Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
×
Software Books Media The Internet Book Reviews

Postfix 161

honestpuck writes "After many years bashing my head against sendmail in all it's gory details I had amassed a fair amount of knowledge and documentation on handling the Mail Transfer Agent (MTA) in Linux and Mac OS X. This caused a fair amount of teeth gnashing when I discovered it had gone the way of all flesh in OS X Panther to be replaced with Postfix." To un-gnash his teeth, honestpuck used Kyle D. Dent's Postfix: The Definitive Guide (published by O'Reilly); read on for his review of the book.
Postfix: The Definitive Guide
author Kyle D. Dent
pages 260
publisher O'Reilly and Associates
rating 8/10 - Excellent book, a little thin on details in a few places
reviewer Tony Williams
ISBN 0596002122
summary An excellent guide to installing, configuring and running Postfix

Fortunately, my first needs were simple and I came to realise that Postfix was a much easier system to install and maintain. Now that my needs are more complex, I was glad when this book hit my desk at exactly the same time as I started upgrading the corporate servers from Mac OS 9 to OS X Server.

Postfix: The Definitive Guide seems to fit the bill. It is a well-written and well-constructed guide to mail systems in general and Postfix in particular. (Oh, and speaking of definitive, could someone at O'Reilly provide a definitive answer to both reviewers and their own editors as to that colon? This is the second 'Definitive Guide' I've reviewed in as many months, and they are sprinkled with instances of each book's title, sometimes including that colon, sometimes leaving it out.)

The book starts with a good overview of the underlying technology in Chapters 1 and 2. I can't blame Dent for my slight confusion in the section on addresses and headers - having RFC822 superseded by RFC2822 was just a little too much coincidence for this particular "bear of little brain." He then follows it with a chapter discussing Postfix's architecture, important since Postfix uses a much more modular approach than the sendmail monolith, with each part of the mail handling process a different executable and the single queue turned into five.

Once the background is well covered, Dent then gets onto the nitty-gritty of configuring and administering Postfix. He has certainly covered everything I needed, including spam handling, multiple domains, relaying, SASL authentication and using LDAP. Once I'd finished grokking all that, and getting it integrated into my servers, I had a corporate email system up in three sites that replaced and improved upon a couple of thousand dollars worth of proprietary dreck. Happy is an understatement.

Dent's writing is sometimes a little patchy, though never bad. The technical detail does seem overpowering in places, though, and I occasionally found myself reading a section through more than once with a configuration file open in front of me. There are certainly spots where a little more hand holding and care with the writing would have been appreciated. (If you are a little more cognizant of the interstices of mail systems then you may not have the same problem.)

I did, however, appreciate the appendices enormously. The four appendices cover configuration parameters, Postfix commands, installation, and an FAQ. My system came with Postfix compiled and installed just as I required it so I didn't get a chance to thoroughly test out Dent's installation procedure (though it looks good); the other three continue to be useful.

If you want to have a look for yourself, then the usual O'Reilly page is complete with a table of contents and index, but this time no example chapter is provided (how come, O'Reilly?). You can also get an expanded version of the FAQ in Appendix 4 from Dent's website. A better example of Dent's writing style is an excellent article on troubleshooting with Postfix logs at O'Reilly's Onlamp.com.

This is an excellent book, Dent has explained the underlying methodology and use of Postfix well, taken the reader through all aspects of this MTA system and explained both the why and the how. I would recommend this book (and, as a result Postfix) to anyone looking for an MTA and a guide to configuring and running it.


You can purchase Postfix: The Definitive Guide from bn.com. Slashdot welcomes readers' book reviews -- to see your own review here, read the book review guidelines, then visit the submission page.

This discussion has been archived. No new comments can be posted.

Postfix

Comments Filter:
  • by Chuck Bucket ( 142633 ) on Thursday February 26, 2004 @05:18PM (#8401782) Homepage Journal
    after admin'ing sendmail for two years, I switched to Postfix a month ago, and wow, what a difference. recommended, and I'd think a book would only be needed for someone that was deploying this in a large organization.

