OT: Preferred MTA?

[Glenn Steen]

On 13/10/06, Drew Marshall <drew at technologytiger.net> wrote:
>
> On Thu, October 12, 2006 20:16, Denis Beauchemin wrote:
> > Hello all,
> >
> > I have been asked to evaluate what would be needed to turn our internal
> > mail hubs into secured ones.  Since I always had trouble with sendmail's
> > documentation, I was thinking about switching to another MTA.
> >
> > We currently use many sendmail features such as greet_pause,
> > conncontrol, ratecontrol and milter-greylist.  We have multiple domains
> > and use LDAP for final delivery address resolution. And of course, MS
> > must blend just fine with the MTA.
> >
> > What other MTA would give me those features with less headaches whenever
> > I need to change things?  Exim? Postfix? others?
> >
> > I couldn't find a greylisting for Exim that shares its state table
> > between multiple MX... but I think PF could use my existing
> > milter-greylist as is...
> >
> > As for ease of configuration and quality of documentation, which do you
> > recommend?
>
> Another vote for Postfix here. Easy to control, large feature set built in
> (sender & recipient address verification for example), integrates with
> just about any database driven user list, mailing lists are no problem,
> built in self protection with rate limiting etc, secure and very quick,
> with 2.3.x milters can be used and just about any program can be piped to.
>
> Oh, the killer app for me is no 'constant' rebuilding of a file I don't
> understand and I have never had to patch a Postfix install due to a
> security flaw/ alert :-)
>
> But I am biased...

CC
As long as Julian is willing to support Postfix, and please note that
there has mostly been "hot air" from the PF devels so far (not the
"roaring bonfire of hell" they've been promising with every new
version), I see no problem arising from the somewhat ... strained...
relations.
AFAICS, _all_ the features requested are supported (one way or
another) in PF 2.3.

> >
> > Do you recommend using a HW load balancer (and SSL accelerator) in front
> > of my servers?  How about Cisco's?
>
> Really can't comment but I would be interested to hear others thoughts too.
>
Capable but not that cheap:-).
How do you loadbalance now?

-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se