Solved: Sendmail question. Problem with yahoo.

Ben Scott dragonhawk at gmail.com
Mon Apr 14 11:34:29 EDT 2008


On Mon, Apr 14, 2008 at 10:59 AM, Tom Buskey <tom at buskey.name> wrote:
> Sendmail has a long history of security problems.

  I have to point out that the above statement would be equally true
if one wrote "Unix" instead of "Sendmail".  (This is not a snide
remark, although it may qualify as "subtle".)

  Separate from the above: From what I know if it, Postfix has a more
modular design than Sendmail.  Such designs usually lend themselves to
task isolation and least-privilege, which is usually good for
security.  It's interesting, but despite Sendmail's more flexible
design, implemention of these concepts came later.  When they did
arrive, though, they were implemented using the same Sendmail
configuration facilities already existent.  I'm not sure that last
part really matters, much, though.  The source code to everything is
readily available.  What difference does it make if one has to write a
new .c file vs a new .cf file?  That might matter on a
slavery-software platform, but surely we all know that story by now.

  It may be worth noting that Postfix was created by Wietse Venema,
the same person who created tcp_wrappers.

-- Ben


More information about the gnhlug-discuss mailing list