summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--README.SENDMAIL24
1 files changed, 24 insertions, 0 deletions
diff --git a/README.SENDMAIL b/README.SENDMAIL
index 092e80879..a48f13ed4 100644
--- a/README.SENDMAIL
+++ b/README.SENDMAIL
@@ -2,6 +2,19 @@ Mailman - The GNU Mailing List Management System
Copyright (C) 1998,1999,2000,2001,2002 by the Free Software Foundation, Inc.
59 Temple Place - Suite 330, Boston, MA 02111-1307, USA
+SECURITY NOTE
+
+ You may be tempted to set the DELIVERY_MODULE configuration
+ variable in mm_cfg.py to `Sendmail' when using the Sendmail MTA.
+ Don't. The Sendmail.py module is misnamed -- it's really a
+ command line based message handoff scheme as opposed to the SMTP
+ scheme used in SMTPDirect (the default). Sendmail.py has known
+ security holes and is provided as a proof-of-concept only. If you
+ are having problems using SMTPDirect.py please fix those instead
+ of using Sendmail.py, or you may open your system up to security
+ exploits.
+
+
SENDMAIL `smrsh' COMPATIBILITY
Many newer versions of Sendmail come with a restricted execution
@@ -42,6 +55,17 @@ INTEGRATING SENDMAIL AND MAILMAN
virtusertable - a sample for RFC 2142 address exceptions
+PERFORMANCE NOTES
+
+ One of the surest performance killers for Sendmail users is when
+ Sendmail is configured to synchronously verify the recipient's
+ host via DNS. If it does this for messages posted to it from
+ Mailman, you will get horrible performance. Since Mailman usually
+ connects via localhost (i.e. 127.0.0.1) to the SMTP port of
+ Sendmail, you should be sure to configure Sendmail /not/ to do DNS
+ verification synchronously for localhost connections.
+
+
Local Variables:
mode: text