> Anyones success stories etc. on running exim on
> webservers would also be appreciated.
The best solution I have implemented in several attempts was to
a) always use suexec (if a kludged one that called userv:
http://www.chiark.greenend.org.uk/~ian/userv/) Thus all cgi ran as a
user unique to that website.
b) have the webservers chrooted, and separate from each other
c) use ssmtp to provide 'smarthosting' to localhost
d) Have one version of exim running outside the webserver chroots.
Your setup appears to not be using a, which I think is a bad thing. This
means that you can't easily trace which websites caused email to be emitted.
> Ollie
Julian
