topic Re: sendmail 8.12.8 anyone? in Operating System - HP-UX

sendmail 8.12.8 anyone?

Berlene Herren — Mon, 10 Mar 2003 17:27:23 GMT

This is NOT a promise that HP will port 8.12.8, but it may help :-)

How many in our community would want sendmail 8.12.8 p orted to HPUX? What features would you use?

http://www.sendmail.org/~ca/email/doc8.12/RELEASE_NOTES

Tks
Berlene

Re: sendmail 8.12.8 anyone?

someone_4 — Mon, 10 Mar 2003 18:17:45 GMT

Hi Berlene,

To me it doesnt matter as long as it has "the fix" built in. And I dont have patch it up when I install it.

Richard

Re: sendmail 8.12.8 anyone?

Robert Gamble — Mon, 10 Mar 2003 20:05:47 GMT

I'll second that opinion.

hth

Re: sendmail 8.12.8 anyone?

Christopher Caldwell — Mon, 10 Mar 2003 22:55:53 GMT

We'd love it.

Most of the changes from 8.11 -> 8.12 seem to be bug related, but ...

In 8.12, we'd use
-hooks to milter for virus scanning and mail filtering
-RBL hooks
-virtuser entire domain hooks

above what's standard ...

"Keeping up" with the open source version should help with tech support/_perception_ of security issues.

Generally, sendmail.org seems to provide security fixes by rev'ing the code (e.g. 8.12.7 -> 8.12.8) in preference to adding a patch [though patches are available].

Think back to older bind - though HP addressed the bind security issues through PHNE_*, I can't tell you how many times we've had security quacks say "I can't believe you're running bind 4.9.7, it's so insecure".

From a support perspective, many of the things customers try to "hack" into older sendmail are probably easier [and well documented] in the sendmail community (e.g. comp.mail.sendmail) iff, you're running current version of sendmail.

I've found that of late, updating sendmail on HP has been trivial; therefore aligning with the open source revisions would help us keep up with the trickle of new features and the security _perception_.

Re: sendmail 8.12.8 anyone?

Kevin Epstein — Tue, 11 Mar 2003 07:15:09 GMT

Hi,

We're currently working on a project where we've downloaded the sendmail source, and built our own version. If HP were to keep on track with the latest releases of Sendmail for lets say HP-UX 11.0 and up we might not need to build our own version

Just my 2c worth

Re: sendmail 8.12.8 anyone?

benoit Bruckert — Tue, 11 Mar 2003 08:24:17 GMT

Hi,
Due to the latest vulnerability, I'm studying to apply the patch (or install 8.12.8). But for this I'll make it from sources...
Options i used is the milter interface, virtuser..
Of course I'm sure that most of the users would like to have the sendmail patch very quickly..

regards
Benoit

Re: sendmail 8.12.8 anyone?

Steven E. Protter — Fri, 14 Mar 2003 05:31:18 GMT

I would use it IMMEDIATELY.

It would make me a happier customer.

I would explore any new feature it offered particularly with regards to security.

SEP

: wink wink, when to you guys start?

Re: sendmail 8.12.8 anyone?

Christian Gebhardt — Fri, 14 Mar 2003 06:12:48 GMT

Hi

actually we install the latest patch on all machines, but we would install 8.12.8 if it is available as a depot.

We have no plans to use new features.

Chris

Re: sendmail 8.12.8 anyone?

Donny Jekels — Sun, 16 Mar 2003 23:08:53 GMT

IMMEDIATE - not tomorrow, today it will be tested and installed.

Re: sendmail 8.12.8 anyone?

Michael Steele_2 — Sun, 16 Mar 2003 23:41:14 GMT

We stay current minus 6 unless there's a huge reason, like this one.

Re: sendmail 8.12.8 anyone?

David_246 — Mon, 17 Mar 2003 07:35:03 GMT

Hi Berlene,

We would test the new version first, but then we would definitly implement 8.12.8

Regs David