All Questions
15 questions
0
votes
1
answer
578
views
Can the hosting provider who has access to the email server machine, access the emails?
I am planning to use a self hosted (Linux based) email server. However, the server will be on hosting providers machine. The hosting providers will have access to the physical machine. In that case, ...
1
vote
0
answers
181
views
Strange cyrus/imaps Logins without valid password
I found apparently successful logins from a foreign ip-address to our cyrus-imap server:
Nov 24 08:16:20 server-1 cyrus/imaps[12101]: starttls: TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits ...
0
votes
1
answer
574
views
Is it safe to automatically parse text as markdown?
I have a server, which receives text mails from students and I plan to automatically collect their message bodys and parse them as markdown so that I can generate a nicely formatted output as pdf. Is ...
0
votes
2
answers
980
views
How to decide to use, then how to use an http gofile.me url in an email, explained to a five year old?
I'm terrified of clicking on links in emails, and yet a colleague insists I do.
When I receive an email in my gmail account that contains links of the form http://gofile.me/xxxxx/yyyyyyyyy along with ...
3
votes
2
answers
157
views
When is an email rejected?
Currently, I am working on a web application and wanted to let users send emails to others through a web form. So, they just should submit their email address and my web app would then send mails to ...
10
votes
2
answers
3k
views
Are hacked email addresses a local network or web server problem? [closed]
I work at a small nonprofit and woke up to find that many of our email addresses have been sending spam asking recipients to open an attachment (doc file). We have a local network that all of our ...
0
votes
2
answers
274
views
VPS outbound emails security
I have an instance of VPS running with logrotate that emails me logs every day. It is a send-only SMTP server with Postfix, set up using this guide. I just need to receive the logs from this server. ...
20
votes
3
answers
16k
views
What is the most secured SMTP authentication type?
Say you have to choose only one among the following authentication types for your own SMTP server:
LOGIN, PLAIN
CRAM-MD5
DIGEST-MD5
NTLM/SPA/MSN
Which one would you recommend for optimal security?
...
3
votes
2
answers
1k
views
Can I trick a mail server into sending me an email?
Can I trick a mail server into sending me an email? I would like to do some email header analysis on the emails that are send by a mail-server in a penetration-test and possibly get to know more ...
0
votes
1
answer
124
views
Which is better: detecting spam at receiver or source?
Background
I researched a detection of spam sent out using bots. After studying different techniques used by bots to deliver spam, I have no generalised solution to detect spamming at the source ...
-1
votes
1
answer
410
views
Server is Sending Spam
I have determined that my server is compromised because it is sending spam (from one of my legitimate addresses).
How can I determine what's compromised? Does the attacker know my
SSH password? ...
0
votes
1
answer
236
views
how to trace or get evidence you've been hacked [closed]
my devices and my network have been compromised. I foolishly left my router unprotected
and they were able to gain access to all my apple devices and then install some sort of software that will take ...
2
votes
2
answers
2k
views
How to find out the email host of a vanity email address?
Assuming a person gets his own domain address, say, theperson.com.
He then goes on to create a vanity email address with that domain. e.g. [email protected].
[email protected] may be hosted by the ...
2
votes
1
answer
1k
views
Is server-side cryptography with user-only access possible for email services?
I came across the Lavabit High Scalability Writeup and got curious.
Do you use any particularly cool technologies or algorithms?
The way we encrypt messages before storing them is relatively unique.
...
4
votes
3
answers
2k
views
Can email be encrypted before it reaches the mail server? If not, is there something that would allow something like this that's being worked on?
I was thinking about hosting my own email (own email server) instead of using Gmail. But then I realized I could never host my email on a server where I'm also hosting Wordpress. That is because I ...