LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   How to configure Postfix to enhance the security? (https://www.linuxquestions.org/questions/linux-security-4/how-to-configure-postfix-to-enhance-the-security-642102/)

zazem 05-14-2008 06:40 AM
How to configure Postfix to enhance the security?
 
Hi All,

I have being searching around to find out how to configure postfix to enhance to security. I am using Ubunbu 8.04 + postfix . (my network structure is like: LAN-internal firewall-mail/ftp/web server - external firewall - Internet)

As I just know is to run Postfix daemon process chrooted to strong the security. Is there any way to configure it?

I will be very appreciate someone can help~~

win32sux 05-14-2008 07:00 AM
Welcome to LQ! :)
Quote:
Originally Posted by zazem (Post 3152805)
Hi All,

I have being searching around to find out how to configure postfix to enhance to security. I am using Ubunbu 8.04 + postfix . (my network structure is like: LAN-internal firewall-mail/ftp/web server - external firewall - Internet)

As I just know is to run Postfix daemon process chrooted to strong the security. Is there any way to configure it?

I will be very appreciate someone can help~~
IMHO your time would be much better spent getting AppArmor setup for Postfix. Ubuntu ships with AppArmor enabled out-of-the-box, so half of the work (installation) is already done for you. And if the Ubuntu repositories have a profile for Postfix available, then you're smooth sailing. But even if they don't, creating a profile is relatively simple (compared to to other MAC solutions, such as SELinux). There's plenty of AppArmor HOWTOs on the Web.

zazem 05-14-2008 07:33 AM
Quote:
Originally Posted by win32sux (Post 3152819)
Welcome to LQ! :)IMHO your time would be much better spent getting AppArmor setup for Postfix. Ubuntu ships with AppArmor enabled out-of-the-box, so half of the work (installation) is already done for you. And if the Ubuntu repositories have a profile for Postfix available, then you're smooth sailing. But even if they don't, creating a profile is relatively simple (compared to to other MAC solutions, such as SELinux). There's plenty of AppArmor HOWTOs on the Web.

Thanks win32sux, your reply is rapid.

currently i am writing the report for enhance the security via configuration. so any other good resources for it?

Cheers

farslayer 05-14-2008 08:37 AM
Lots of Google results that are relevant..

http://www.google.com/search?hl=en&q...ix&btnG=Search

zazem 05-14-2008 08:41 AM
Quote:
Originally Posted by farslayer (Post 3152902)
Lots of Google results that are relevant..

http://www.google.com/search?hl=en&q...ix&btnG=Search
Thanks farslayer


All times are GMT -5. The time now is 06:55 AM.