Re: Postfix/Exim Security

From: ksemat@sanyutel.com
Date: 12/13/01 

Date: Thu, 13 Dec 2001 14:41:01 +0300 (EAT)
From: <ksemat@sanyutel.com>
To: Ryan M Harris <rmharris-securityfocus@acdinc.net>

> We are running Qmail currently, and I want to get away from its thousands of
> configuration files and unusual file system structure and its lack of
> integrated features (I'm sick of the thousands of patches). I have seen
> people that have their reasons for loving postfix / exim.

basically the same reason I also changed form qmail.
>
> What are the specific problems with security on exim/postfix? Our decision

unfortunately I think that in this area they are both the same. They are
both pretty secure and they both handle sql,ldap lookups very cleanly by
jsut setting compile time options.
 I currently run postfix simply because i prefer configuration files that
are in English i.le are understandable also because i did not have to
unlearn all my sendmail knowledge and learn something new. It of course
means that I can still use every script that was written to use sendmail
originally and I like the chroot stuff.

Exim is also as good though I found it more complicated to setup and use.

Noah.