[ale] Secure e-mail server

[Lightner, Jeff]

Dovecot/Postfix is what RedHat trains you on in their admin classes.






________________________________
From: ale-bounces at ale.org [mailto:ale-bounces at ale.org] On Behalf Of Michael Trausch
Sent: Tuesday, February 21, 2012 7:41 PM
To: Atlanta Linux Enthusiasts
Subject: Re: [ale] Secure e-mail server


Depends on how you are defining "secure", here. I run Postfix and Dovecot and find that they work well together. If I had centralized authentication and Dovecot 2.0, I think I would be very happy, but right now I have neither.

The big thing you want after checking that you're not spammer-friendly is to ensure that you do not generate backscatter. Backscatter is a form of spamming which relies on an MX to be unaware of all valid recipients. Without that, the MX will store and forward literally everything, which will generate bounces when the primary MX received and rejects mail sent to an invalid user.

In short: make sure the mail systems are all using the same database and rejecting mail for non-existent users in the SMTP conversation, instead of later when a bounce is required.

--
Sent from my Ice Cream Sandwich powered Kindle Fire!
Pardon any typos...
On Feb 21, 2012 4:11 PM, "Stephen Haywood" <stephen at averagesecurityguy.info<mailto:stephen at averagesecurityguy.info>> wrote:
I want to move my domain from google apps to a personal server. Are there any good guides for setting up a secure smtp server?

--
Stephen Haywood
Information Security Consultant
CISSP, GPEN, OSCP
T: @averagesecguy
W: averagesecurityguy.info<http://averagesecurityguy.info>


_______________________________________________
Ale mailing list
Ale at ale.org<mailto:Ale at ale.org>
http://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo





Athena®, Created for the Cause™

Making a Difference in the Fight Against Breast Cancer



How can I show my support for bottled water?

Take a minute to sign a petition in support of bottled water. Your signature COUNTS! Available through the bottledwatermatters.org/luv-bottled-water<http://bottledwatermatters.org/luv-bottled-water> website, the goal is 50,000 signatures. Please include your personal email address when submitting. Once completed, share the website with your family and friends, to ensure as many bottled water supporters as possible sign the petition



---------------------------------
CONFIDENTIALITY NOTICE: This e-mail may contain privileged or confidential information and is for the sole use of the intended recipient(s). If you are not the intended recipient, any disclosure, copying, distribution, or use of the contents of this information is prohibited and may be unlawful. If you have received this electronic transmission in error, please reply immediately to the sender that you have received the message in error, and delete it. Thank you.
----------------------------------


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.ale.org/pipermail/ale/attachments/20120222/4152222d/attachment-0001.html