On 5/10/2015 5:22 PM, Bill Cole wrote: > On 10 May 2015, at 13:45, SH Development wrote: > >> Here is the postconf -n output: > > Also: Since your documentation directories include '2.6.6' I'm > guessing that's your Postfix version and that you are using such an > antique because your distribution includes it. Sticking with the > standard obsolete version of Postfix in a distribution makes sense > if all it is going to do is handle messages from cron jobs and > mail/mailx command lines, but it's really not safe for a machine > that accepts port 25 connections from random places. If you can't > wall this machine off from the world at large because you have users > doing submission fom random places, you should at least upgrade to a > version of Postfix that has been maintained recently.
While postfix 2.6.6 is certainly obsolete and no longer supported -- 2.6.19, the last in the 2.6 series, was released in Feb 2013 -- it's kind of a stretch to call it unsafe. Missing new features, yes. Unsafe? No. Hopefully the vendor has been more diligent with patching/updating other software in the distribution. -- Noel Jones
