sendmail 8.12.8 anyone?

[Berlene Herren]

This is NOT a promise that HP will port 8.12.8, but it may help :-)

How many in our community would want sendmail 8.12.8 p orted to HPUX? What features would you use?

http://www.sendmail.org/~ca/email/doc8.12/RELEASE_NOTES


Tks
Berlene

[someone_4]

Hi Berlene,

To me it doesnt matter as long as it has "the fix" built in. And I dont have patch it up when I install it.


Richard

[Robert Gamble]

I'll second that opinion.

hth

[Christopher Caldwell]

We'd love it.

Most of the changes from 8.11 -> 8.12 seem to be bug related, but ...

In 8.12, we'd use
-hooks to milter for virus scanning and mail filtering
-RBL hooks
-virtuser entire domain hooks

above what's standard ...

"Keeping up" with the open source version should help with tech support/_perception_ of security issues.

Generally, sendmail.org seems to provide security fixes by rev'ing the code (e.g. 8.12.7 -> 8.12.8) in preference to adding a patch [though patches are available].

Think back to older bind - though HP addressed the bind security issues through PHNE_*, I can't tell you how many times we've had security quacks say "I can't believe you're running bind 4.9.7, it's so insecure".

From a support perspective, many of the things customers try to "hack" into older sendmail are probably easier [and well documented] in the sendmail community (e.g. comp.mail.sendmail) iff, you're running current version of sendmail.

I've found that of late, updating sendmail on HP has been trivial; therefore aligning with the open source revisions would help us keep up with the trickle of new features and the security _perception_.

[Kevin Epstein]

Hi,

We're currently working on a project where we've downloaded the sendmail source, and built our own version. If HP were to keep on track with the latest releases of Sendmail for lets say HP-UX 11.0 and up we might not need to build our own version

Just my 2c worth

[benoit Bruckert]

Hi,
Due to the latest vulnerability, I'm studying to apply the patch (or install 8.12.8). But for this I'll make it from sources...
Options i used is the milter interface, virtuser..
Of course I'm sure that most of the users would like to have the sendmail patch very quickly..

regards
Benoit

[Steven E. Protter]

I would use it IMMEDIATELY.

It would make me a happier customer.

I would explore any new feature it offered particularly with regards to security.

SEP

: wink wink, when to you guys start?

[Christian Gebhardt]

Hi

actually we install the latest patch on all machines, but we would install 8.12.8 if it is available as a depot.

We have no plans to use new features.

Chris

[Donny Jekels]

IMMEDIATE - not tomorrow, today it will be tested and installed.

[Michael Steele_2]

We stay current minus 6 unless there's a huge reason, like this one.