Procmail Vulnerabilities check

Chris H portmaster at BSDforge.com
Mon Dec 11 15:35:27 UTC 2017


On Mon, 11 Dec 2017 11:49:06 +0100 "Lars Engels" <lars.engels at 0x20.net> said

> On Sun, Dec 10, 2017 at 02:58:29PM -0800, Chris H wrote:
> > OK I'm puzzled a bit. FreeBSD' motto has always been:
> > FreeBSD
> > The power to serve!
> > 
> > but many of the proposed, and recent changes/removals end up more like:
> > FreeBSD
> > I's castrated!
> > 
> 
> So, then we should add a web server into our base! Apache? NGINX? Both?
> But then, what about PHP? MySQL? PostgreSQL? We want to serve websites,
> after all! Let's talk about fileservers. Samba! I could go on...
OK. That's simply an irrelevant argument. I never advocated for the
*addition* of anything. Only against the *removal* of something most users
have come to expect with the installation of FreeBSD.

> 
> FreeBSD's power to serve slogan is about delivering the platform to
> serve, not all possible server software. It just happens to have a mail
> server in base because it always had, that's nothing that needs to be
> kept forever. Probably 99% of the users don't use sendmail and the
> remaining 1% know how to configure it, so installing them from ports is
> a trivial thing for them.
In all fairness, that's just pure supposition. I would suggest that it is
more probable that more users use Sendmail 1) because it came with the
FreeBSD install, and 2) as such, makes it easier to implement. 3) Sendmail
is more robust/flexible OOB than than the other alternatives *without* the
addition of other software/plugins. 4) An administrator *needs* (at least)
daily logs, because... 5) Security is important, and Sendmail is cheap, and
(unlike the bind) has a reasonable security track record.

I would also argue that the most likely reason users don't like Sendmail,
is because they aren't comfortable with m4(1).

--Chris




More information about the freebsd-ports mailing list