Milter-greylist

Bob Friesenhahn wrote:
 > On Thu, 5 Sep 2013, Oliver Fromme wrote:
 > > By the way, personally I think that compatibility with old
 > > legacy systems should not be retained at all costs.
 > > If someone uses an OS that's 5 or 6 years old, it's better
 > > he upgrades to a more recent and standards-compliant one,
 > > instead of putting the compatibility burden on software
 > > developers.
 > 
 > As it happens, mail servers are often exceedingly stable systems for 
 > which reboots and OS upgrades cause harm to the overall organization 
 > (particularly if there is any problem with the upgrade).  For this 
 > reason, I don't agree at all with the above.

Frankly, a mail server that is 5 or 6 years old and that
never got any updates has accumulated so many known
security holes that it should be considered a criminal
offense to keep it connected to the internet.

In my opinion, a very high uptime does not indicate a
very stable system but rather a very insecure system
that is in urgent need of an update.  I'm working for
an IT company with focus on security, and I can tell
you quite a lot of stories about old systems that have
been "discovered" at our customers.

Apart from that, mail servers that are critical for an
organization should always be part of a redundant setup,
so upgrades can be performed without causing a downtime
of the whole mail system, even in case of problems.

But as I said, that's just my opinion, and YMMV.

Best regards
   Oliver


-- 
Oliver Fromme,  secnetix GmbH & Co. KG,  Marktplatz 29, 85567 Grafing
Handelsregister:  Amtsgericht Muenchen, HRA 74606, Gesch\ufffdftsfuehrung:
secnetix Verwaltungsgesellsch. mbH, Handelsreg.: Amtsgericht M\ufffdnchen,
HRB 125758, Gesch\ufffdftsf\ufffdhrer:  Maik Bachmann,  Olaf Erb,  Ralf Gebhart

FreeBSD-Dienstleistungen/-Produkte + mehr: http://www.secnetix.de/bsd

"That's what I love about GUIs: They make simple tasks easier,
and complex tasks impossible."
        -- John William Chambless