From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1G7bGt-0007pO-2n for garchives@archives.gentoo.org; Mon, 31 Jul 2006 17:09:39 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.7/8.13.6) with SMTP id k6VH6AHl020481; Mon, 31 Jul 2006 17:06:10 GMT Received: from popmail.jettissystems.com (popmail.jettissystems.com [38.118.146.212]) by robin.gentoo.org (8.13.7/8.13.6) with ESMTP id k6VH1ZUe001109 for ; Mon, 31 Jul 2006 17:01:36 GMT Received: from [10.23.0.100] (c-67-188-110-125.hsd1.fl.comcast.net [67.188.110.125]) by popmail.jettissystems.com (Postfix) with ESMTP id 16EBF56D481 for ; Mon, 31 Jul 2006 10:01:34 -0700 (PDT) Message-ID: <44CE376E.70609@badapple.net> Date: Mon, 31 Jul 2006 10:01:34 -0700 From: kashani User-Agent: Thunderbird 1.5.0.5 (Windows/20060719) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] netqmail and qmail References: <217e6afb0607302300j313a56fh66a9e7f1815a91e4@mail.gmail.com> <44CDF760.9060507@mid.message-center.info> In-Reply-To: <44CDF760.9060507@mid.message-center.info> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Archives-Salt: 37d6957e-7456-49c3-8a0b-370b4dd242a8 X-Archives-Hash: ae9bdaba5c5a60de49bddeaec5fa0520 Alexander Skwar wrote: > Suranga Kasthuriarachchi wrote: > >> Which is the best for organization mail server. > > NOT qmail - too many holes and not good performancewise. Some clarification on the security of qmail: qmail has no known holes be default other than still playing the MTA game by 1998 rules which is are problems and almost as annoying as security issues. Patches like 0.0.0.0, limit-bounce size, etc solve most of those. It also has very few features which is sort of the root of the problem. In order to get features (and performance) you have to patch the hell out of qmail which is of course no longer the secure default build. The 1.0.3-r16 ebuild has 29 possible patches. It's through the patches that security problems are likely to be introduced, but IIRC there has one been one or two that have been found at least in mature non bleeding edges patches. and then on performance: qmail can be made to perform, but you have to add the performance patches (qmailqueue, big-todo, big-concurrency) and do much more tuning that you'd need to do with any other mail servers. However the one mail per TCP session is one thing you can't get around and will limit the speed of large installations. Most home user or small business users won't run into that. Or you can install Postfix/Sendmail/Exim which have had actual development over the last eight years. kashani -- gentoo-user@gentoo.org mailing list