huge mail going throw my mail server how to protect

Reindl Harald h.reindl at thelounge.net
Fri Apr 6 18:22:24 UTC 2012



Am 06.04.2012 20:12, schrieb Heinz Diehl:
> On 06.04.2012, Joe Zeff wrote: 
> 
>> I have, a few times, considered setting up a mailserver of my own for my
>> domain so that even when I was away from home all mail went through it.
>> Every time I have, I've decided against it for exactly that reason. If more
>> people did the same, we'd not have as many open relays spamming the world.
> 
> Setting up a mailserver is not a real problem, all the "big"
> mailservers come with good documentation. However, they are complex
> beasts, and "time" seems to be the real important factor. Getting
> blacklisted because you build an open relay is stupid, but nothing
> changes practice more and faster than adverse anecdote :-)

yes, time is the problem for most people

i built my first production mailserver with port 25 open
on WAN in 2009, started the implentation of a web-backend
and depending postfix/dovecot/dbmail-configs on a blank
machine and after two months i was finally sure that
this all is clean and secure enough to give it a public IP

and even after two months working day and night there were
enough troubles with clients relying on auth-mechs not
provided in the firt place after migrate some hundret mail
accounts with ariund 200.000 messages this time

so in my opinion if someone thinks "hey, i read some howtos
and in two weeks my server is production ready" he makes
a terrible mistake

this belongs to all types of servers, but no other type
can produce so much damage as a mailserver ina very short
time (excption: a webserver with php poorly configured
and with danergous scripts which can be used to bypass
attacks on 3rd oarty servers and generate spam via
unsafe forms)

if someone has not the time and willing to learn how to
deal with security and maintenance (not only for the first
setup) he should hire professionals who knows how to do so

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 262 bytes
Desc: OpenPGP digital signature
URL: <http://lists.fedoraproject.org/pipermail/users/attachments/20120406/c7a6ddf1/attachment.sig>


More information about the users mailing list