>>>>> "LG" == LG  <[EMAIL PROTECTED]> writes:

  LG> Just curious if anyone out there is using EXIM
  LG> (http://www.exim.org), as a MTA.

  LG> A fellow Sys admin is thinking about moving to it, and if anyone
  LG> out there has had any experience with it, I would like to know
  LG> the pros and cons you have found with it.

Exim is often discussed on comp.security.unix.   The synopsis there is
that while it may be more secure than Sendmail, it may not either.
Its design still requires it to run as root, hence it is perhaps prone
to the same kinds of problems as Sendmail.

There are other mailers which are designed for security and operate
with the "least privilege" for the taske they do (and, to this end,
are implemented as several separate programs).  Qmail is one example
of this kind of mailer.

Sendmail 8 has now had a fairly thorough security review and so is not
quite as risky a proposition as it once was.  I don't use qmail
myself, because the maintainer is so abrasive and behaves like a
complete buffoon.  So, until VMailer is released, I'm going to
continue to use Sendmail.  When VMailer arrives, I'm near certain to
switch to it.

For more information on VMailer, refer to http://www.vmailer.org/.
It's written by Wietse Venema, a name to conjure with; he wrote the
TCP wrappers and other important security software, so he has a good
track record.


-- 
  PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
http://www.redhat.com/RedHat-FAQ /RedHat-Errata /RedHat-Tips /mailing-lists
         To unsubscribe: mail [EMAIL PROTECTED] with 
                       "unsubscribe" as the Subject.

Reply via email to