Re: [gentoo-user] netqmail and qmail

[kashani <kashani-list@badapple.net>]

Alexander Skwar wrote:
> Suranga Kasthuriarachchi wrote:
> 
>> Which is the best for organization mail server.
> 
> NOT qmail - too many holes and not good performancewise.


Some clarification on the security of qmail:

	qmail has no known holes be default other than still playing the MTA 
game by 1998 rules which is are problems and almost as annoying as 
security issues. Patches like 0.0.0.0, limit-bounce size, etc solve most 
of those. It also has very few features which is sort of the root of the 
problem. In order to get features (and performance) you have to patch 
the hell out of qmail which is of course no longer the secure default 
build. The 1.0.3-r16 ebuild has 29 possible patches. It's through the 
patches that security problems are likely to be introduced, but IIRC 
there has one been one or two that have been found at least in mature 
non bleeding edges patches.

and then on performance:

	qmail can be made to perform, but you have to add the performance 
patches (qmailqueue, big-todo, big-concurrency) and do much more tuning 
that you'd need to do with any other mail servers. However the one mail 
per TCP session is one thing you can't get around and will limit the 
speed of large installations. Most home user or small business users 
won't run into that.

Or you can install Postfix/Sendmail/Exim which have had actual 
development over the last eight years.

kashani
-- 
gentoo-user@gentoo.org mailing list