Re: [fw-wiz] FWTK and smap/smapd
From: Bennett Todd (bet@rahul.net)
Date: 07/17/02
- Next message: Roger Marquis: "Re: [fw-wiz] FWTK and smap/smapd"
- Previous message: Paul Robertson: "Re: [fw-wiz] VPN mailing list"
- In reply to: Joseph S D Yao: "Re: [fw-wiz] FWTK and smap/smapd"
- Next in thread: Rick Murphy: "Re: [fw-wiz] FWTK and smap/smapd"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: Bennett Todd <bet@rahul.net> To: firewall-wizards@honor.icsalabs.com Date: Wed Jul 17 15:36:02 2002
2002-07-17-13:16:25 Joseph S D Yao:
> I did not know that the Obtuse 'smtpd' was being distributed with
> 'postfix'.
It's not.
But Postfix and qmail both use modern design techniques for secure
Mail Transport Agent implementations: namely, they decompose the
problem into simpler subtasks, each of which is handled by a
separate program that is as small and simple as it can be, and still
deliver the needed functionality. Any process that can run as an
unprivileged user does so; any program that can run chrooted does
so. Least privilege.
Postfix's internal SMTP daemon process is, understandably, called
smtpd, despite the fact that another program of the same name has
been distributed; given that it's an internal component of postfix
the conflict is probably not important.
-Bennett
- application/pgp-signature attachment: stored
- Next message: Roger Marquis: "Re: [fw-wiz] FWTK and smap/smapd"
- Previous message: Paul Robertson: "Re: [fw-wiz] VPN mailing list"
- In reply to: Joseph S D Yao: "Re: [fw-wiz] FWTK and smap/smapd"
- Next in thread: Rick Murphy: "Re: [fw-wiz] FWTK and smap/smapd"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|