RE: [MLUG] Critical Vulnerability in Sendmail and aSnortVulnerability

["Russell Horn" <EMAIL:PROTECTED>]

> -----Original Message-----
> From: EMAIL:PROTECTED 
> [mailto:EMAIL:PROTECTED] On Behalf Of Mike Miller
> Sent: 04 March 2003 02:06
> To: MLUG Members
> Subject: Re: [MLUG] Critical Vulnerability in Sendmail and a 
> SnortVulnerability
> 
> 
> I have no idea.  I don't use it because it's better than 
> something else. It's just the only thing I know.
> 

Postfix would be another alternative - it's been our default server for
over a year now. I have it running with Cyrus imapd which is great
because you can get close to a black box setup - i.e. no user accounts.

Postfix also allows neat integration (that we don't use yet) with mysql.
You can then configure all your aliases and transport routes via mysql.
It doesn't take much to pass that through some password checking, an ssl
web connection and you can do most things without even logging in to the
box.

Take a look at http://kummefryser.dk/HOWTO/mail/postfix_mysql.html to
get postfix and mysql talking.

The other question is, of course, what features are you using that you
can't run sendmail provided by your distro? Seems all the major distros
had patches available within an hour of the announcement last night - if
you are using some of the exoteric features of sendmail, perhaps moving
could be more difficult.

Russell.

_______________________________________________
members mailing list
EMAIL:PROTECTED
http://mlug.missouri.edu/mailman/listinfo/members