2020-01-05 DevOps Meeting notes

Priority Key

• 

  Must do to

  get email setup locally

• 

  Setup minimal security

• 

  Setup in-depth security

• 

  Setup nice-to have options

Set up Exim configuration

Install Diagnostic Tools

User Authentication

• Dovecot
• sasl2-bin
• Courier-Imap
• Shell Password Authentication
  • SASL
  • PAM

Generate a certificate

Spam scanning

• spamassassin

Exim access control lists (ACLs)

• Access Control Lists

DNS Blacklist

zen.spamhaus.org

DMARC Support

Domain-based Message Authentication, Reporting & Conformance

• SPF Filtering

  Sender Policy Framework Filtering

  • a mechanism used to reduce email forgery
  • declare where on the internet your domain sends email from
  • a recipient email server can check your SPF records
    • if the sending email server is listed in these records

      then email will be accepted

    • If the sending server is not in the list

      then the email can be further auctioned upon,

      such as rejected or held in quarantine

  • benefits
    • reduces of backscatter spam

      backscatter spam is a technique for getting around

      SPF filters.

  • SPF records for a domain are defined in the domain’s DNS records
  • Information on setting up SPF
    • http://old.openspf.org/wizard.html
    • http://www.openspf.org

Email Subaddressing

• Reference
  • Email Subaddressing

For running a mailing list and ensuring all sent mail is DMARC compliant

Glossary

• Email Agents
  • MTA

    Mail Transfer Agent

  • MDA

    Mail Delivery Agent

  • MUA

    Mail User Agent

  • MSA

    Mail Submission Agent

• DMARC

  Domain-based Message Authentication,

  Reporting & Conformance

  • an email authentication, policy, and reporting protocol
  • builds on the widely deployed protocols
    • SPF
    • DKIM
• SPF

  Sender Policy Framework

• DKIM

  DomainKeys Identified Message

Reference

• EXIM.org

Zoom

• Jim Xubuntu

  2.4.129780

• Jim Windows

  4.5.5

• Bill

  3.0.309708.1027

• Ralph

  3.5.330166.1202

  • Upgrade to

    3.5.336627.1216