The List has returned! [x-adr]

Frank Wiles frank at wiles.org
Thu Jul 31 19:23:43 CDT 2003


On Thu, 31 Jul 2003 14:05:02 -0500
Garrett Goebel <garrett at scriptpro.com> wrote:

> Gerald Combs wrote:
> > On Thu, 31 Jul 2003, Frank Wiles wrote:
> > > 
> > > Also, the days when Sendmail was a big security risk are 
> > > pretty much gone.  Yes I will admit it has had a checkered
> > > past, but honestly how many Sendmail specific security
> > > holes have there been in the last year? 
> > 
> > According to cve.mitre.org, there have been several:
> > 
> >   http://www.cve.mitre.org/cgi-bin/cvekey.cgi?keyword=sendmail
> > 
> 
> And how many in qmail? Zero.
> 
> While his own license is fairly open (more open than Netscape's was
> when RedHat was distributing its binaries)... its pretty obvious DJB
> has something against gnu and open source licenses. I wonder what it
> is? Loss of control over _his_ code? Does anyone know of anything he's
> written directly on this point?
> 
> Compile from source distributions like Gentoo are practially
> unrestricted by DJB's licensing terms. He does explicitly allow you to
> download and compile his source. And makes explicit your rights to do
> whatever you want with it thereafter
> (http://cr.yp.to/softwarelaw.html). As far as I've read, he just won't
> allow modified binaries.
> 
> It just seems kind of sad that you wind up with multiple series of
> patches against qmail... like some throw-back to minix. That will take
> you only so far.
>

  I tire of this argument quickly, so this will probably be my last 
  contribution to this thread. 

  Yes you are right qmail has had zero.  Personally, I do not see
  that as a reason to switch.
  
  Yes the ability to distributed modified binaries is a small one, 
  but like I said I don't like his license because it is not Open
  Source. 

  Also, while it is true they haven't had a security vulnerability, 
  I have seen no other feature or reason why I would want to switch
  to qmail. Like anything else it's just opinion.  Much like I see
  very little need for a language like Java (no flame wars please), 
  warning labels on hot coffee, telemarketers, etc. 

  Back to the original question of reasons to use Sendmail over other
  alternatives, I forgot one.  Milter.  Milter is a wonderful way to 
  modify/spam filter/virus scan messages as they are being accepted
  by the MTA. The fact that milter exists would keep me with Sendmail
  if nothing else. 

 ---------------------------------
   Frank Wiles <frank at wiles.org>
   http://frank.wiles.org
 ---------------------------------




More information about the Kclug mailing list