Risorse





Virtual Users And Domains With Postfix, Courier, MySQL And SquirrelMail (Ubuntu 8.04 LTS)

This document describes how to install a Postfix mail server based that is based on virtual users and domains, i.e. users and domains that are in a MySQL database. I will also demonstrate the installation and configuration of Courier (Courier-POP3, Courier-IMAP), so that Courier can authenticate against the same MySQL database Postfix uses. The resulting Postfix server is capable of SMTP-AUTH and TLS and quota. Passwords are stored in encrypted form in the database. In addition to that, this tutorial covers the installation of Amavisd, SpamAssassin and ClamAV so that emails will be scanned for spam and viruses. I will also show how to install SquirrelMail as a webmail interface so that users can read and send emails and change their passwords.

Scritto da falko, il 22-05-2008
LinkConsiglia

The Perfect SpamSnake - Ubuntu 8.04 LTS

This tutorial shows how to set up an Ubuntu Hardy Heron (8.04 LTS) based server as a spamfilter in gateway mode. In the end, you will have a SpamSnake Gateway which will relay clean emails to your MTA. You will also be able to view your incoming queue, train your SpamSnake and carry out a few more advanced operations via MailWatch.

Virtual Users & Domains With Postfix, MySQL & SquirrelMail (Mandriva 2008.1)

This document describes how to install a Postfix mail server that is based on virtual users and domains, i.e. users and domains that are in a MySQL database. I will also demonstrate the installation and configuration of Courier (Courier-POP3, Courier-IMAP), so that Courier can authenticate against the same MySQL database Postfix uses. In addition to that, this tutorial covers the installation of Amavisd, SpamAssassin and ClamAV so that emails will be scanned for spam and viruses. I will also show how to install SquirrelMail as a webmail interface so that users can read and send emails and change their passwords.

Scritto da falko, il 15-04-2008
LinkConsiglia

Virtual Users And Domains With Postfix, MailScanner, Mailwatch & MySQL On CentOS 5.1

This document describes how to set up a Postfix mail server that is based on virtual users and domains on CentOS 5.1 so that it works with MailScanner and Mailwatch. The resulting system provides a web interface (Mailwatch) where you can manage quarantined emails, train SpamAssassin, edit the white- and blacklist, view configuration files and the detailed MySQL database status.

Ecco a voi ClamBuntu, naturalmente griffata Lazza

[...] Come avrete senz’altro capito, è un sistema il cui scopo principale è di utilizzare ClamAv, l’antivirus open source. Utilissimo per scansionare partizioni di un certo sistema piuttosto vulnerabile; e ci siamo capiti. [...]

Scritto da Lazza, il 06-03-2008
LinkConsiglia

Ecco a voi ClamBuntu, naturalmente griffata Lazza

[...] Come avrete senz’altro capito, è un sistema il cui scopo principale è di utilizzare ClamAv, l’antivirus open source. Utilissimo per scansionare partizioni di un certo sistema piuttosto vulnerabile; e ci siamo capiti. [...]

Virtual Users And Domains With Postfix, Courier And MySQL (Mandriva 2008.0)

This document describes how to install a Postfix mail server that is based on virtual users and domains, i.e. users and domains that are in a MySQL database. I will also demonstrate the installation and configuration of Courier (Courier-POP3, Courier-IMAP), so that Courier can authenticate against the same MySQL database Postfix uses. The resulting Postfix server is capable of SMTP-AUTH and TLS and quota (quota is not built into Postfix by default, I will show how to patch your Postfix appropriately). Passwords are stored in encrypted form in the database (most documents I found were dealing with plain text passwords which is a security risk). In addition to that, this tutorial covers the installation of Amavisd, SpamAssassin and ClamAV so that emails will be scanned for spam and viruses.

ClamAV: Multiple vulnerabilities

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200712-20
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: High
Title: ClamAV: Multiple vulnerabilities
Date: December 29, 2007
Bugs: #202762
ID: 200712-20

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
========

Multiple vulnerabilities have been discovered in ClamAV allowing remote
execution of arbitrary code and Denial of Service attacks.

Background
==========

Clam AntiVirus is a free anti-virus toolkit for UNIX, designed
especially for e-mail scanning on mail gateways.

Affected packages
=================

-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 app-antivirus/clamav < 0.91.2-r1 >= 0.91.2-r1

Description
===========

iDefense reported an integer overflow vulnerability in the cli_scanpe()
function when parsing Portable Executable (PE) files packed in the MEW
format, that could be exploited to cause a heap-based buffer overflow
(CVE-2007-6335). Toeroek Edwin reported an off-by-one error when
decompressing MS-ZIP compressed CAB files (CVE-2007-6336). An
unspecified vulnerability related to the bzip2 decompression algorithm
has also been discovered (CVE-2007-6337).

Impact
======

A remote attacker could entice a user or automated system to scan a
specially crafted file, possibly leading to the execution of arbitrary
code with the privileges of the user running ClamAV (either a system
user or the "clamav" user if clamd is compromised).

Workaround
==========

There is no known workaround at this time.

Resolution
==========

All ClamAV users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot -v ">=app-antivirus/clamav-0.91.2-r1"

References
==========

[ 1 ] CVE-2007-6335
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6335
[ 2 ] CVE-2007-6336
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6336
[ 3 ] CVE-2007-6337
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6337

Availability
============

This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:

http://security.gentoo.org/glsa/glsa-200712-20.xml

Concerns?
=========

Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
http://bugs.gentoo.org.

License
=======

Copyright 2007 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).

The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.

http://creativecommons.org/licenses/by-sa/2.5


Virtual Users And Domains With Postfix, Courier And MySQL (CentOS 5.1)

This document describes how to install a Postfix mail server that is based on virtual users and domains, i.e. users and domains that are in a MySQL database. I will also demonstrate the installation and configuration of Courier (Courier-POP3, Courier-IMAP), so that Courier can authenticate against the same MySQL database Postfix uses. The resulting Postfix server is capable of SMTP-AUTH and TLS and quota (quota is not built into Postfix by default, I will show how to patch your Postfix appropriately). Passwords are stored in encrypted form in the database (most documents I found were dealing with plain text passwords which is a security risk). In addition to that, this tutorial covers the installation of Amavisd, SpamAssassin and ClamAV so that emails will be scanned for spam and viruses.

Adding And Updating SpamAssassin Rulesets With RulesDuJour

This article explains how you can download additional SpamAssassin rulesets resp. automatically update these rulesets with a shell script called RulesDuJour. These additional rulesets can increase your spam recognition rate dramatically. Most of the rulesets that RulesDuJour supports can be found on the SA Rules Emporium web site.



Buydifferent.it

Qui trovi RAM per Eee PC a
partire da 19,90 euro.
Garantita a vita

Inoltre Secure Digital HC  Eee PC per espanderne la capienza fino a 20 GB.
A partire da 14,90 Euro



Sondaggio*

Ti piace la nuova grafica?
Si, è bellissima
18%
Si, abbastanza
40%
Si, è nella norma
12%
E' meglio dell'altra, ma nulla di che
13%
Non proprio
6%
No
2%
No, per nulla
5%
Chi ha fatto sto obrobrio?
4%
Voti totali
* per votare devi effettuare il login






Collabora

ZioBudda.net sta crescendo sempre di più, ma mi serve una mano per portare avanti i progetti e per rendere il sito sempre più bello e pieno di informazioni.






Si ringrazia:

Unbit.it Cybernetic.it website counter