendmail simply hands the Cyrus MDA my mail once sendmail has figured the mail belongs on this server.

    Thus in a way, Sendmail, Postix, and all other MTA are essentially routers.

    --
    Based on upvotes, Ageism is the only "-ism" Slashdotters care about and think isn't SJW
    1. Re:parent is so wrong, it's not even funny by stilwebm · · Score: 1

      It's true that local delivery is the MDA's job, but a powerful MDA is built in to Postfix to take care of this via maildir, mbox, pipe or LMTP (for handing off to Cyrus, for example). Sendmail, however, requires an external MDA and seperate configuration to do what can be configured in a base install of Postfix. That's what's great about Postfix - it isn't just an MTA, but a mail system. Best of all, its features are well integrated but seperate processes to make them highly efficient.

  77. Excellent Postfix Setup Guide by jwbrown77 · · Score: 2, Informative

    Here.

    The HOWTO is based on Gentoo, but the configuration principles can obviously be used on any machine.

    --

    -----
    How can you have any pudding if you don't eat your meat?
  78. Re:Qmail by sgifford · · Score: 1
    You just download it and follow the instructions. It takes about 5 minutes to compile and an hour or two to read through the documentation and install it (much faster if you've done it before). At the end of it, you understand how the system works fairly well. Postfix/Exim might be faster to set up initially, but if you don't read through the docs while you're doing it, you'll end up having to read them the first time a problem comes up. My guess is that the total amount of time to set up and run any of these systems for, say, a year is about the same.

    The nice thing about qmail is it has a very modular design, and you can easily remove parts and replace them or layer them together. It might be a little harder to get the hang of than editing a config file, but it's very flexible and powerful.

  79. OS X Postfix :: Don't you mean Server? by tyrione · · Score: 1

    I haven't set up Postfix on Panther client or even bothered to verify if, out-of-the-box, it is there, but for sure we know that OS X Server version of Panther has Postfix standard.

    1. Re:OS X Postfix :: Don't you mean Server? by wfolta · · Score: 1

      It is the standard on Client as well. (Or did you mean I should have said "Server" instead of "Xserve"? You're right on that.)

  80. What are the exact functions of an MTA? by Anonymous Coward · · Score: 0

    Many people don't know what a "mail transfer agent" is. Not everyone who reads Slashdot knows everything. What are the exact functions of an MTA?

    1. Re:What are the exact functions of an MTA? by akc · · Score: 1

      Simple really - receives mail and decides what to do with it. Could deliver it locally, or forward it on to another MTA.

      Of course its a bit more complex than that. These days you probably want to do some validation of the mail that you are receiving (checking that the sender is actually who he says he is, filtering out spam and/or viruses), and you also need to do a level of optimisation when mail is addressed to several people. The other main function is to rewrite addresses (for instance, inside an organisation you may be fred@mymachine.company.com - to the outside world you may be fred.bloggs@company.com)

  81. Re:Why does everyone always gotta knock sendmail?? by winkydink · · Score: 1
    "Hear! Hear!" is hearty agreement with thre author's original post. Let's take a look at it again:

    I've been running sendmail 4ever
    OK, no "best" here.

    - sure it's complicated as hell
    nope, no "best" here either

    - and a bit of a resource hog at times..
    still no "best"

    but it freaking works
    certainly not a superlative

    and is rock solid over more years of production use than any other MTA ever will be in our lifetimes.
    One may argue with "rock solid" (I won't). It certainly has been around a lot longer than the other MTAs.

    Now, let's look at "flattery":

    Main Entry: 1flatter Pronunciation: 'fla-t&r Function: verb Etymology: Middle English flateren, from Old French flater to lick, flatter, of Germanic origin; akin to Old High German flaz flat transitive senses 1 : to praise excessively especially from motives of self-interest 2 a archaic : BEGUILE 4 b : to encourage or gratify especially with the assurance that something is right 3 a : to portray too favorably b : to display to advantage intransitive senses : to use flattery

    Hmmm... I don't see a direct correlation to the flatterer being better here either.

    You seem a little defensive.

    --

    "I'd rather be a lightning rod than a seismometer." -Ken Kesey

  82. Re:this SMTP server vs Qmail and Sendmail by DavidTC · · Score: 1
    Gee, you really like quoting me out of context, don't you? And even fighting strawmen.

