Här hittade jag en rätt bra kritik mot Apples mailserver samt integrering i OSXS
1) Relaying mail whose "MAIL FROM:" line is a valid local user is *not* secure. *Every* FAQ on the subject warns you against doing that! The "MAIL FROM:" line is trivial to forge and so provides virtually no protection against unauthorized relaying. This is the stupid design flaw of the Apple MailServer.
2) Apparently, the *reason* Apple decided to allow relaying based on the "MAIL FROM:" line is because they have not implemented SMTP-AUTH.
3) Well, they didn´t compile in SMTP-AUTH support in the version of Sendmail they supplied with OSX consumer either.
4) Of course, it´s easy enough to download the Sendmail source and follow the instructions at sendmail.org to build in SMTP-AUTH support. (While you´re at it, best to upgrade to Sendmail 8.12.x, which has a much more secure design than previous version; the daemon is longer suid root.)
5) Then you discover that Sendmail will refuse to run (or will run in some very crippled mode) because Apple has made the "/" directory world-writable. So you need to
chmod 755 /
in order to run Sendmail.
6) Finally, you find that every time you install one of Apple´s Software Updates, the installer resets "/" to mode 777. Suddenly, Sendmail stops authenticating users or stops working entirely. So you need to
chmod 755 /
and restart Sendmail.
Verkar ju som Apple har ett digert arbete framför sig, eller som iofs bör vara klart i och med 10.2 ... som väl kommer nästa månad om man får tro på Jobs kl..
