Allman had written the original ARPANET delivermail which shipped in 1979 with 4.0 and 4.1 BSD. He wrote Sendmail as a derivative of delivermail in the early 1980s at UC Berkeley. It shipped with BSD 4.1c in 1983, the first BSD version that included TCP/IP protocols. In 1996, approximately 80% of the publicly reachable mail-servers on the Internet ran Sendmail. More recent surveys have suggested a decline, with 4.18% of mail servers in August 2019 detected as running Sendmail in a study performed by E-Soft, Inc. Other surveys have suggested a slight decrease, with 24% of mail servers in August 2015 detected as running Sendmail in a study performed by Mail Radar. Allman designed Sendmail to incorporate great flexibility, but it can be daunting to configure for novices. Standard configuration packages delivered with the source code distribution require the use of the M4 macro language which hides much of the configuration complexity. The configuration defines the site-local mail delivery options and their access parameters, the mechanism of forwarding mail to remote sites, as well as many application tuning parameters. Sendmail supports a variety of mail transfer protocols, including SMTP, ESMTP, DECnet's Mail-11, HylaFax, QuickPage and UUCP. Additionally, Sendmail v8.12 introduced support for milters - external mail filtering programs that can participate in each step of the SMTP conversation.
Acquisition by Proofpoint, Inc.
Sendmail, Inc was acquired by Proofpoint, Inc. This announcement was released on 1 October 2013.
Sendmail 8 releases
2020-07-05
2015-07-03
2014-12-06
2014-05-21
2014-01-26
2013-04-21
2012-12-23
2011-05-17
2009-12-30
2008-05-03
2007-11-01
2007-04-03
2007-01-31
2004-06-20
2001-09-08
2000-07-19
Sendmail-8.10.0 2000-03-01
Sendmail-8.9.0 1998-05-19
Sendmail-8.8.0 1996-09-26
Sendmail-8.7 1995-09-16
Sendmail-8.6 1993-10-05
...
Sendmail-8.1 1993-06-07 - 4.4BSD freeze. No semantic changes.
The information derives from from sendmail distribution.
Security
Sendmail originated in the early days of the Internet, an era when considerations of security did not play a primary role in the development of network software. Early versions of Sendmail suffered from a number of security vulnerabilities that have been corrected over the years. Sendmail itself incorporated a certain amount of privilege separation in order to avoid exposure to security issues., current versions of Sendmail, like other modern MTAs, incorporate a number of security improvements and optional features that can be configured to improve security and help prevent abuse.
History of vulnerabilities
Sendmail vulnerabilities in CERT advisories and alerts:
The UNIX-HATERS Handbook dedicated an entire chapter to perceived problems and weaknesses of sendmail.
Implementation
As of sendmail release 8.12.0 the default implementation of sendmail runs as the Unix user smmsp — the sendmail message submission program.