    Someone said it wasn't free software, someone else asked why, and I explained. It's not free because it can't be forked, the only version that can ever be is the offical version, except for unwieldy patches. You're at the mercy of the maintainer.

    I didn't say you shouldn't use it, I didn't say it was bad, I just stated facts. And you acted like I attacked your mother.

    --
    If corporations are people, aren't stockholders guilty of slavery?
  83. Re:Why does everyone always gotta knock sendmail?? by tverbeek · · Score: 1
    Spare me the inept semantic back-pedaling. It's perfectly clear what you meant, and now you're trying to wiggle out of it because someone made fun of you over it.

    You seem a little defensive.

    Pot.

    Kettle.

    Black.

    :p

    --
    http://alternatives.rzero.com/
  84. postifx rocks by machacker · · Score: 1

    postfix is just plain beutifull. i set up a postfix, courier, squirrellmail combo and it works like a charm. sendmail is a piece of crap. why the hell in the 21 first century should we have to compile wacky obscure m4 files or whatever the're called just to configure a freaking program. sendmail belongs back in the 19 century.

  85. thw by Anonymous Coward · · Score: 0

    As no one else has noticed it yet, it says: Version 2.2 is in thw works

    I'm trying to inform, not criticize.

  86. Re:TEH FIRST POSTFIX 2.1 RELEASED!!!`1 by Anonymous Coward · · Score: 0

    SP0KEFIX IS ON TEH POST!!!!

  87. Re:TEH FIRST POSTFIX 2.1 RELEASED!!!`1 by Anonymous Coward · · Score: 0

    lol @ yuo

  88. Re:this SMTP server vs Qmail and Sendmail by ePhil_One · · Score: 3, Interesting
    I still don't like the license - but it is damn fine software.

    It may be damn fine software, but its creator has decided that he doesn't like the existing init systems on linux/BSD and so has written his own. That right there took qmail out of consideration. I don't care if he is right or wrong, I have no intention of installing a second init system just so I can run his software. The creators of Postfix integrate beautifully with linux standards, Redhat even provides a well integrated postfix package (install the rpm's then run 'redhat-switch-mail'). Not to mention the awesome 'mailgraph' utility - http://people.ee.ethz.ch/~dws/software/mailgraph/ for charting stats!

    And best of all, its wicked fast. I can handle 100's of msg per minute on a 500Mhz box, which I learned the hard way that sendmail can't.

    --
    You are in a maze of twisted little posts, all alike.
  89. Re:this SMTP server vs Qmail and Sendmail by sumbry · · Score: 4, Interesting

    Having worked at a hosting company for years, we actually migrated to Postfix (from Sendmail) way back in the day, when Postfix was still called VMailer (actually joined the beta before it even had a name).

    Simply put, Postfix is designed from the ground up with security in mind as well as the KISS philosophy of software design. Postfix has a bunch of little programs that all do one thing and do it very well, is realitively easy to chroot and even if you opt to not do that is still much more secure than Sendmail (esp its out of the box config). It's author Wietse Venema (sp?) was the same guy that wrote TCP Wrappers which is a stock part of almost every BSD/Linux distro today.

    Postfix was engineered from the groupd up to be a Secure MTA and was able to take immediate advantage of all the lessons that had been learned by Sendmail w/o having to hang on to a legacy codebase.

    Postfix is also extremely easy to configure, using straight non-cryptic ini style conf files and doesn't require a 1300 page manual to get the best out of it. Couple this with the fact that connecting it to a MySQL/Postgres/Oracle database for map lookups (forwarding, alias, transport, etc) and you've got this beast that scales very well for hosting environments (you can also used virtual passwd databases enabling you to create mailbox accounts that do not actually exist in the systems passwd db). When we deployed it at said hosting company, we were delivering close to a million messages a day and saw lookup times, delivery times, queue times, pretty much everything drop to about 1/4 of their levels w/Sendmail. Postfix is blazingly fast.

    Postfix isn't for everyone tho. If you're only running a few domains and/or Sendmail came preconfigured on the box you're running it on then you're probably fine sticking w/Sendmail. We actually only used Postfix as a hub and used Sendmail on all our severs in a relay only mode. If you know Sendmail back and forth and can make it jump through flaming hoops I wouldn't necessarily advise switching to Postfix unless you're looking to wring more out of your MTA and want to do it relatively easily and securely.

