sendmail

[Peter Boosten]

> Op 1 jul. 2019, om 14:02 heeft Roderick <hruodr at gmail.com> het volgende geschreven:
> 
> 
> On Mon, 1 Jul 2019, Peter Boosten via freebsd-questions wrote:
> 
>> _and_ that sendmail is based on a single executable, while other MTAs
>> spread the tasks over several.
> 
> Is that really so bad? Why people do not hammer exim, the standard MTA in
> debian, for the same reason? Does it have advantages that neutralizes it?

Exim has its share of vulnerabilities right now (https://www.zdnet.com/article/new-rce-vulnerability-impacts-nearly-half-of-the-internets-email-servers/ <https://www.zdnet.com/article/new-rce-vulnerability-impacts-nearly-half-of-the-internets-email-servers/>).

The thing with a single executable is that it runs as root, while with postfix most services run as ‘postfix’.

Peter