Skip to main content

Postfix

By Default CWP server comes with Postfix + Dovecot + AntiSpam Solutions. We need to do some modifications on Postfix + Dovecot , for better security and to get high performance. In this series tutorials , We will learn about Postfix + Dovecot with AntiSpam Solutions .

1. How to Build Postfix + Dovecot Mail Server with Anti-Spam Solutions on CWP Server ?
2. How to Secure CWP Postfix and Dovecot with Lets Encrypt SSL Certificate ?
3. How to Enable logging of Email’s Subject Line in Postfix Maillog ?
4. How to Remove Sensitive Data from Postfix Headers ?
5. How to Block (Virus) Extensions on Postfix Mail Server ?
6. How to Configure Postfix SMTP Relay on CWP CentOS 7 with Relay Provider ?
7. How to Configure autodiscover information for mail clients to setup pop/imap/smtp settings automatically on CentOS WebPanel? False Positives 
https://sanesecurity.com/support/false-positives/ 
http://www.clamav.net/reports/fp 
https://www.securiteinfo.com/services/anti-spam-anti-virus/whitelisting_clamav_signatures.shtml 
https://www.securiteinfo.com/services/anti-spam-anti-virus/improve-detection-rate-of-zero-day-malwares-for-clamav.shtml?lg=en

https://rtcamp.com/tutorials/mail/

SQL 
https://www.digitalocean.com/community/tutorials/how-to-optimize-mysql-queries-with-proxysql-caching-on-ubuntu-16-04

https://www.digitalocean.com/community/tutorials/how-to-measure-mysql-query-performance-with-mysqlslap

https://www.digitalocean.com/community/tutorials/how-to-use-proxysql-as-a-load-balancer-for-mysql-on-ubuntu-16-04

Postfix Relay:
https://stackoverflow.com/questions/55159882/how-do-i-configure-postfix-to-only-relay-emails-from-a-specific-domain

https://forum.efa-project.org/viewtopic.php?t=2222
https://cloud.google.com/appengine/docs/standard/php/mail/mail-with-headers-attachments 
https://www.suse.com/support/kb/doc/?id=000016697

DNS DANE:
https://github.com/internetstandards/toolbox-wiki/blob/master/DANE-for-SMTP-how-to.md
https://blog.apnic.net/2019/11/20/better-mail-security-with-dane-for-smtp/
https://dane.sys4.de/

MTA-STS
https://www.digitalocean.com/community/tutorials/how-to-configure-mta-sts-and-tls-reporting-for-your-domain-using-apache-on-ubuntu-18-04 

DANE-TLSA
https://joscor.com/blog/dane-tlsa-tutorial/

Enforce TLS on incoming Mail:
https://serverfault.com/questions/389636/can-you-set-postfix-to-enforce-tls-on-incoming-email-only-from-certain-domains-o

Important Command
# openssl version
# openssl version –help
# openssl version -help
# openssl version -a
# openssl version -d

# dovecot --version
# postconf mail_version
# postconf -d | grep mail_version

Comments