-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Duane Clark wrote:

>The typical desktop user does not need sendmail. Most of us are getting 
>our email via pop, and sending mail with Mozilla or some other mail client.
>
>If someone does not know whether they need sendmail, then the answer is 
>real easy. You don't need it. So turn it off.

Maybe ... but fetchmail (by default) wants it, so to the extent that
fetchmail is popular, it's useful to have sendmail working
out-of-the-box.  Of course, you can configure fetchmail to use the MDA 
directly, but that's not as easy for novices.

A bigger problem, in my experience (and beyond the scope of this
discussion, not that this will stop me) is some mail clients' reliance
on local sendmail (sometimes configurable, sometimes not), because many
ISPs are now (justifiably) not allowing outbound 25 except to their own
mail exchangers.  This means, for example, that if your ISP does this,
then on an out-of-the-box Red Hat installation, neither mutt, pine, nor
emacs will be able to send mail at all until the user learns how to
either configure the client to use the ISP's relay (Pine can do this,
emacs can't, and I'm not sure about mutt), or configure sendmail to be a
null forwarder (not a job for a newbie, but then again, neither is emacs
;-).

As far as security goes, having sendmail running and only locally
accessible (the default case with Red Hat) is not a problem unless you
host untrusted local users who might take advantage of its insecurities.

- -d

- -- 
David Talkington

PGP key: http://www.prairienet.org/~dtalk/0xCA4C11AD.pgp


-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8
Comment: Made with pgp4pine 1.75-6

iQA/AwUBPQjxdL9BpdPKTBGtEQKqsACg8nHekXItSdUs8w3LDdzyg92bYJEAn1xQ
fEZ/r8XExAz587q4g9U83dnc
=M7Ih
-----END PGP SIGNATURE-----




_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to