From: Jason Ashbaugh Date: 2002-12-23T00:07:22+09:00 Subject: Re: smtp server ::dons his infosecurity hat:: SMTP is not easy to implement, the protocol itself is not too hard, but the base protocol is no longer suitable for production use. You would need to add some sort of system to configure the server so it is not an open relay for anyone (read spammers) to use. You also would probably want to have hooks to call different filtering routines (ie. spamassassin or virusscanners) to be sure you aren't relaying infected or unwanted mail. Lastly you need to make sure it's not like sendmail and full of security holes waiting to be exploited since port 25 is on ever portscanners checklist. My recommendation would be to always if possible use Qmail (I know it's apain to configure at first, but it is bulletproof in security) for smtp functions wherever possible. A good project might be to write a configuration utility in ruby that handles wmail underneath.... Just the thoughts of a security admin. Jason Daniel P. Zepeda wrote: >Hi Shannon, > >On Sun, 22 Dec 2002 19:07:09 +0900 >Shannon Fang wrote: > > > >>Hello, >> >>I plan to implement a SMTP server for my project. I want to use Ruby, at >>least for prototyping. But I wonder, can I use Ruby for the REAL thing? >>What is the best performance (comparing to sendmail or qmail, for >>example) I can expect for a pure ruby based smtp server? >> >> > >Why would you want to do that? If it is writing a toy implementation for >the pure learning experience, then I'd say go for it. If you want to use >it in production code on a real project, I'd think twice about diving into >it. SMTP *seems* simple, but is actually *very* hard to get right. I'd >look into integrating an existing server, like sendmail, possibly using >its milter interface to get at the internals that you need. Your time >would be better spent concentrating on your project's unique properties >than opening up the SMTP can of worms. > > >Sorry, I redirected your thoughts instead of answering your questions, but >I think it is the right thing to do. > > > > >>Thanks a lot >>Shannon >> >> >> >> > > > >