Ask HN: Is it possible to run your own mail server for personal use?

Re:Ask HN: Is it possible to run your own mail server for pe... by pflanze on Saturday August 13, 2016 @05:25PM (#12283175)

There was http://seclists.org/oss-sec/2015/q4/11

PS. maybe that's one of the vulnerabilities mentioned in the report (1). Anyway it's an argument for me to run Qmail/qpsmtpd instead.

(1) https://www.qualys.com/2015/10/02/opensmtpd-audit-report.txt

[ Parent | on HN ]

Re:Ask HN: Is it possible to run your own mail server for pe... by noinsight on Saturday August 13, 2016 @05:55PM (#12283265)

Yeah those issues were found in the Qualys audit. They have been fixed so the codebase should only be stronger now.

I just wish we had something that wasn't written in C.

[ Parent | on HN ]

Re:Ask HN: Is it possible to run your own mail server for pe... by nickpsecurity on Saturday August 13, 2016 @06:19PM (#12283343)

Try running any such program through Softbound + CETS or SAFEcode (already in LLVM). They turn C programs memory-safe. Should knock out most of your risk immediately with an acceptable performance hit unless your volume is really, really high. Code-Pointer Integrity at least protects control flow with max of around 10% penalty. Given they're all alpha by few developers, they need more people using them on various software and doing error reports if they fail.

[ Parent | on HN ]