Re: huge mail going throw my mail server how to protect

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




Am 06.04.2012 20:12, schrieb Heinz Diehl:
> On 06.04.2012, Joe Zeff wrote: 
> 
>> I have, a few times, considered setting up a mailserver of my own for my
>> domain so that even when I was away from home all mail went through it.
>> Every time I have, I've decided against it for exactly that reason. If more
>> people did the same, we'd not have as many open relays spamming the world.
> 
> Setting up a mailserver is not a real problem, all the "big"
> mailservers come with good documentation. However, they are complex
> beasts, and "time" seems to be the real important factor. Getting
> blacklisted because you build an open relay is stupid, but nothing
> changes practice more and faster than adverse anecdote :-)

yes, time is the problem for most people

i built my first production mailserver with port 25 open
on WAN in 2009, started the implentation of a web-backend
and depending postfix/dovecot/dbmail-configs on a blank
machine and after two months i was finally sure that
this all is clean and secure enough to give it a public IP

and even after two months working day and night there were
enough troubles with clients relying on auth-mechs not
provided in the firt place after migrate some hundret mail
accounts with ariund 200.000 messages this time

so in my opinion if someone thinks "hey, i read some howtos
and in two weeks my server is production ready" he makes
a terrible mistake

this belongs to all types of servers, but no other type
can produce so much damage as a mailserver ina very short
time (excption: a webserver with php poorly configured
and with danergous scripts which can be used to bypass
attacks on 3rd oarty servers and generate spam via
unsafe forms)

if someone has not the time and willing to learn how to
deal with security and maintenance (not only for the first
setup) he should hire professionals who knows how to do so

Attachment: signature.asc
Description: OpenPGP digital signature

-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux