[996] in linux-security and linux-alert archive
Re: [linux-security] sendmail security
daemon@ATHENA.MIT.EDU (Paulo de Tarso)
Sat Aug 10 13:39:48 1996
Date: Fri, 9 Aug 1996 19:07:47 -0300 (GMT-0300)
From: Paulo de Tarso <ptarso@communiplex.com>
To: Nathan Ramella <floyd@ecst.csuchico.edu>
Cc: linux-security@tarsier.cv.nrao.edu
In-Reply-To: <199608081858.LAA15240@corpse.ecst.csuchico.edu>
On Thu, 8 Aug 1996, Nathan Ramella wrote:
> sendmail is used on probably 80%-90% of all UNIX machines
Would someone please comment security issues for sendmail V8 versus
sendmail + IDA? Are all security patches for sendmail V8 also applied to
sendmail+IDA? Is the latter a good and safe version? And: being the IDA
version numbered 5.67 (if memory helps) and sendmail numbered 8.xx, are
there important functionalities missing?
[REW: As far as I know, IDA stopped being maintained quite a while
ago, and I don't know wether important patches have been "retrofitted"
to IDA. There have been several sendmail fixes since IDA stopped being
upgraded. I'm told that sendmail 8.7.x now supports features that
allows migration from an IDA setup.
Please correct me if I'm wrong: I've never worked wtih IDA, I've never
tried locating a modern IDA, I've never tried migrating from IDA to 8.7.x.]
Thanks,
Paulo.