On Wed, 2003-11-05 at 23:20, Lyvim Xaphir wrote: ... > Personally I've had zero trouble installing qmail and zero trouble > administering qmail. Most of the complaints I've seen about qmail in my > own work experience have come from people that don't really know what > they are doing, or are too lazy to tackle a learning curve. > > The fact is that postfix is not as secure as qmail. This isn't a matter > that's up for arguability, it's a matter that is an established fact > based on bugtraq archives. I've been monitoring the bugtraq mailing > list for over 5 years now and I have consistently seen postfix security > problems come up over and over again. Qmail, on the other hand, has to > have made some kind of Guiness World record for NO security breaches or > problems; ever. There have been problems with some of the patches that > people have submitted, but there have never been any security problems > with the core programs that were authored by Dan Bernstein. I > personally have never seen a program with this kind of security record. > > I know about the rivalry between postfix and qmail on the newsgroups. > Based on the information I have gained over the last 5 years, postfix > has had security problems and qmail has not. Qmail has a pristine > operating history and postfix does not. It's just that simple. > > > LX
True enough, but there are many reasons for choosing a piece of software. Security is one of them and an important one, but if it was your only criteria you'd be on OpenBSD instead of Mandrake :-) Switching mailers entails starting the learning curve over. Maybe David will find qmail easier to understand and configure than postfix and the learning curve will be worth it... or maybe he'll burn a day working with it before deciding that he should have stuck with postfix in the first place or gone to exim. (No, sendmail is not an option). Architecture, license, support community, and ease of installation/management have to be considered along with security track record. -- Jack Coates Monkeynoodle: A Scientific Venture...
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
