qmail or postfix?

[Jarrod Slick]

Calling qmail more secure is pretty much just echoing conjecture at this
point.  Sure, it was designed to be secure (years and years ago) and the
original author even held a contest with a monetary reward for anyone who
could find a vulnerability -- that said, AFAIK that person no longer
maintains the project.  It requires lots of third party patches to be as
functional as postfix, so to what extent these patches counteract the
original coder's (apparent) secure coding practices is open to debate.

If you know of any specific problems with postfix that would substantiate
your claim I encourage you to inform the project's maintainers.  From
personal experience I can say that I've run a postfix config for years
without problems.  Also, in most networks I don't think the MTA is a very
prominent attack vector; people are probably much more likely to get in
through that old wordpress installation you've been meaning to upgrade for 6
months (for instance).

On Tue, Feb 1, 2011 at 7:11 PM, Andres Perera <andres.p at zoho.com> wrote:

> On Tue, Feb 1, 2011 at 10:02 AM, Alessandro Baggi
> <alessandro.baggi at gmail.com> wrote:
> > Hi list. Who is better, qmail or postfix?
>
> qmail is more secure... but the design is just as alien to unix as sendmail
> is
>
> for example, the fact that qmail uses custom libc, or at least did so on
> the
> version i tried. that turns off certain maintainers, and it would put me
> off
> aswell
>
> postfix on the other hand is more in tune with the rest of the system
>
> >
> > thanks in advance
> > _______________________________________________
> > freebsd-questions at freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> > To unsubscribe, send any mail to "
> freebsd-questions-unsubscribe at freebsd.org"
> >
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "
> freebsd-questions-unsubscribe at freebsd.org"
>