4 ms·
Dovecot, Roundcube, ClamAV, Rspamd are all battle-tested and reasonable choices, but the choice of Haraka, a Node.js-based SMTP server, feels dubious. Why not
by sam_lowry_ 4y ago
Dovecot, Roundcube, ClamAV, Rspamd are all battle-tested and reasonable choices, but the choice of Haraka, a Node.js-based SMTP server, feels dubious.
Why not exim or something similarly solid and well-understood?
- cvalka 4y agoPostfix
- dubcanada 4y agoWhat is wrong with Haraka it's like 10 years old?
- sam_lowry_ 4y agoNode.js
- dsr_ 4y agoI generally recommend replacing Roundcube with SnappyMail (https://snappymail.eu https://snappymail.eu) -- not having to deal with a database by not maintaining much state is a win. I was expecting to see Postfix instead of Haraka. I wouldn't have been very surprised at exim.
- rnk 4y agoThey do have a nice list of features: SMTP + IMAP + POP3 + Antispam + Antivirus Web administration + Web email, ...on your server in ~5 minutes I was running helm (a hardware device plus mail with many of those features) but they couldn't get anywhere in the marketplace.
- stonogo 4y agoWhat is solid about exim? Not only does it have more CVEs than any other mail transport agent (including four, all critical or high, just last year), they tend to respond by doing infamous things like releasing security patches on Christmas morning. I'm not the biggest fan of Haraka, but exim is easily the biggest security hassle you can ask for in an email server.
- anonanon1234 4y agoWe accept a substantial volume of mail using haraka. It's not perfect but it's certainly sufficient.
- Avamander 4y ago> Why not exim or something similarly solid and well-understood? That's the goal, to avoid things as "solid" as exim.