    Someone correct me if I'm wrong, but I don't think Postfix has even had any remote exploits (it doesn't run as root out of the box)?

  90. Re:this SMTP server vs Qmail and Sendmail by sumbry · · Score: 2, Informative

    To add to this, Postix is not just for small to medium sized servers. It actually scales extremely well because of it's design philosophy (bunch of small programs that each do one thing and do it well communicating w/each other).

    I would actually argue the opposite of parent - use Sendmail if it came preconfigured on your box, but otherwise if you're running a large server or hub, migrate over to Postfix if you want to wring every ounce possible outta your mailserver.

  91. Re:this SMTP server vs Qmail and Sendmail by Anonymous Coward · · Score: 0
    That right there took qmail out of consideration.
    You don't need to use the djb init replacement, if you don't want to. I don't know why you would assume that this would be true. If you bother to look around, google, mailing lists, usenet, just about any resource should tell you that this is not the case.
  92. qmail is all patches by wolverine1999 · · Score: 1

    Qmail is now all patches. I tried it some time ago and had to switch to Postfix which was more robust.

    I haven't looked back.

  93. Bogus backup MX servers by mattrope · · Score: 4, Interesting
    I, personally, set up a 'backup MX' record to point at one of my IPs that didn't actually run a mail server, and cut my daily spam attempts by 30%.

    And you probably dropped the reachability of legitimate mail too. I'm sure that works well in your little playground, but this is a real environment and we have SLA's to honor.

    Actually, using an unreachable backup MX is an excellent idea and shouldn't affect legitimate email at all. Real mail servers (i.e., servers running software like sendmail, postfix, exim, etc.) will try to deliver a message to each MX server, from high priority to low priority, until they find one that is accessible. So if he sets up a bogus MX server at the lowest priority, all of his other MX servers will still be attempted (and if they're all down for some reason, he's screwed anyway). However, spammers often use custom mass-mailing software that isn't smart enough to try all MX servers. In fact, their software seems to specifically target the lowest priority MX servers, probably because they think these servers will be less likely to inspect and reject the message at SMTP time. So if your lowest priority MX server is bogus and doesn't really exist, spammer software might not be smart enough to actually try the other MX servers; it will give up and move on to the next victim.

    So using this technique shouldn't affect legitimate email, but it stands a good chance of cutting down on some spam. I'm glad he posted it.
  94. Re:this SMTP server vs Qmail and Sendmail by Anonymous Coward · · Score: 0
    except for unwieldy patches. You're at the mercy of the maintainer.
    Facts, my ass. Sounds more like FUD to me.
  95. Re:this SMTP server vs Qmail and Sendmail by ckaminski · · Score: 1

    Can I build commercial applications on KDE, LGPL style? If so, does the Qt Commercial license still apply?

  96. Re:this SMTP server vs Qmail and Sendmail by ComputerSlicer23 · · Score: 1
    Actually, it not running as root is a problem. The guy who wrote Qmail rails against this point on his site. Essentially, if you aren't root, then the INBOX spool directory is world read/writeable, which means j. random user can attack your mail spool. Under sendmail and Qmail, they get around this by having you run as root, and chaning to your user to write to your spool file. The Postfix guys claim this isn't a problem, but it seemed pretty obvious to me that it has some serious issues.

    I'm also curious about how you could run procmail out of it, if it doesn't have root priveledges to change UID's to run the scripts as me.

    Kirby

  97. Do one thing very well by rs79 · · Score: 1
    Well, maybe not so well sometimes:
    PID USERNAME PRI NICE SIZE RES STATE TIME WCPU CPU COMMAND
    8065 postfix 18 0 3172K 3520K lockf 0:52 19.49% 19.49% cleanu
    8080 postfix 18 0 3180K 3532K lockf 2:29 16.37% 16.37% cleanu
    7866 postfix 18 0 3172K 3524K lockf 0:31 12.74% 12.74% cleanu
    7862 postfix 18 0 3172K 3520K lockf 0:23 7.21% 7.21% cleanu
    --
    Need Mercedes parts ?
  98. Re:this SMTP server vs Qmail and Sendmail by rsidd · · Score: 1
    Can I build commercial applications on KDE, LGPL style?

