Welcome!

Linux Containers Authors: Pat Romanski, Liz McMillan, Elizabeth White, Yeshim Deniz, Amit Gupta

Related Topics: Linux Containers

Linux Containers: Article

qmail

Delivering security and performance

In the area of Mail Transfer Agents (MTAs), most people would look at sendmail as the most popular solution in the open source/Linux arena. However, it's not the only solution. Although postfix is popular with a number of administrators (especially those with multiple domains and many users), qmail is the unknown underdog that the experts use.

John Levine, well-known book author and Internet guru, talks about his new book, qmail, which covers the entire gamut of qmail administration from installation to configuration and filtering.

LWM: Another title in the successful mail-management series. Can you tell me the main benefits of qmail over other MTAs such as sendmail?

John Levine: qmail's two strongest points are security and performance. qmail was designed and written by a computer security geek, and is small enough so that if you want, you can read all the source. There's never been a security bug in qmail, that is, one that lets one user damage another's mail or get access to unauthorized parts of the system.

In the kind of environment for which it was designed, with lots of bandwidth, qmail pumps out mail at a phenomenal rate. Dan Bernstein's original motivation for writing qmail was to get mailing list mail delivered fast, and it does that really well.

qmail has always struck me as complex to set up, but easier to manage in the long term. Is that a fair assessment?

It's not so much that it's complex to set up but that it's utterly different from sendmail. The basic configuration is pretty simple, but it's in a bunch of separate files rather than the barococo majesty of sendmail.cf.

The other problem in setting up qmail is due to its peculiar license that doesn't permit people to redistribute modified versions, so you have to pick up the original 1998 code and patch it to add new stuff. Fortunately, earlier this year several members of the qmail community put together netqmail, which combines qmail with a set of widely used patches and it's all you need.

Spam and UBE are obviously big headaches for managers today. What features does qmail support to help combat this?

Nothing built in, but just about every anti-spam scheme you ever heard of is available as a qmail add-on. Dan offers a program called rbldnsd that uses DNS blocklists like the SBL, and people add spam filters such as procmail, greylists, you name it. qmail's modular structure makes it easy to splice new features in.

Do you think there is a solution to spam, or is it something we'll all just have to live with?

There's certainly no magic bullet, but I think that combinations of technical and legal measures will eventually get it under control, although never make it completely go away.

You're a long-time author, well known for a large number of titles and the Internet Gurus group. Can I ask you how you manage the mountains of e-mail you must receive?

It's all standard Unix tools. I use procmail to sort my mail, Pine to read it, and I put most of the mailing lists to local newsgroups so I can read them with trn.

qmail handles a dizzying array of potential delivery and mail routing options. What's the best way to approach a new installation?

Start with a basic installation, then figure out what extra stuff you need. The configuration is mostly driven out of text files so it's easy enough to add new bits to your configuration. You'll also find that once you get some experience with qmail, what you want to add will be more evident.

Migration from an existing setup seems even more complicated. Is there some way of easing the migration from sendmail or postfix?

 Well, there is a chapter in my book on it. You have to figure out what your current setup is doing, then run down the list and make qmail do all the things you care about. I've often found that old sendmail setups have mountains of cruft, and you can throw a lot of it away when you see what your mail system is really doing.

You cover both IMAP and POP in your book. Which do you recommend?

Depends on your usual connection. If it's on a LAN or broadband, IMAP rocks, particularly if you're using one of the Maildir-based IMAP servers (Courier or binc) that supports multiple simultaneous sessions. I can have Pine on my BSD box, Thunderbird on my PC, and Web mail all open at once, and it just works, all viewing the same mailboxes.

On the other hand, if you do dialup, you're still better off with POP since IMAP can be painfully slow over a slow connection.

Could you tell us what we can expect to see from you next?

Internet for Dummies, fabulous all new 10th edition coming next summer.

About John R. Levine

John R. Levine writes, speaks, and consults on the Internet, electronic mail, cybersecurity, and related topics (www.johnlevine.com).

