Steven Presser wrote:
We have settled on what software to use for everything but the mail server.
I'm reasonably happy using the Courier-MTA suite on OpenBSD. It's had four reported vulnerabilities (http://secunia.com/product/2557/?task=advisories), three DOS and one remote-code-execution in a corner case (debug logging enabled).
