OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 3rd quarter (Jul-Aug) 1995: sendmail alternative?

sendmail alternative?

Robert Owen Thomas (rthomaspamd.cig.mot.com)
Fri, 18 Aug 1995 09:27:25 -0500 

having seen many a post regarding sendmail vulnerabilities, perhaps an
alternative for sendmail should be considered.  how about smail?

i have found smail to be simple to configure, easy to debug, as well as
both durable and secure.  although there are a few particularly noxious
security holes, i have patched all (simple fixes) and have yet to happen
upon any more.

now i am not going to say that smail is 100% secure.  nor will i say that
smail is necessarily better.  site requirements will dictate that. i run
sendmail, smail, and (groan) MMDF at miscellaneous sites.  rather, i think
it is important that admins realize there *is* an alternative.

the security holes were posted here some time ago.  check the archives for
more information.  you may obtain smail (latest version is 3.1.29) from:
               ftp://gatekeeper.dec.com/.8/mail/ta/smail/
               ftp://convex.convex.com/pub/smail/
               ftp://cs.orst.edu/pub/src/comm/network/

not looking to start a religious war about MTA's,
--robert
--

o  robert owen thomas: unix consultant. cymro ydw i. user scratching post.  o
o       e-mail: Robert.Thomaspamd.cig.mot.com --or-- robtcymru.com        o
o               vox:  708.435.7076   fax:  708.435.7360                     o
o        "When I die, I want to go sleeping, like my grandfather...         o
o              Not screaming, like the passengers in his car."              o