Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #191168

Re: Secure email server setup

Show all headers | View raw

On Mon, Jan 15, 2018 at 08:56:20PM +0100, Jonathan Sélea wrote:
> >> I would not recommend having a emailserver on the same server as a
> >> website, because if the website is compromised the "hacker" can just use
> >> the mail() function
> >> to send emails in your name.
> > so can she/he if the mailserver is on a different host. That doesn't make
> > any difference.
> It would, because other mailservers would deny emails from that one
> because it would fail authentication (SPF, DKIM, DMARC for example).
> 
Your webserver having a method to use a smarthost, using an external
mailserver can be abused when compromised. So no win here. Still exploited
once the attacker is on the system. It will just use the same smarthost
with the webservers credentials and the mailserver will happily relay the
spam. 

-H


> 
> 
> 
> 



-- 
Henning Follmann           | hfollmann@itcfollmann.com

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Secure email server setup "J.W. Foster" <jfoster81747@yahoo.com> - 2018-01-14 16:40 +0100
  Re: Secure email server setup rhkramer@gmail.com - 2018-01-14 19:00 +0100
    Re: Secure email server setup Brian <ad44@cityscape.co.uk> - 2018-01-14 20:30 +0100
      Re: Secure email server setup rhkramer@gmail.com - 2018-01-14 22:50 +0100
        Re: Secure email server setup Brian <ad44@cityscape.co.uk> - 2018-01-15 00:20 +0100
          Re: Secure email server setup Alessandro Vesely <vesely@tana.it> - 2018-01-15 10:50 +0100
            Re: Secure email server setup rhkramer@gmail.com - 2018-01-15 16:30 +0100
              Re: Secure email server setup Alessandro Vesely <vesely@tana.it> - 2018-01-15 19:00 +0100
                Re: Secure email server setup Greg Wooledge <wooledg@eeg.ccf.org> - 2018-01-15 20:00 +0100
                Re: Secure email server setup rhkramer@gmail.com - 2018-01-15 20:10 +0100
                Re: Secure email server setup Brian <ad44@cityscape.co.uk> - 2018-01-15 22:10 +0100
                Re: Secure email server setup Henning Follmann <hfollmann@itcfollmann.com> - 2018-01-15 20:30 +0100
                Re: Secure email server setup rhkramer@gmail.com - 2018-01-15 20:00 +0100
                Re: Secure email server setup Brian <ad44@cityscape.co.uk> - 2018-01-15 21:10 +0100
                Re: Secure email server setup rhkramer@gmail.com - 2018-01-17 14:40 +0100
          Re: Secure email server setup Jonathan Sélea <jonathan@selea.se> - 2018-01-15 20:40 +0100
            Re: Secure email server setup Greg Wooledge <wooledg@eeg.ccf.org> - 2018-01-15 20:50 +0100
            Re: Secure email server setup Henning Follmann <hfollmann@itcfollmann.com> - 2018-01-15 21:00 +0100
              Re: Secure email server setup Jonathan Sélea <jonathan@selea.se> - 2018-01-15 21:00 +0100
                Re: Secure email server setup Henning Follmann <hfollmann@itcfollmann.com> - 2018-01-15 22:40 +0100
                Re: Secure email server setup Jonathan Sélea <jonathan@selea.se> - 2018-01-16 11:10 +0100
              Re: Secure email server setup Brian <ad44@cityscape.co.uk> - 2018-01-15 21:50 +0100
                Re: Secure email server setup Henning Follmann <hfollmann@itcfollmann.com> - 2018-01-15 22:30 +0100
                Re: Secure email server setup Brian <ad44@cityscape.co.uk> - 2018-01-16 20:00 +0100
  Re: Secure email server setup deloptes <deloptes@gmail.com> - 2018-01-14 19:50 +0100
    Re: Secure email server setup basti <basti@unix-solution.de> - 2018-01-14 20:10 +0100
      Re: Secure email server setup deloptes <deloptes@gmail.com> - 2018-01-14 22:00 +0100
  Re: Secure email server setup Brian <ad44@cityscape.co.uk> - 2018-01-14 20:30 +0100
  Re: Secure email server setup Joe <joe@jretrading.com> - 2018-01-14 21:20 +0100

csiph-web