Smarter mail servers

Version 0.1: Notes on setting up a mailserver to detect phishing attacks and prevent MitM attacks. The below configurations were for a debian 9, and need to be updated and DMARC added. A work in progress …

Mail servers

• Mail servers
• Cyrus
• Dovecot

MTA

• Message Transfer Agent (MTA)
• Postfix configuration
• SASL configuration

DNSSEC

• Domain Name System Security Extensions (DNSSEC)

TLS

• Transport Layer Security (TLS)
• TLS configuration
• DANE configuration
• MTA-STS configuration

SPF

• Sender Policy Framework (SPF)
• SPF configuration

DKIM

• Domain Keys Identified Mail (DKIM)
• DKIM configuration
• Rspamd configuration

DMARC

• Domain-based Message Authentication, Reporting and Conformance (DMARC)
• DMARC configuration