On 03/31/2017 02:57 PM, Valeri Galtsev wrote:
On Fri, March 31, 2017 4:46 pm, Alice Wonder wrote:
On 03/31/2017 02:40 PM, Kenneth Porter wrote:
On 3/31/2017 2:15 PM, Valeri Galtsev wrote:
Well, it sounds like you are one of the companies with whose effort I
have
to fight constantly in my own effort to protect our users from spam...
What makes Postfix superior in fighting spam?
I actually made two independent statements:
1. That I use postfix forever (postfix was written by Wietse Venema with
security in mind).
2. That the company the OP works for judging from my reading of OP's post
makes money by facilitating the creation of spam (by their customers).
By no means I meant to say posfix is superior to sendmail in fighting
spam. Neither of them is designed for fighting spam, each of them is
merely MTA. Postfix, however, having human readable configs with rather
logical logics makes it easier (for me) to administer, therefore easier
(for me again) to integrate with anti-spam components (amavisd,
spamassassin, clamav - the last to scan for viruses - or rather virii I
should say as that is plural of latin word ;-)
Just my $0.02.
Valeri
That's pretty much why I started using postfix, I don't remember when
but I believe it was with Red Hat 7 (pre Fedora days). It was much
easier for me to configure postfix on a web application server and have
it send encrypted to their MX then it was to configure sendmail. It was
possible with sendmail but I wasted hours trying to get sendmail
configured, first time with postfix was cake.
Now I use it because of the support for opportunistic DANE (I run an
updated version, built from CentOS src.rpm but with version bump) so
that when the receiving MX has DNSSEC with a TLSA record on port 25, I
know the message is either delivered to that MX encrypted or not at all.
The attack that strips the STARTTLS causing plain text won't work when
the receiving MX is configured with DANE. Right now comcast is the only
major ISP in the united states that has MX servers configured with DANE,
but several small ones do as well, and several in Europe are as well
(especially .nl and .de mail servers)
I don't know if sendmail has been updated to support DANE yet or not,
but last time I looked, it did not.
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
https://lists.centos.org/mailman/listinfo/centos
