Collaborate Disseminate
I have recently received a typical spam email, but seeing it’s from domain gov.ua I have decided to examine it’s headers knowing that From field is not clear indicator of the sender.
To my surprise, the email originating from a mail client… Continue reading Was this spam email routed through Ukraine goverment’s mail servers? [closed]
the most bizarre thing happened, someone fount out the smtp mail driver credentials from a Laravel project, which are stored in the .env.
The credentials are used for a contact form. The .env was in production and the debug was set to fal… Continue reading Security breach from contact form in Laravel 5.8.36?
Since I cannot receive email directly from my home server, I need an external device to receive messages for me and deliver them to my MTA via another port or via VPN. Instead of renting a VPS just for this, I was thinking about purchasing… Continue reading Full disk encryption and remote unlocking a mail server in the hand of a possible attacker, what could go wrong?
nmap smtp open relay test shows (verbose mode):
smtp-open-relay: Server is an open relay (2/16 tests)
MAIL FROM:<antispam@[xxx.xxx.xx.xx]> -> RCPT TO:<relaytest%nmap.scanme.org@XHS5P>
MAIL FROM:<antispam@[xxx.xxx.xx.x… Continue reading open relay test discrepancy
Which ciphers to be used currently, and which protocols to be used in opportunistic TLS for postfix SMTP
Continue reading Which ciphers to be used currently, in opportunistic TLS for postfix SMTP [closed]
Someone or “something” is trying to access the server.
my postfix log showed:
mx2 postfix/smtpd[*****]: lost connection after MAIL from unknown[127.0.0.1]
My concern is why is it from the localhost? and I just can’t figure it out with… Continue reading Unauthorized access postfix "lost connection after MAIL from unknown[127.0.0.1] "
Looking for general mail server security best practices here.
I did some research and it’s really hard to find the information out there.
How do you safeguard a smtp server log? Are there any encryption tools out there? Our reason is i… Continue reading Securing SMTP server and its logs
Assume Mallory knows the server, username and password that Alice uses to send email via smtp. Can Mallory read Alice’s email? Does it depend on the specific system or configuration?
Continue reading Can someone read my email if they have my smtp credentials?
I saw on my SMTP logs that it queried a possible phishing domain, I look up on its MX records and it didn’t have one. Does the domain need an MX record before sending phishing emails?
Continue reading No MX Records on a Possible Phishing domain?
https://wjianz.wordpress.com/2014/09/03/howto-installconfigure-msmtp-and-mutt-on-ubuntu/
I got GTS CA 1O1 as the common name instead of Google Internet Authority G2. What is the difference between the two.
So GTS CA 1O1 refers to the one… Continue reading Does user need to keep updated with the certificates locally when using TLS with smtp?