Re: [Sheflug] Re: Microsoft Outlook to Redhat 9 Mozilla

[Lesley Anne Binks <lesley.binks [at] xxxxxxxxx>]

Richard Ibbotson <richard [at] sheflug.co.uk> wrote :

> Lesley
> 
> > > I'm on Mozilla 1.7.3 and it only imports other Netscape/Mozilla
> > > folders.  Probably why I'm using Kmail.  I prefer Pine with
> > > fetchmail and postfix for mail bit that's a bit tough for a first
> > > time user.
> >
> > I've read reports that one of fetchmail/postfix is considered buggy
> > and 'full of security holes'  and that exim is better.
> >
> > Any comments?
> 
> 
> Ummm..... lets see..  if you want to talk about bugs and security 
> holes then I can easily say that you can rant on forever and still 
> only touch the sides of the glass with an introductory discussion.
> I can write four pages in a magazine just about spamassassin and 
> related software - such as procmail - shows you how much hard work a 
> short discussion can generate.
> 
> Fetchmail and bugs ?  It works for me :)  That's the most I can say.  
> Used with SSL for mail download in the way that I use it there aren't 
> any problems.  But, if you want to mention bugs I'll listen to it :)  
> Just that I don't have any problems with it for personal use.
> 
> I think if you were to mention the world of commerce then another 
> argument and or issues comes into play.  Although, most people I've 
> met who use Linux in business are happy enough with  the way that 
> their mail systems work.  

I was concerned about the view that fetchmail/postfix seemed to be considered more of a security risk than exim.  Part of it is to do with the programming methods; there are ways to program securely  :

http://archive.ncsa.uiuc.edu/General/Grid/ACES/security/programming/#C

and 

http://www.securityfocus.com/popups/forums/secprog/secure-programming.shtml

for how to avoid buffer overflows for instance :)

Cross referencing another thread, I was annoyed that SuSE seems to insist on the fetchmail/postfix combination and I couldn't go to exim because of dependency conflicts.  (Why include a package that cannot be installed without such conflicts arising?)

> 
> You get bugs and security holes in all software regardless of whatever 
> the operating system is :)  One of the nice things about Linux is the 
> complete lack of virus ridden e-mail.  All those trendy virus 
> infected attached files have no effect on me at all.  A feature of 
> the 20th century and not the 21st :)
> 

:) I've always thought the e-mail viruses tended to be spawned by people using MS Outlook or Outlook Express combined with the delights of Active-X and auto-execute capability.  

There are other mail clients that can be used on a 'doze system which are, imho, safer :)

The daftest thing I have seen in recent years is one institution I was at making the decision that all Windows machines should use Outlook as the preferred client! 

Regards

Lesley




___________________________________________________________________

Sheffield Linux User's Group -
http://www.sheflug.co.uk/mailfaq.html

  GNU the choice of a complete generation.