    CB
  • by SharpFang ( 651121 ) on Thursday February 26, 2004 @05:24PM (#8401835) Homepage Journal
    ...but comparing how complex sendmail configuration is, and how simple is it to configure Postfix, does a guy who ate his teeth on Sendmail really need -a book- to learn something SO much easier?
    (while Sendmail config file reminds raw binary, Postfix is all easy, understandable and well commented options)
  • Postfix shortcomings (Score:4, Interesting)

    by Lxy ( 80823 ) on Thursday February 26, 2004 @05:29PM (#8401887) Journal
    I have also read this book, reviewed it, and submitted it. Obviously honestpuck is more interesting than me, and I can accept that :-).

    Good book, but even with Kyle's help I still can't get procmail working with postfix. Postfix has its own filtering mechanism, including spam filtering. It doesn't seem to allow 3rd party apps like procmail and spamassassin to play with it, though. I can't find info on Gogole either. Is anyone using procmail or spamassassin with postfix?
  • by [tsa] ( 183282 ) on Thursday February 26, 2004 @05:35PM (#8401955)
    > am i the only dork that decided to learn sendmail, > and now have no issue with its configuration??

    No, you aren't. sendmail just works. Oh, and I
    badly failed trying to configure postfix.
  • by Anonymous Coward on Thursday February 26, 2004 @05:39PM (#8401994)
    Yes. I do.

    I tend to make a ridiculous number of changes to the .mc file, but inevitably I find one or two things that are just easier to change in .cf.

  • by Zapman ( 2662 ) on Thursday February 26, 2004 @05:42PM (#8402020)
    I can think of several reasons that MacOS might be needed as a server... Largeish publishing house using Quark Express comes to mind... it was only released for OSX, what, 6 months ago? For most corperations of any size, that's moving pretty quick.

    Besides, remember that even those you consider to be stupid often have good advice. This is one of those instances. Postfix is wonderful. Simple, secure, fast, powerful, extensible... Weitze did an amazing job writing it. He was the guy who wrote TCPWrappers (back in the days before xinetd put some resonable security into inetd) and the origional network analysis tool Satan, so you know it's written with security in mind.

    I've got it pushing 6-8 gigs of email a day in one install using pretty lame hardware (uniproc, 2 SCSI drives at RAID 1). We've loved it, and had some great success with it.
  • by CharAznable ( 702598 ) on Thursday February 26, 2004 @05:44PM (#8402032)
    You'd be surprised.. OS 9 is a very secure OS.. there is no root shell to spawn after smashing the stack, for instance.
  • by Anonymous Coward on Thursday February 26, 2004 @05:55PM (#8402107)
    For our internal clients I have a hand written sendmail.cf files that does some simple checks and then forwards it to our central server.
  • Next book to buy (Score:2, Interesting)

    by dimss ( 457848 ) on Thursday February 26, 2004 @05:56PM (#8402115) Homepage
    This is next book to buy. I like postfix. Five years (or so) ago it was unknown rpm that came with fetchmail in Mandrake. Now I use it on all of my mail servers. And I use it for free.
  • by Anonymous Coward on Thursday February 26, 2004 @05:56PM (#8402124)
    If you have a complex setup, it is easier to modify a file with your specific settings, and use M4 to push those settings into the "real" config file. This is fairly future-proof.
    I'm not saying it is the best way, but there was a reason.
  • Re:Thank Apple for (Score:1, Interesting)

    by Anonymous Coward on Thursday February 26, 2004 @06:02PM (#8402158)
    Wouldnt this be a reason that GPL kernels have a longer life expectancy?