More Stories By Martin C. Brown

Martin C. Brown is a former IT director with experience in cross-platform integration. A keen developer, he has produced dynamic sites for blue-chip customers, including HP and Oracle, and is the technical director of Foodware.net. Now a freelance writer and consultant, MC, as he is better known, works closely with Microsoft as an SME; has a regular column on both ServerWatch.com and IBM's DeveloperWorks Grid Computing site; is a core member of the AnswerSquad.com team; and has written books such as XML Processing with Perl, Python and PHP, and the Microsoft IIS 6 Delta Guide.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


@ThingsExpo Stories
More and more brands have jumped on the IoT bandwagon. We have an excess of wearables – activity trackers, smartwatches, smart glasses and sneakers, and more that track seemingly endless datapoints. However, most consumers have no idea what “IoT” means. Creating more wearables that track data shouldn't be the aim of brands; delivering meaningful, tangible relevance to their users should be. We're in a period in which the IoT pendulum is still swinging. Initially, it swung toward "smart for smart...
IoT is rapidly becoming mainstream as more and more investments are made into the platforms and technology. As this movement continues to expand and gain momentum it creates a massive wall of noise that can be difficult to sift through. Unfortunately, this inevitably makes IoT less approachable for people to get started with and can hamper efforts to integrate this key technology into your own portfolio. There are so many connected products already in place today with many hundreds more on the h...
Here are the Top 20 Twitter Influencers of the month as determined by the Kcore algorithm, in a range of current topics of interest from #IoT to #DeepLearning. To run a real-time search of a given term in our website and see the current top influencers, click on the topic name. Among the top 20 IoT influencers, ThingsEXPO ranked #14 and CloudEXPO ranked #17.
Join IBM November 1 at 21st Cloud Expo at the Santa Clara Convention Center in Santa Clara, CA, and learn how IBM Watson can bring cognitive services and AI to intelligent, unmanned systems. Cognitive analysis impacts today’s systems with unparalleled ability that were previously available only to manned, back-end operations. Thanks to cloud processing, IBM Watson can bring cognitive services and AI to intelligent, unmanned systems. Imagine a robot vacuum that becomes your personal assistant tha...
As data explodes in quantity, importance and from new sources, the need for managing and protecting data residing across physical, virtual, and cloud environments grow with it. Managing data includes protecting it, indexing and classifying it for true, long-term management, compliance and E-Discovery. Commvault can ensure this with a single pane of glass solution – whether in a private cloud, a Service Provider delivered public cloud or a hybrid cloud environment – across the heterogeneous enter...
The Jevons Paradox suggests that when technological advances increase efficiency of a resource, it results in an overall increase in consumption. Writing on the increased use of coal as a result of technological improvements, 19th-century economist William Stanley Jevons found that these improvements led to the development of new ways to utilize coal. In his session at 19th Cloud Expo, Mark Thiele, Chief Strategy Officer for Apcera, compared the Jevons Paradox to modern-day enterprise IT, examin...
DXWorldEXPO LLC, the producer of the world's most influential technology conferences and trade shows has announced the 22nd International CloudEXPO | DXWorldEXPO "Early Bird Registration" is now open. Register for Full Conference "Gold Pass" ▸ Here (Expo Hall ▸ Here)
Major trends and emerging technologies – from virtual reality and IoT, to Big Data and algorithms – are helping organizations innovate in the digital era. However, to create real business value, IT must think beyond the ‘what’ of digital transformation to the ‘how’ to harness emerging trends, innovation and disruption. Architecture is the key that underpins and ties all these efforts together. In the digital age, it’s important to invest in architecture, extend the enterprise footprint to the cl...
DXWorldEXPO LLC announced today that All in Mobile, a mobile app development company from Poland, will exhibit at the 22nd International CloudEXPO | DXWorldEXPO. All In Mobile is a mobile app development company from Poland. Since 2014, they maintain passion for developing mobile applications for enterprises and startups worldwide.
DXWorldEXPO LLC announced today that ICC-USA, a computer systems integrator and server manufacturing company focused on developing products and product appliances, will exhibit at the 22nd International CloudEXPO | DXWorldEXPO. DXWordEXPO New York 2018, colocated with CloudEXPO New York 2018 will be held November 11-13, 2018, in New York City. ICC is a computer systems integrator and server manufacturing company focused on developing products and product appliances to meet a wide range of ...
