Email Security ?

[Laurie_2]

Greetings from the Midwest,

We use sendmail and can email in and out from our HP K360
HP-UX 11.0 freely to the internet.

We have a good firewall on our
network. However, one we are not a Trusted system yet (will be soon).

We don't have any security patches either. My concern is
that a spammer could send an email to our HP Server and take down our box.

Here is our sendmail version
and patch:

PHNE_17190 1.0 sendmail(1m) 8.8.6 patch

Could someone education me here?

TIA,
Laurie

[Steven Sim Kok Leong]

Hi,

You can check out using an SMTP proxy.

Hope this helps. Regards.

Steven Sim Kok Leong

[Sanjay_6 · Accepted solution]

Hi Laurie,

Take a look at this thread,

http://us-support3.external.hp.com/cki/bin/doc.pl/sid=5a9a05b71269394dba/screen=ckiDisplayDocument?docId=200000054954278

Hope this helps.

Regds

[Wodisch]

Hi,

get "ipchains/9000" and use it for some "firewall" restrictions of your HP-UX box itself...

HTH,
Wodisch

[Mark Greene_1]

you can download the security patch check utility from here:

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=B6834A

and then you can run this monthly to check for new updates.

HTH
mark

[Sanjay_6]

Hi Laurie,

I think mark had been guiding you towards this link,

https://software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/try.pl?productNumber=B6834AA&date=

Note the s in http. So you have to copy and paste the link in your browser to access the link.

Hope this helps.

Regds

[Knut Eckstein]

Laurie,

you might want to look at the security of your mail server from different "angles", some of which have already been mentioned:

1)Access control on IP level
=> limit who can connect to the machine, using IP filtering as mentioned above.

2) Patch the application
=> avoid being "hacked" through exploiting a programming error and the system being controlled by an intruder. Use the patch check tool as mentioned above

3) Configure sendmail in a way that it can't be misused by spammers. These guys don't hack you but they exploit a too "liberal" configuration by relaying tons of mail through your site.
=> see http://www.sendmail.org/tips/relaying.html
or
http://www.sendmail.org/antispam.html

Regards,

Knut