    Dont get me wrong, I love BSD style licenses. They are very useful, but tend to be lacking in author compensation and stability of the platform when a commercial entity gets interested in it, i think.
  • by Anonymous Coward on Thursday February 26, 2004 @06:14PM (#8402234)
    I fought sendmail's bugs/exploitable holes until 1997 or so, when I gave up and moved us to qmail. Postfix was called "vmailer" back then and wasn't quite ready, but it would probably be my first choice now.
  • by Hayzeus ( 596826 ) on Thursday February 26, 2004 @06:18PM (#8402266) Homepage
    To avoid duplicating the zillion responses you shall receive pointing out that you can use procmail directly as the delivery agent (google or just check main.cf), I'll just point out postfix also honors sendmail .forward files as well, allowing procmail to be invoked that way as well. If you were invoking procmail this way using sendmail, you should have to make 0 changes when you switch to postfix. The only thing I've seen it break so far is the majordomo approval function, and this is covered in the faq.
  • by ScottSpeaks! ( 707844 ) * on Thursday February 26, 2004 @06:28PM (#8402326) Homepage Journal
    our office is mostly mac-based (blame the person who's name is on the company for making that decision 15 years ago)

    I'd file that under "You all thought I was crazy, but who's laughing now?" I'm at the tail end of a migration of my own business from mostly Windows with one Mac and one Linux box, to a mix of OS X and Linux and a legacy Windows box... and lovin' it.

    On the topic of Postfix, I switched from Sendmail (which I'd been tinkering with for a few years) to Postfix when I switched from RedHat to Mandrake, and found it mostly painless. The only problem was that Mandrake's default install of Apache and Postfix apparently left an open proxy (not relay) exploit enabled, and I was briefly sending out spam for some low-life.

  • Re:Thank Apple for (Score:2, Interesting)

    by Anonymous Coward on Thursday February 26, 2004 @06:37PM (#8402380)
    Actually, it does, UFS driver updates they made would be welcome. Actually, many systemcalls in the MacOS X are directly from FreeBSD, so they would be welcome to contribute back the the PPC tree.
  • Postfix rocks it (Score:1, Interesting)

    by Mr804 ( 12397 ) on Thursday February 26, 2004 @06:45PM (#8402497) Homepage Journal
    Postfix is really great. I converted all our mail servers to it a while back. cpu usage is way down. The config file is very simple too.
  • Why? (Score:4, Interesting)

    by EvilStein ( 414640 ) <.ten.pbp. .ta. .maps.> on Thursday February 26, 2004 @06:45PM (#8402502)
    There are still quite a few Mac OS 9 servers - running Webstar or AppleShare IP, or maybe even Eudora Internet Mail Server.

    It's actually not a bad platform at all and can be quite reliable.
  • by fanatic ( 86657 ) on Thursday February 26, 2004 @06:50PM (#8402550)
    This caused a fair amount of teeth gnashing when I discovered it had gone the way of all flesh in OS X Panther to be replaced with Postfix

    I replaced sendmail wwith postfix on all my non-isiolated machines last year after the sendmail vulnerability-of-the-week treadmill got very old.

    it was *really* simple to do.

    postfix: the ultimate sendmail patch.

  • by LaissezFaire ( 582924 ) on Thursday February 26, 2004 @07:51PM (#8403103) Journal
    The Chronicle [chronicle.com] has an article by Jennifer Jacobson on the possible evil of colons in book titles. It seems that it's hard to impossible to print a book these days without one. The article contains a small joke about colonoscopies."

    I found the article referenced by Arts & Letters Daily [aldaily.com].

  • by LaissezFaire ( 582924 ) on Thursday February 26, 2004 @07:58PM (#8403182) Journal
    (Replying to my own message. Ugh.) Ralf's postfix page is here [tu-bs.de].
  • by FredFnord ( 635797 ) on Thursday February 26, 2004 @08:36PM (#8403476)
    So the point was that you are the admin for a corporate network that ran on MacOS 9, and now runs on MacOS X.

    And therefore, since the administration is so easy, you have plenty of time to read and review books.

    See? He made a funny.

    (Mind you, this is funny because it's true. If you'd said the same thing except about moving your servers from Windows NT 4 to Windows 2003 Advanced Server, he could have said the same thing, and it would've been funny because it was so outrageously false.)

