Sendmail

From Wikipedia, the free encyclopedia

Sendmail
Sendmail logo
Developer: Sendmail, Inc.
Latest release: 8.14.0 / 2007-01-31
Preview release: MeTA1-1.0.PreAlpha13.0 /
OS: Cross-platform
Use: Mail transfer agent
License: BSD-like license ("Sendmail License")
Website: http://www.sendmail.org/

Sendmail is a mail transfer agent (MTA) that is a well known project of the open source, free software and Unix communities, which is distributed both as free software and proprietary software.

Contents

[edit] History and use

A descendant of the original ARPANET delivermail application, Sendmail is a remarkably flexible program, supporting many kinds of mail transfer and delivery including the overwhelmingly popular SMTP. The original version of Sendmail was written by Eric Allman in the early 1980s at UC Berkeley, who had also written delivermail previously. Delivermail was shipped in 1979 with 4.0 and 4.1 BSD. Sendmail was shipped with BSD 4.1c in 1983 (the first BSD version to include TCP/IP).

Sendmail remains the most popular MTA on the Internet. Its popularity is due in part to its position as the standard MTA under most variants of the Unix operating system. According to one study, as of November 2001 approximately 42% of the publicly reachable mail servers on the Internet were running Sendmail[citation needed]. More recent surveys have suggested a decline, with 32% of mail servers in January 2007 detected as running Sendmail in a study performed by E-Soft, Inc. [1] Sendmail is trailed by Microsoft Exchange Server, Exim, and Postfix, these four being the only mail servers with more than 10% of the installed base.

As Sendmail is a complex package with a great deal of functionality, it can be difficult for an inexperienced system administrator to configure. Documentation of the Sendmail system has not always kept pace with changes to the administrative interfaces; despite the availability of macro-based configuration tools, many support websites instruct administrators to directly modify configuration files that should instead be managed by administrative tools. The failure of vendors to update their support materials contributes to the perception of Sendmail as a difficult-to-configure package[citation needed].

The complexity of Sendmail does provide benefits, in the form of flexibility and scalability. Sendmail supports a variety of mail transfer protocols, including SMTP, ESMTP, DECnet's mail11, HylaFax, QuickPage and UUCP. Additionally, Sendmail v8.12 as of September 2001 introduced support for milters - external mail filtering programs that can participate in each step of the SMTP conversation.

[edit] Security

Sendmail originated in the early days of the modern Internet, an era when security was not a primary consideration in the development of network software. Early versions of Sendmail suffered from a number of security vulnerabilities that have been corrected over the years.

The pattern of security issues in Sendmail contributed to the incentive of programmers to write replacement mail servers placing an emphasis on security. The most notable such case was qmail, which introduced a completely changed security model whereupon the monolithic design (of a single large sendmail(8) setuid binary) was replaced by a number of smaller, less privileged programs.

Sendmail itself incorporated a certain amount of privilege separation in order to avoid exposure to security issues. Current versions of Sendmail, like other modern MTAs, incorporate a number of security improvements and optional features that can be configured to improve security and help prevent abuse.

[edit] Sendmail X / MeTA1

The next generation of Sendmail was initially called Sendmail X (previously it was called Sendmail 9, but is not an evolution of the Sendmail version 8 code base). However, the development of Sendmail X was stopped in favor of a new project called MeTA1.

The first release of Sendmail X (smX-0.0.0.0) was made available on October 30 2005. The final release was smX-1.0.PreAlpha7.0., released on May 20 2006 under the same license used by Sendmail 8.

Development on MeTA1 continues, with the released code at the pre-alpha stage as of January 2007.

[edit] Sendmail-8

[edit] Releases

The information is based on RELEASE_NOTES file from sendmail distribution.

[edit] History of Vulnerabilities

Sendmail vulnerabilities in CERT advisories and alerts.

[edit] Bibliography

  • Bryan Costales with Eric Allman (December 2002). sendmail, 3rd Edition. O'Reilly and Associates. ISBN.  — This is the Sendmail "bible" containing 1232 pages about Sendmail. It is also known as "The Bat Book", because of the picture on its cover. The 1st Edition was published in November 1993.
  • Bryan Costales, George Jansen, Claus Assmann, Gregory Shapiro (September 2004). sendmail 8.13 Companion. O'Reilly and Associates. ISBN.  — A companion to sendmail, 3rd Edition, this book documents the improvements in V8.13 in parallel with its release.
  • Craig Hunt (December 2003). sendmail Cookbook. O'Reilly. ISBN. 
  • Nick Christenson (2002-09-13). sendmail Performance Tuning. Addison-Wesley. ISBN.  [2]

[edit] See also

[edit] External links