DaemonForums  

Go Back   DaemonForums > OpenBSD > OpenBSD Security

OpenBSD Security Functionally paranoid!

View Poll Results: Best/Most Secure Email Package
SendMail 0 0%
PostFix 3 33.33%
QMail 0 0%
Other (please list) 3 33.33%
I have no idea but I like to vote anyways 3 33.33%
Voters: 9. You may not vote on this poll

Reply
 
Thread Tools Display Modes
  #1   (View Single Post)  
Old 23rd July 2013
EverydayDiesel EverydayDiesel is offline
Shell Scout
 
Join Date: Jan 2009
Posts: 124
Default Most Secure Email Server Package

I know this is some what of an opinion (and configuration settings), but in your experience, which of the email packages have you had the best 'secure' results with?
Reply With Quote
  #2   (View Single Post)  
Old 23rd July 2013
jggimi's Avatar
jggimi jggimi is offline
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 7,977
Default

I switched from Sendmail to OpenSMTPD a couple years ago and prefer its simple configuration. From that website, here are the project's goals:
Quote:
  • Be as secure as possible. Code carefully, do strict validity checks especially in the network input path, and use bounded buffer operations. Use privilege separation to mitigate the effects of possible security bugs.
  • Reliability is extremely important, any e-mail that OpenSMTPD has accepted has to be handled with care and must not be lost.
  • Provide a lean implementation, sufficient for a majority. Don't try to support each and every obscure usage case, but cover the typical ones.
  • Provide a powerful and easy to understand configuration language.
  • Be fast and efficient. OpenSMTPD must be able to handle large queues with reasonable performances.
Reply With Quote
  #3   (View Single Post)  
Old 23rd July 2013
EverydayDiesel EverydayDiesel is offline
Shell Scout
 
Join Date: Jan 2009
Posts: 124
Default

Thanks for the response.

Will it tell you if a particular email was delivered or rejected?
Reply With Quote
  #4   (View Single Post)  
Old 23rd July 2013
jggimi's Avatar
jggimi jggimi is offline
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 7,977
Default

l can answer a qualified "yes" because there are many types of messages: unacceptable messages between MTAs or MTA->MUA, undeliverable after receipt, mail logs, etc. If you are specific, I can answer from experience or from test.
Reply With Quote
  #5   (View Single Post)  
Old 24th July 2013
rocket357's Avatar
rocket357 rocket357 is offline
Real Name: Jonathon
Wannabe OpenBSD porter
 
Join Date: Jun 2010
Location: 127.0.0.1
Posts: 429
Default

I voted for "other" as I recently switched from Sendmail to OpenSMTPD as well. I probably don't have nearly as much experience with email servers as jggimi, but I can say that 99% of the problems I've seen with email servers is misconfiguration (open relay or the like), so the one your email admin is most comfortable with is probably the best choice =)

OpenSMTPD is pretty hard to beat in that respect.
__________________
Linux/Network-Security Engineer by Profession. OpenBSD user by choice.
Reply With Quote
  #6   (View Single Post)  
Old 24th July 2013
thomasw_ thomasw_ is offline
Real Name: thomas
Port Guard
 
Join Date: Feb 2013
Location: kimberley
Posts: 30
Default

I do agree with Jonathon's remark regarding the email admin's comfort level with the software. Then there's functionality; as long as OpenSMTPD will do what is needed for your email servering, I'd use it. I wish it had been around back when I first had to learn Sendmail. I used sendmail for over 10 years, but I have switched to OpenSMTPD. Though it is still quite new to me, there's no denying that its configuration and design make for more seamless use; it is robust but simple and elegant to learn and use when I compare it to sendmail.

I have no insight on Postfix or Qmail.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
fetching package vulnerabilities from another server pawaan NetBSD Package System (pkgsrc) 4 6th October 2013 01:54 PM
email & Opera Oko FreeBSD Ports and Packages 5 28th September 2011 10:30 AM
Email and SASL JMJ_coder General software and network 3 8th February 2009 05:09 AM
To Administrators: I am not getting any email notifications php111 Feedback and Suggestions 4 28th October 2008 01:17 PM
Anyone running an OpenBSD email server ? roundkat OpenBSD General 9 10th May 2008 03:08 AM


All times are GMT. The time now is 09:20 PM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Content copyright © 2007-2010, the authors
Daemon image copyright ©1988, Marshall Kirk McKusick