Skip to main content

All Questions

Tagged with
Filter by
Sorted by
Tagged with
0 votes
1 answer
578 views

Can the hosting provider who has access to the email server machine, access the emails?

I am planning to use a self hosted (Linux based) email server. However, the server will be on hosting providers machine. The hosting providers will have access to the physical machine. In that case, ...
Ahmad Ismail's user avatar
1 vote
0 answers
181 views

Strange cyrus/imaps Logins without valid password

I found apparently successful logins from a foreign ip-address to our cyrus-imap server: Nov 24 08:16:20 server-1 cyrus/imaps[12101]: starttls: TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits ...
mko's user avatar
  • 11
0 votes
1 answer
574 views

Is it safe to automatically parse text as markdown?

I have a server, which receives text mails from students and I plan to automatically collect their message bodys and parse them as markdown so that I can generate a nicely formatted output as pdf. Is ...
Jannek S.'s user avatar
  • 103
0 votes
2 answers
980 views

How to decide to use, then how to use an http gofile.me url in an email, explained to a five year old?

I'm terrified of clicking on links in emails, and yet a colleague insists I do. When I receive an email in my gmail account that contains links of the form http://gofile.me/xxxxx/yyyyyyyyy along with ...
uhoh's user avatar
  • 1,409
3 votes
2 answers
157 views

When is an email rejected?

Currently, I am working on a web application and wanted to let users send emails to others through a web form. So, they just should submit their email address and my web app would then send mails to ...
Aliquis's user avatar
  • 899
10 votes
2 answers
3k views

Are hacked email addresses a local network or web server problem? [closed]

I work at a small nonprofit and woke up to find that many of our email addresses have been sending spam asking recipients to open an attachment (doc file). We have a local network that all of our ...
dfrown's user avatar
  • 111
0 votes
2 answers
274 views

VPS outbound emails security

I have an instance of VPS running with logrotate that emails me logs every day. It is a send-only SMTP server with Postfix, set up using this guide. I just need to receive the logs from this server. ...
Ilya's user avatar
  • 205
20 votes
3 answers
16k views

What is the most secured SMTP authentication type?

Say you have to choose only one among the following authentication types for your own SMTP server: LOGIN, PLAIN CRAM-MD5 DIGEST-MD5 NTLM/SPA/MSN Which one would you recommend for optimal security? ...
user123456's user avatar
3 votes
2 answers
1k views

Can I trick a mail server into sending me an email?

Can I trick a mail server into sending me an email? I would like to do some email header analysis on the emails that are send by a mail-server in a penetration-test and possibly get to know more ...
Bob Ortiz's user avatar
  • 7,125
0 votes
1 answer
124 views

Which is better: detecting spam at receiver or source?

Background I researched a detection of spam sent out using bots. After studying different techniques used by bots to deliver spam, I have no generalised solution to detect spamming at the source ...
user10012's user avatar
  • 191
-1 votes
1 answer
410 views

Server is Sending Spam

I have determined that my server is compromised because it is sending spam (from one of my legitimate addresses). How can I determine what's compromised? Does the attacker know my SSH password? ...
Peter's user avatar
  • 143
0 votes
1 answer
236 views

how to trace or get evidence you've been hacked [closed]

my devices and my network have been compromised. I foolishly left my router unprotected and they were able to gain access to all my apple devices and then install some sort of software that will take ...
user53536's user avatar
2 votes
2 answers
2k views

How to find out the email host of a vanity email address?

Assuming a person gets his own domain address, say, theperson.com. He then goes on to create a vanity email address with that domain. e.g. [email protected]. [email protected] may be hosted by the ...
bunbun's user avatar
  • 123
2 votes
1 answer
1k views

Is server-side cryptography with user-only access possible for email services?

I came across the Lavabit High Scalability Writeup and got curious. Do you use any particularly cool technologies or algorithms? The way we encrypt messages before storing them is relatively unique. ...
platzhirsch's user avatar
4 votes
3 answers
2k views

Can email be encrypted before it reaches the mail server? If not, is there something that would allow something like this that's being worked on?

I was thinking about hosting my own email (own email server) instead of using Gmail. But then I realized I could never host my email on a server where I'm also hosting Wordpress. That is because I ...
user avatar