m.hampson@??? said:
} > I hate the trend on how MTA documention is becoming filled product
} > comparisons. I would much rather see open and frank analysis of
} > features and limitations.
} So would I. Is there such a comparison of qmail and exim.
Not an unbiased one. I guess there is some stuff on the qmail mailing
list, but I find it hard to take that too seriously - although I think
qmail itself is revolutionary and an impressive piece of work, its just
that it appears to card round some underlying assumptions that I can't
work with (and the configuration appears to be completely unsuitable for
our systems).
I guess that we need to find a reasonable set of performance tests for a
mailer (the qmail/vmail ones are almost stress tests - which are valuable,
but also information on effects on a machine at moderate load would be
useful - not everyone runs to serious mail servers).
Then there is the issue of features, and as part of that, although
important enough to be a section of its own is security.
I think the issue of security is what would let exim down. A large setuid
(root) program is always likely to be less secure than a series of much
smaller modules run under a tighter security regime. The stack smashing
attack on exim publicised a couple of months back is rather embarrassing,
and unlike Dan Bernstein and friends I would not currently be willing to
put up a bounty against exim security bugs.
I do mean, as soon as I get round to it, to add a couple of things to exim
which would mean us dropping the setuid root side of it, but my setup is
rather unusual (no local users, no user modifiable stuff etc).
Nigel.
--
[ Nigel.Metheringham@??? - Systems Software Engineer ]
[ Tel : +44 113 251 6012 Fax : +44 113 224 0003 ]
[ Friends don't let friends use sendmail! ]
--
* This is sent by the exim-users mailing list. To unsubscribe send a
mail with subject "unsubscribe" to exim-users-request@???
* Exim information can be found at http://www.exim.org/