    Yes, the core KDE libraries (kdelibs) are under the LGPL. Just be careful not to link in any GPL'd code.

    If so, does the Qt Commercial license still apply?

    Yes.

  99. Obligatory beowulf joke by aulendil · · Score: 3, Funny

    First, a morpheme attached to the end of a word isn't unbound, it is bound. Second, what you seem to mean by postfix is usually called a postposition (contra preposition), as in ... drum roll ... Beowulf:

    Scedelandum in , in scandinavia.

  100. Re:this SMTP server vs Qmail and Sendmail by ckaminski · · Score: 1

    Thx.

  101. Re:this SMTP server vs Qmail and Sendmail by DavidTC · · Score: 1
    How the hell is that FUD? There's a rather large patchset already out there because the maintainer hasn't released a new version in 5 years. (In fact, there are a few posts here asserting that's a feature, that no new versions make it easy to patch, which is what normal people would call 'denial'.)

    You know, just asserting things that aren't true doesn't magically make them true.

    --
    If corporations are people, aren't stockholders guilty of slavery?
  102. Re:this SMTP server vs Qmail and Sendmail by zulux · · Score: 3, Insightful



    I agree myself too. I *like* Qmail better than Postfix... but I realise that Postfix has a gurenteed future so that's what I run.

    --

    Moneyed corporations, non-working 'poor' and criminal prisoners are turning productive citizens into tax-slaves.

  103. Re:this SMTP server vs Qmail and Sendmail by Anonymous Coward · · Score: 0

    What do you mean non-forkable? I bet you can't call your software 'qmail', but what about the 'net-qmail' fork? That's what people are using these days!

  104. Postfix inclusion/default with distros? by jupitercore · · Score: 1

    There are a good number of distros out there that already ship with Postfix and some that don't (Slackware is one). However, no distro to my knowledge actually has Postfix as the default MTA - they're all still defaulting to sendmail. Is this release enough to start asking for Postfix to be the default, or should we be waiting for the 2.2?

    For personal choices, the need for some hardcore proof to give to Patrick to include Postfix in Slackware is very high - many in that crowd have been making noise for Postfix, but convincing Patrick is difficult at best! This might be a good time to start trying.

  105. Re:this SMTP server vs Qmail and Sendmail by DavidTC · · Score: 1
    It has nothing to do with the name. From the website:

    [netqmail] is comprised of qmail-1.03 plus a patch file, some documentation, and a shell script which prepares the files for compilation.

    I.e., people are having to distribute qmail as is, and rig a script to patch it. Exactly like I said.

    netqmail is just putting all that in one package.

    --
    If corporations are people, aren't stockholders guilty of slavery?
  106. GPL incompatible by Adam+J.+Richter · · Score: 1
    Postfix is covered by version 1.0 of the IBM Public License. The Free Software Foundation says:

    IBM Public License, Version 1.0

    This is a free software license but it is incompatible with the GPL. The IBM Public License is incompatible with the GPL because it has various specific requirements that are not in the GPL. For example, it requires certain patent licenses be given that the GPL does not require. (We don't think those patent license requirements are inherently a bad idea, but nonetheless they are incompatible with the GNU GPL.)

    By the way, that same FSF page says the same about IBM's other open source license, the Common Public License, used in Eclipse.

    I hope that a future version of the GPL will allow LGPL-style linking with code covered by GPL-incompatible "free software" licenses in cases where no proprietary software is linked in or perhaps that a future version of the GPL will address software patent problems in a way that is compatible with the IBM Public License and the Apache 2 License.

    In the meantime, to me, the advantages of Postfix are less than the disadvantages of the obstacles to future code recycling. If the incompatabilities could be fixed by a change to either the GPL or the IPL, and if enough of the hype about postfix proved to be real, I would probably switch to postfix.

    I know I am a statistically insignificant sample, but there are others, mostly developers, who care about being able to copy code between free software projects in general and GPL compatability in particular. So, Postfix gain that much more usage and support if and when this incompatability is resolved, such as, for the short term, by adding some exceptions for the GPL, as the CUPS project did.