Re: Current development status?

--===============0826584426==
Content-Type: multipart/alternative; boundary="f403045c0adc1a278905619ddf48"

--f403045c0adc1a278905619ddf48
Content-Type: text/plain; charset="UTF-8"

At the moment ive started toying with the source some.

I am still torn between working on xmail vs switching to a different mail
server.

My thoughts so far.
* My first concern with no active development is, Are there any security
issues hiding.
* I haven't found any in the wild exploits against the current release of
xmail.
** Doesn't mean it Doesn't exist.
* I have no experience with any other mail server.

* I don't have time to do a ton of matinance support on my own for a mail
server
* I have no windows machines to test with (YAY !?)

Things i would want to do if taking this on would be..
* Get some sort of thumbs up or feedback from Davide Libenzi.
* Recompile for testing with asan + ubsan + tsan. As they can spot a lot of
potential security issues. (Not aware of any myself)
* Conduct fuzzing testing.
* Change the server setup to run as an unprivileged user by default / with
ease.
* Look for current bug reports,  as at the moment, I know of none.


So my first question is,   is there even a wish list?  or any known
security or bug issues to be dealt with?

I am interested in feedback on this stuff.


I would keep any security issues confidential until a patching method was
available and merely state if i knew of one.
I do not at this time know of any.


eadthem



On Thu, Dec 28, 2017 at 8:23 AM, Ben Green via xmail <[email protected]>
wrote:

> Hello Ead,
>
> I have been using xmailserver for quite a long time I have only one server
> running but I am familiar with the code and would like to see a stronger
> community behind the project. There is a copy of v1.26 and some changes
> that someone cloned to Github: https://github.com/GerHobbelt/xmail
>
> I would like to help and would suggest that we start by taking the 1.27
> source and seeing if there were any changes that GerHobbelt made that
> should be included and put the resulting code into a new repo on github.
>
> I am happy to undertake this first small bit of work this weekend... what
> do you think? is anyone else interested in helping maintain the code?
>
> Kind regards,
>
> Benjamin.
> _______________________________________________
> xmail mailing list
> [email protected]
> http://xmailserver.org/mailman/listinfo/xmail
>

--f403045c0adc1a278905619ddf48
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">At the moment ive started toying with the source some.=C2=
=A0<div><br></div><div>I am still torn between working on xmail vs switchin=
g to a different mail server.</div><div><br></div><div>My thoughts so far.<=
/div><div>* My first concern with no active development is, Are there any s=
ecurity issues hiding.</div><div>* I haven&#39;t found any in the wild expl=
oits against the current release of xmail.=C2=A0</div><div>** Doesn&#39;t m=
ean it Doesn&#39;t=C2=A0exist.</div><div>* I have no experience with any ot=
her mail server.</div><div><br></div><div>* I don&#39;t have time to do a t=
on of matinance support on my own for a mail server</div><div>* I have no w=
indows machines to test with (YAY !?)</div><div><br></div><div>Things i wou=
ld want to do if taking this on would be..</div><div>* Get some sort of thu=
mbs up or feedback from=C2=A0Davide Libenzi.</div><div>* Recompile for test=
ing with asan + ubsan + tsan. As they can spot a lot of potential security =
issues. (Not aware of any myself)</div><div>* Conduct fuzzing testing.</div=
><div>* Change the server setup to run as an unprivileged user by default /=
 with ease.</div><div>* Look for current bug reports,=C2=A0 as at the momen=
t, I know of none.</div><div><br></div><div><br></div><div>So my first ques=
tion is,=C2=A0 =C2=A0is there even a wish list?=C2=A0 or any known security=
 or bug issues to be dealt with?</div><div><br></div><div>I am interested i=
n feedback on this stuff.</div><div><br></div><div><br></div><div>I would k=
eep any security issues confidential until a patching method was available =
and merely state if i knew of one.</div><div>I do not at this time know of =
any.</div><div><br></div><div><br></div><div>eadthem</div><div><br></div><d=
iv><br></div></div><div class=3D"gmail_extra"><br><div class=3D"gmail_quote=
">On Thu, Dec 28, 2017 at 8:23 AM, Ben Green via xmail <span dir=3D"ltr">&l=
t;<a href=3D"mailto:[email protected]" target=3D"_blank">xmail@xmailser=
ver.org</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D=
"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello Ead,<=
br>
<br>
I have been using xmailserver for quite a long time I have only one server =
running but I am familiar with the code and would like to see a stronger co=
mmunity behind the project. There is a copy of v1.26 and some changes that =
someone cloned to Github: <a href=3D"https://github.com/GerHobbelt/xmail" r=
el=3D"noreferrer" target=3D"_blank">https://github.com/GerHobbelt/<wbr>xmai=
l</a><br>
<br>
I would like to help and would suggest that we start by taking the 1.27 sou=
rce and seeing if there were any changes that GerHobbelt made that should b=
e included and put the resulting code into a new repo on github.<br>
<br>
I am happy to undertake this first small bit of work this weekend... what d=
o you think? is anyone else interested in helping maintain the code?<br>
<br>
Kind regards,<br>
<br>
Benjamin.<br>
______________________________<wbr>_________________<br>
xmail mailing list<br>
<a href=3D"mailto:[email protected]">[email protected]</a><br>
<a href=3D"http://xmailserver.org/mailman/listinfo/xmail" rel=3D"noreferrer=
" target=3D"_blank">http://xmailserver.org/<wbr>mailman/listinfo/xmail</a><=
br>
</blockquote></div><br></div>

--f403045c0adc1a278905619ddf48--

--===============0826584426==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
xmail mailing list
[email protected]
http://xmailserver.org/mailman/listinfo/xmail

--===============0826584426==--