Interests: News, Finance, Computer, Science, Tech, and Living

  • 0 Posts
  • 268 Comments
Joined 3 years ago
cake
Cake day: June 13th, 2023

help-circle
  • Just to emphasize it is the reputation problem and getting common mail providers the accept. You’ll need to get a well known domain like a .net or .com domain. You probably need to have a web site too on the domain. Then let that stuff age. You’ll also need to get a static IP for the VPS your using that has a good reputation and your hosting provider will have to allow you to send email which means you’ll have to talk with them to make sure everything it setup. You’ll also probably want certs both for the website, and for your SMTP server. Then there are SPF, DKIM, DMARK, and DNS configuration you’ll have to make too. Optional other configs like MTA-STS, or DANE. Just a lot of detail. Once your setup, there are testing sites you can go to test or SMTP server.

    Another issue is you want email to be full time. So I think that probably means 2 incoming mail servers on two different VPS systems maybe in two different data centers. Then you need IMAP, and maybe a webmail system. I guess these last two could be one one of the VPS systems hosting one of the SMTP servers. Lot of components.

    I don’t actually using my own VPS based mail system for my main email addresses. Instead we use a shared hosting plan and our own domain instead. You might want to look at is Namecheap CPanel Email that Comes with their Stellar Hosting plan. That is what we use. You can use up to 30 addresses on their base plan and maybe unlimited on the next level up. It is less then $100 per year after you add all you need, the hosting plan, a domain, and certs (maybe more in the $60 range?). The advantage of this, the hosting provider takes care of the infrastructure, and it is cheaper and lest time consuming then two VPS systems and all the work to maintain them.

    About getting other providers to accept your mail, I’ve found Yahoo and the domains they serve to be one of the worst offenders.







  • flatbield@beehaw.orgtoLinux@lemmy.mlQuestion about Antivirus
    link
    fedilink
    English
    arrow-up
    7
    ·
    edit-2
    3 months ago

    Antivirus is not the begin all and end all. I do not specifiically have AV installed and have had 0 issuses over the past 26 years of Linux use.

    On the other hand I do only install software from trusted sources. I keep my system updated. I do scan things with VirusTotal if there is a question. I have wine installed but not the exe handler. I have a firewall. I do sometimes harden my systems and use security scanners to help with that. Probably biggest attack vectors are email attachments and the web browser. I am careful about attachments. In the brower I use uBlock Origin at a minimum. I segregate sensitive things too so even compromising my general user account would not be fatal. I also have good offline and offsite backups.

    As for AV like stuff. I do sometimes install ClamAV or a rootkit scanner and sometimes do a manual scan but have never found anything. Same with my IDS. My WS for example has Tripwire but not all my systems and have never found anything.

    My point really, I view security about process and defense in depth then AV specifically. Keep in mind that AV introduces attack vectors too.









  • The thing about most default configs of any OS is that user storage is largely accessable to all apps. True of Linux, Android. Windows, …

    Graphene has options to restrict that but you have to set it up that way. Android also has App sandboxing for app data.

    Thinking through the threat model of course is always good as is hardening. All security is porous. Linux is fine generally. If one is exposing services on the public net it is not clear that any OS or software is sufficiently secure, that takes constant effort in terms of monitoring and management.