    -fred
  • by M. Silver ( 141590 ) <silver@noSpAM.phoenyx.net> on Thursday February 26, 2004 @09:01PM (#8403696) Homepage Journal
    We bought the book, since we're switching from Sendmail to Postfix Real Soon Now, and you're right. We really didn't need it. "Thin on details" meant, for me, "thin on all the details that were the whole reason for buying the book instead of just reading MAN PAGES. GEEZ!"

    It's a nice, well-written book. It just should have been "Learning Postfix." And then I would have known not to buy it.

    "Practical mod_perl" is another misnamed book. It's really "Practical[ly everything you could ever need to know about running an Internet server that happens to have] mod_perl [on it.]" Heck, I bet it'll tell me how to run Postfix in the next chapter or so. In more depth than the Postfix book.

  • by Anonymous Coward on Friday February 27, 2004 @12:30AM (#8405209)
    No one has mentioned the great mysql integration. That was what turned me on to Postfix. The domain info can be stored in MySQL. Combine with Cyrus IMAP/POP (and the MySQL PAM module), I can run almost my entire hosting busines without real system users.

    Virtual users with mysql ROCK! Add a record in mysql,
    and a couple folders on the server(via cron jobs that also check the MYSQL database) and voila!

    I don't like to plug my business on slashdot, so I'll post anonymously, but this setup has worked wonderfully for a long while for my companies modest needs.

    It is nice having virtual users. In fact my shared hosting servers can be run without any real system accounts for the end users., (I try to keep "advanced" accounts that have shell access on other servers...)

    FTP users are all virtual too! (Pure FTP), even the DNS is mysql powered (PowerDNS). Make admin pretty easy, I just spend most of my time writing frontends to it...

    ANyway POSTFIX is great by itself, but combined with some additional open source goodness and the sum totoal just rocks...
  • by Iamnoone ( 661656 ) * on Friday February 27, 2004 @02:54AM (#8405928)
    I can vouch for this guy and his sendmail work - he is a miracle worker. He transformed the sendmail config's for a 2,000 + person company that I was at. If you are required to use sendmail, it might save you alot of headaches to have him sculpt your config. A real old school UNIX freak, an artist in the sendmail medium...
  • Re:About sendmail.cf (Score:2, Interesting)

    by thogard ( 43403 ) on Friday February 27, 2004 @05:34AM (#8406416) Homepage
    Sendmail is the only existing MTA that can do hacks like SPF with just changes to the config file.

    Since sendmail may have been started with inetd on a slow machine, sendmail.cf was designed to be very fast to parse. How fast? A decade ago the parser could do millions of lines a second on fast hardware for the day. Thats not a major deal now but it did help on a pdp11 or an early vax.

    Sendmail is not static and its still evolving. It was the 1st open source program that worked around insecure OS bugs and is the only major MTA that continues to do so.
  • by h3 ( 27424 ) on Friday February 27, 2004 @06:40AM (#8406571) Homepage Journal
    I've long wished that Wietse Venema would turn his attention next to a replacement for BIND. Can you imagine it? I get wistful thinking about it.

    In this day and age of DNS and MTAs synergizing [slashdot.org] to combat spam, it kind of makes some sense, doesn't it?

    I use tinydns myself but the DJB way has also irked me. Which is why I turned to postfix after evaluating qmail long ago. sendmail's security problems and horrid config made it out of the question.

    Kinda like BIND. Though the config isn't as bad as sendmail.cf (and tinydns's data file is about as bad), I'd like to see what Wietse would come up with...

    -h3

  • by biggleswat ( 518446 ) on Friday February 27, 2004 @03:38PM (#8410846)
    Almost sounds like Multics [multicians.org] error message...
  • by proberts ( 9821 ) on Friday February 27, 2004 @05:55PM (#8412099) Homepage
    http://www.porcupine.org/postfix-mirror/newdoc/UUC P_README.html

    I found the most attractive features of Postfix were having to do far less security patches, and the fact that my MTAs used far less resources, necessitating fewer upgrades.

    YMMV.

    Paul

Our OS who art in CPU, UNIX be thy name. Thy programs run, thy syscalls done, In kernel as it is in user!

Working...