admin Site Admin
Joined: 21 Jun 2005 Posts: 209
|
Posted: Sat Aug 19, 2006 6:39 pm Post subject: Moving forward with Qmail, the least hacky way |
|
|
Hey all,
I've been using qmail for a long time, and love it. However I've
got some mixed feelings about how to move forward with things such
as SMTP Auth.
I wrote an email to the author a couple months ago inquiring about
the future of Qmail but never received an answer, I guess I'm not
important enough!
These days I'm using Gentoo, and it applies the following enourmous
list of patches:
http://gentoo.chem.wisc.edu/gentoo/distfiles/qmailqueue-patch
http://qmail.null.dk/big-todo.103.patch
http://www.jedi.claranet.fr/qmail-link-sync.patch
http://gentoo.chem.wisc.edu/gentoo/distfiles/big-concurrency.patch
http://www.suspectclass.com/~sgifford/qmail/qmail-1.03-0.0.0.0-0.2.patch
http://david.acz.org/software/sendmail-flagf.patch
http://gentoo.chem.wisc.edu/gentoo/distfiles/qmail-1.03-qmtpc.patch
http://gentoo.chem.wisc.edu/gentoo/distfiles/qmail-smtpd-relay-reject
http://gentoo.chem.wisc.edu/gentoo/distfiles/qmail-local-tabs.patch
http://www.shupp.org/patches/qmail-maildir++.patch
ftp://ftp.pipeline.com.au/pipeint/sources/linux/WebMail/qmail-date-localtime.patch.txt
ftp://ftp.pipeline.com.au/pipeint/sources/linux/WebMail/qmail-limit-bounce-size.patch.txt
http://www.ckdhr.com/ckd/qmail-103.patch
http://www.arda.homeunix.net/store/old_software/qregex-starttls-2way-auth.patch
http://www.soffian.org/downloads/qmail/qmail-remote-auth-patch-doc.txt
http://gentoo.chem.wisc.edu/gentoo/distfiles/qmail-gentoo-1.03-r12-badrcptto-morebadrcptto-accdias.diff.bz2
http://www.dataloss.nl/software/patches/qmail-popupnofd2close.patch
http://js.hu/package/qmail/qmail-1.03-reread-concurrency.2.patch
http://www.mcmilk.de/qmail/dl/djb-qmail/patches/08-capa.diff
http://www.leverton.org/qmail-hold-1.03.pat.gz
http://gentoo.chem.wisc.edu/gentoo/distfiles/netscape-progress.patch
http://www-dt.e-technik.uni-dortmund.de/~ma/djb/qmail/sendmail-ignore-N.patch
http://gentoo.chem.wisc.edu/gentoo/distfiles/qmail-1.03-moreipme-0.6pre1-gentoo.patch
http://hansmi.ch/download/qmail/qmail-relaymxlookup-0.3.diff
I'm disturbed by the sheer quantity, but I do require a few things,
most notable SMTP AUTH and SSL (would also like to add CHKUSER in
to the mix). I'm using a single qmail installation for just under
200 domains and would like the room to grow to thousands. Maybe
some of the above patches are required for that, maybe not. I
sincerely wish DJB would start working on Qmail again and to
address everything that the patches do in a proper DJB-approved
manner, but I suspect that will never happen.
So what I'm wondering is, is it possible (and sane) to use a
vanilla, unpatched qmail, along with tools like mailfront (I don't
really understand how mailfront works) and avoid patching
altogether for large installations? I do all of my virus and spam
filtering with my MDA, maildrop. If I could add mailfront which
would not require patching qmail for SMTP AUTH that would be ideal
- any ideas for CHKUSER? Is stunnel the best thing for SSL? I've
heard bad things about it.
I also use vpopmail, while it's quite useful, I don't need 9/10ths
of it's features, and the code is far from elegant. Is there a way
to add basic virtual domain support to vanilla qmail to enable
dumping vpopmail? I know than qmail has some basic built-in
virtual domain support (which I guess is what makes vpopmail
possible in the first place) but the documentation on it is quite
vague and I don't really understand how it works or whether it
would be sufficient for this sort of scale.
I prefer to stick with pure DJB-written tools as much as possible,
and follow the philosophy of using many small programs instead of
bigger, bloated, less secure ones.
Sorry for the length of this post - any advice greatly appreciated!
Cheers,
--
Casey Allen Shobe | http://casey.shobe.info
cshobe@seattleserver.com | cell 425-443-4653
AIM & Yahoo: SomeLinuxGuy | ICQ: 1494523
SeattleServer.com, Inc. | http://www.seattleserver.com |
|