In an era of historic innovation fueled by unprecedented access to data and technology, the low cost and risk of entering new markets has leveled the playing field for business. Today, any ambitious innovator can easily introduce a new application or product that can reinvent business models and transform the client experience. In their Day 2 Keynote at 19th Cloud Expo, Mercer Rowe, IBM Vice President of Strategic Alliances, and Raejeanne Skillern, Intel Vice President of Data Center Group and ...
"We are a well-established player in the application life cycle management market and we also have a very strong version control product," stated Flint Brenton, CEO of CollabNet,, in this SYS-CON.tv interview at 18th Cloud Expo at the Javits Center in New York City, NY.
In his session at @ThingsExpo, Arvind Radhakrishnen discussed how IoT offers new business models in banking and financial services organizations with the capability to revolutionize products, payments, channels, business processes and asset management built on strong architectural foundation. The following topics were covered: How IoT stands to impact various business parameters including customer experience, cost and risk management within BFS organizations.
While the focus and objectives of IoT initiatives are many and diverse, they all share a few common attributes, and one of those is the network. Commonly, that network includes the Internet, over which there isn't any real control for performance and availability. Or is there? The current state of the art for Big Data analytics, as applied to network telemetry, offers new opportunities for improving and assuring operational integrity. In his session at @ThingsExpo, Jim Frey, Vice President of S...
With the introduction of IoT and Smart Living in every aspect of our lives, one question has become relevant: What are the security implications? To answer this, first we have to look and explore the security models of the technologies that IoT is founded upon. In his session at @ThingsExpo, Nevi Kaja, a Research Engineer at Ford Motor Company, discussed some of the security challenges of the IoT infrastructure and related how these aspects impact Smart Living. The material was delivered interac...
Andrew Keys is Co-Founder of ConsenSys Enterprise. He comes to ConsenSys Enterprise with capital markets, technology and entrepreneurial experience. Previously, he worked for UBS investment bank in equities analysis. Later, he was responsible for the creation and distribution of life settlement products to hedge funds and investment banks. After, he co-founded a revenue cycle management company where he learned about Bitcoin and eventually Ethereal. Andrew's role at ConsenSys Enterprise is a mul...
Amazon started as an online bookseller 20 years ago. Since then, it has evolved into a technology juggernaut that has disrupted multiple markets and industries and touches many aspects of our lives. It is a relentless technology and business model innovator driving disruption throughout numerous ecosystems. Amazon’s AWS revenues alone are approaching $16B a year making it one of the largest IT companies in the world. With dominant offerings in Cloud, IoT, eCommerce, Big Data, AI, Digital Assista...
In his session at Cloud Expo, Alan Winters, U.S. Head of Business Development at MobiDev, presented a success story of an entrepreneur who has both suffered through and benefited from offshore development across multiple businesses: The smart choice, or how to select the right offshore development partner Warning signs, or how to minimize chances of making the wrong choice Collaboration, or how to establish the most effective work processes Budget control, or how to maximize project result...
The Founder of NostaLab and a member of the Google Health Advisory Board, John is a unique combination of strategic thinker, marketer and entrepreneur. His career was built on the "science of advertising" combining strategy, creativity and marketing for industry-leading results. Combined with his ability to communicate complicated scientific concepts in a way that consumers and scientists alike can appreciate, John is a sought-after speaker for conferences on the forefront of healthcare science,...
In his keynote at 19th Cloud Expo, Sheng Liang, co-founder and CEO of Rancher Labs, discussed the technological advances and new business opportunities created by the rapid adoption of containers. With the success of Amazon Web Services (AWS) and various open source technologies used to build private clouds, cloud computing has become an essential component of IT strategy. However, users continue to face challenges in implementing clouds, as older technologies evolve and newer ones like Docker c...