5 ms·
What should people be using instead?
by cheez 7y ago
What should people be using instead?
- _delirium 7y agoI use Postfix, which I believe has a pretty good (though not spotless) security track record. The most recent CVE for it seems to have been in 2017, and that was local privilege escalation.
- Nux 7y agoNotqmail ;)
- rurban 7y agoPeople usually don't choose it. It's the usual hosting providers mail service of choice, because it's so easy to configure for thousands of domains and users. Not just cPanel, almost everybody.
- fock 7y agoopensmptd (which seems a) to have a simple config and b) is a new implementation). Though you then still need Dovecot or co. for mailboxes (unless you prefer SSH for that). Disclaimer: just reading about opensmtp, I'm using postfix
- tannhaeuser 7y agoDovecot is an IMAP server while exim, sendmail, postfix, and opensmtp (I guess) are SMTP servers (aka MTAs). An SMTP server is for sending/forwarding mails to or through, and IMAP (or POP3 or new-fangled jmap, supposedly) is what your mail program uses to browse your received mails and mailboxes etc.
- fock 7y agoI'm well aware of this distinction, yet it's also part of the equation when looking at "how to secure my email-server"
- TheChaplain 7y agoI run Postfix. The author (Wietse) himself is very active on the mailinglist and happy to answer questions.
- brazzledazzle 7y agoPostfix is rock solid in my experience. And probably more flexible than people give it credit for. There’s a ton of configurability. I’ve used it for over a decade now and every issue I’ve run into has been my error or something else in the stack or path.
- pjmlp 7y agoAn E-Mail client not written in C to start with.
- johnr2 7y ago> An E-Mail client not written in C to start with. Exim is an SMTP server (MTA), not an email client (MUA).
- pjmlp 7y agoFair enough. Doesn't fix the buffer overflow though.
- johnr2 7y agoWhich non-C MTA would you recommend?
- jraph 7y agoSomeone using a rust implementation of telnet listening to port 25 to answer incoming requests.
- fulafel 7y agoNo experience but there seems to be one here: https://james.apache.org/ https://james.apache.org/ It has "enterprise" in the name though so it's unlikely to be very robust or secure.
- pjmlp 7y agoThunderbird, given that the mix of JavaScript + C++ should be less of a problem for buffer overflows. Otherwise, business opportunity for other language communities.
- johnr2 7y ago> Thunderbird Thunderbird is an MUA and is not a substitute for an MTA like Exim.