topic Re: Email Security ? in Operating System - HP-UX

Email Security ?

Laurie_2 — Thu, 21 Feb 2002 02:31:56 GMT

Greetings from the Midwest,

We use sendmail and can email in and out from our HP K360
HP-UX 11.0 freely to the internet.

We have a good firewall on our
network. However, one we are not a Trusted system yet (will be soon).

We don't have any security patches either. My concern is
that a spammer could send an email to our HP Server and take down our box.

Here is our sendmail version
and patch:

PHNE_17190 1.0 sendmail(1m) 8.8.6 patch

Could someone education me here?

TIA,
Laurie

Re: Email Security ?

Steven Sim Kok Leong — Thu, 21 Feb 2002 02:38:04 GMT

Hi,

You can check out using an SMTP proxy.

Hope this helps. Regards.

Steven Sim Kok Leong

Re: Email Security ?

Sanjay_6 — Thu, 21 Feb 2002 04:42:42 GMT

Hi Laurie,

Take a look at this thread,

http://us-support3.external.hp.com/cki/bin/doc.pl/sid=5a9a05b71269394dba/screen=ckiDisplayDocument?docId=200000054954278

Hope this helps.

Regds

Re: Email Security ?

Wodisch — Thu, 21 Feb 2002 20:30:41 GMT

Hi,

get "ipchains/9000" and use it for some "firewall" restrictions of your HP-UX box itself...

HTH,
Wodisch

Re: Email Security ?

Mark Greene_1 — Thu, 21 Feb 2002 20:42:17 GMT

you can download the security patch check utility from here:

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=B6834A

and then you can run this monthly to check for new updates.

HTH
mark

Re: Email Security ?

Sanjay_6 — Thu, 21 Feb 2002 20:53:46 GMT

Hi Laurie,

I think mark had been guiding you towards this link,

https://software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/try.pl?productNumber=B6834AA&date=

Note the s in http. So you have to copy and paste the link in your browser to access the link.

Hope this helps.

Regds

Re: Email Security ?

Knut Eckstein — Sun, 03 Mar 2002 22:00:29 GMT

Laurie,

you might want to look at the security of your mail server from different "angles", some of which have already been mentioned:

1)Access control on IP level
=> limit who can connect to the machine, using IP filtering as mentioned above.

2) Patch the application
=> avoid being "hacked" through exploiting a programming error and the system being controlled by an intruder. Use the patch check tool as mentioned above

3) Configure sendmail in a way that it can't be misused by spammers. These guys don't hack you but they exploit a too "liberal" configuration by relaying tons of mail through your site.
=> see http://www.sendmail.org/tips/relaying.html
or
http://www.sendmail.org/antispam.html

Regards,

Knut