[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: problem with Postfix port



On Wed, 23 Dec 1998, Jon Ribbens wrote:

> "Denis A. Doroshenko" <cyxob@tipas.lt> wrote:
> > Don't know if you observe BUGTRAQ maillist, people discuss about 
> > Postfix's security features. Well i do not agree in all points with 
> > Bernstein in his claims, that Postifx's queue processing is full of 
> > security flaws. But some of Bernstein's claims look very serious. Check 
> > out BUGTRAQ (www.geek-girl.com/bugtraq/) archives if you're interested, i 
> > didn't analize Postfix's code myself, i'm sure i will look at it later, 
> > but the discussion makes me think negative...
> 
> I would hardly call any of them "very serious". But they are unfortunate,
> and Wietse is working on fixing them. Remember that postfix is currently
> only a beta-release, and a first beta at that.
> 

	Which would lead me to believe that using this in a production
environment would be a pretty bad idea.

Scott

--
scott@lackluster.net

Your excuse is: PEBKAC (Problem Exists Between Keyboard And Chair)