Re: how to setup a privacy oriented mailserver

2019-11-25 Thread André Rodier
Hello, Wesley. The safest way is to have your own hardware, albeit there are some other options. Perhaps we can have a quick talk in the evening. My phone number: on Signal: +447511244961 Kind regards, André On Tue, 2019-11-26 at 14:36 +0800, Wesley Peng wrote: > That look interesting. Do you

Re: how to setup a privacy oriented mailserver

2019-11-25 Thread Wesley Peng
That look interesting. Do you provide a hosting plan Andre? regards on 2019/11/26 14:31, André Rodier wrote: Hello, Bill. I had the same concern a few years ago. I have been self-hosting for more than a decade, and more recently, I built this: https://github.com/progmaticltd/homebox This

Re: how to setup a privacy oriented mailserver

2019-11-25 Thread André Rodier
Hello, Bill. I had the same concern a few years ago. I have been self-hosting for more than a decade, and more recently, I built this: https://github.com/progmaticltd/homebox This is oriented towards security and privacy, and include defence mechanisms against remote and physical intrusion.

Re: how to setup a privacy oriented mailserver

2019-11-25 Thread Bill Cole
On 25 Nov 2019, at 22:53, lists wrote: Security is privacy. More precisely: Security includes privacy. Privacy is an essential *PART OF* security. The remit requested by the OP is really too broad to answer on a public mailing list intended for discussion of a specific MTA (even though

Re: how to setup a privacy oriented mailserver

2019-11-25 Thread lists
Security is privacy.   Original Message   From: postmas...@wsly.de Sent: November 25, 2019 6:25 PM To: li...@lazygranch.com; postfix-users@postfix.org Subject: Re: how to setup a privacy oriented mailserver Hi on 2019/11/26 10:22, lists wrote: > At a minimum, I would set it up to use

Re: how to setup a privacy oriented mailserver

2019-11-25 Thread Wesley Peng
Hi on 2019/11/26 10:22, lists wrote: At a minimum, I would set it up to use port 587. Then block via firewall all the email ports other than port 25 all countries from which you will not be using the server. Keep the attack surface small. For example don't provide for web based email.

Re: how to setup a privacy oriented mailserver

2019-11-25 Thread lists
At a minimum, I would set it up to use port 587. Then block via firewall all the email ports other than port 25 all countries from which you will not be using the server. Keep the attack surface small. For example don't provide for web based email.   Original Message   From:

how to setup a privacy oriented mailserver

2019-11-25 Thread Wesley Peng
Hi community, I finally got a domain from registrar, if I want to run a privacy oriented mail server, what steps should I take? For example, setup SSL over all, SPF, DKIM, DMARC, DNSSec, DoH, encrypted storage, app special pasword, secondary authentication? Is there any guide for it?

Re: Validation DMARC

2019-11-25 Thread Dominic Raferd
On Sun, 24 Nov 2019 at 23:34, Richard Damon wrote: > On 11/24/19 6:21 PM, Wesley Peng wrote: > > Why it doesn’t break From: header SPF? Just curious > > > > On Mon, Nov 25, 2019, at 4:12 AM, Chris Wedgwood wrote: > >> > Or in short: DMARC intentionally breaks every mailinglist and every > >> >