Email Gateways - GitHub Pagesafnog.github.io/sse/postfix/mailfilter_preso.pdf · for virus...

18

Transcript of Email Gateways - GitHub Pagesafnog.github.io/sse/postfix/mailfilter_preso.pdf · for virus...

Page 1: Email Gateways - GitHub Pagesafnog.github.io/sse/postfix/mailfilter_preso.pdf · for virus protection and spam filtering. • MailScannerscans email for viruses, spam, phishing, malware,
Page 2: Email Gateways - GitHub Pagesafnog.github.io/sse/postfix/mailfilter_preso.pdf · for virus protection and spam filtering. • MailScannerscans email for viruses, spam, phishing, malware,

EmailGatewaysKevinChege

Page 3: Email Gateways - GitHub Pagesafnog.github.io/sse/postfix/mailfilter_preso.pdf · for virus protection and spam filtering. • MailScannerscans email for viruses, spam, phishing, malware,

WhatisaMailGateway?

• Asoftware/service/appliancethatisabletoreceiveandfilteremailsbeforetheyreachtheemailboxes• Typically,amailgatewaywillnotcontainmailboxaccountsandwillonlyreceiveemails,filterthembasedonconfiguredparameters,andthenforwardthemtothemailserverthatcontainsthemailboxes• Thepurposeistoremovedangerousorharmfulcontent(likespamandviruses)onemailbeforetheyreachuserboxes• Amailfiltercanprocessincomingemailsandoroutgoingemails

Page 4: Email Gateways - GitHub Pagesafnog.github.io/sse/postfix/mailfilter_preso.pdf · for virus protection and spam filtering. • MailScannerscans email for viruses, spam, phishing, malware,

Howitflows

SomeMTAEmailfromtheInternet

MailGatewayreceivesEmailandfiltersoutbasedoncriteria.Forwardstheclean

emailtothemailserver

MailServerwithmailboxesdelivers

theemailstothemailboxes.

Page 5: Email Gateways - GitHub Pagesafnog.github.io/sse/postfix/mailfilter_preso.pdf · for virus protection and spam filtering. • MailScannerscans email for viruses, spam, phishing, malware,

Advantages

• Removeharmfulemailbeforeitreachesmailboxes• Phishingemails,malware,virusesetc

• Removetheworkoffilteringemailfromtheserverthatishandlingemailboxes• Highlyconfigurableandcanblockemailsbasedonanumberofcriteriaincludingcontentthatisinthebodyoftheemail• Ifhostedoutsidethenetwork,canreduceloadonthenetworkconnection/link(alsoknownasfarsidescrubbing)

Page 6: Email Gateways - GitHub Pagesafnog.github.io/sse/postfix/mailfilter_preso.pdf · for virus protection and spam filtering. • MailScannerscans email for viruses, spam, phishing, malware,

Disadvantages

• Mistakesinconfigurationmaymeanmailisnotdelivered.Theyarehighlycustomisablewithhundredsofoptionsandparameterswhichyoumustbecarefulwith• Increasethenumberofemailserverstobemanaged

Page 7: Email Gateways - GitHub Pagesafnog.github.io/sse/postfix/mailfilter_preso.pdf · for virus protection and spam filtering. • MailScannerscans email for viruses, spam, phishing, malware,

CommontoolsusedinMailGateways• Spamassassin – No.1OpenSourceanti-spamplatformgivingsystemadministratorsafiltertoclassifyemailandblockspam(unsolicitedbulkemail)• ClamAV – Virusscanningsoftware.Canbeusedforemailscanning andwebscanning• Amavisd – interfacebetweentheMTAandtheabovetools.AcommonmailfilteringinstallationwithAmavis consistsofanMTA,ClamAV andSpamassassin• MailScanner - opensourceemailsecuritysystemdesignforLinux-basedemailgateways

Page 8: Email Gateways - GitHub Pagesafnog.github.io/sse/postfix/mailfilter_preso.pdf · for virus protection and spam filtering. • MailScannerscans email for viruses, spam, phishing, malware,

MailGatewayAppliancesThesearesolutionsthatcanbeinstalledonserversandprovideMailGatewayservices• Software:

• AntiSpamSMTPProxy- http://en.wikipedia.org/wiki/Anti-Spam_SMTP_Proxy• MailBorder- http://www.mailborder.com/• ScrolloutF1- http://www.scrolloutf1.com/• Xeams - http://www.xeams.com/

• Hardware(Blackbox):• Barracuda-https://www.barracuda.com/products/emailsecuritygateway

Page 9: Email Gateways - GitHub Pagesafnog.github.io/sse/postfix/mailfilter_preso.pdf · for virus protection and spam filtering. • MailScannerscans email for viruses, spam, phishing, malware,

MailScanner• MailScanner isahighlyrespectedopensourceemailsecuritysystemdesignforLinux-basedemailgateways.• Itisusedatover30,000sitesaroundtheworld• HasfastbecomethestandardemailsolutionatmanyISPsitesforvirusprotectionandspamfiltering.

• MailScanner scansemailforviruses,spam,phishing,malware,andotherattacksagainstsecurityvulnerabilitiesandplaysamajorpartinthesecurityofanetwork.• MailScanner supportsawiderangeofMTAsandvirusscannerstoincludethepopularopensourceClamAV.SpamdetectionisaccomplishedviaSpamassassin,whichisbyfarthemostpopularandstandardizedspamdetectionengine.• WrittenandFoundedby:JulianField

Page 10: Email Gateways - GitHub Pagesafnog.github.io/sse/postfix/mailfilter_preso.pdf · for virus protection and spam filtering. • MailScannerscans email for viruses, spam, phishing, malware,
Page 11: Email Gateways - GitHub Pagesafnog.github.io/sse/postfix/mailfilter_preso.pdf · for virus protection and spam filtering. • MailScannerscans email for viruses, spam, phishing, malware,

Abitsimpler…

Page 12: Email Gateways - GitHub Pagesafnog.github.io/sse/postfix/mailfilter_preso.pdf · for virus protection and spam filtering. • MailScannerscans email for viruses, spam, phishing, malware,

MailScanner asanAppliance

• MailScannercanbecombinedwithafrontendtobecomeaMailGatewayappliance• Twofrontendsareavailable:

• Baruwa – http://baruwa.org• Mailwatch - http://mailwatch.org/

• WhenproperlymanagedandconfiguredwithPostfixorEximastheMTA,onecanbuildapowerfulmailgateway

Page 13: Email Gateways - GitHub Pagesafnog.github.io/sse/postfix/mailfilter_preso.pdf · for virus protection and spam filtering. • MailScannerscans email for viruses, spam, phishing, malware,

MailScanner hashundredsofKnobs

• https://www.mailscanner.info/MailScanner.conf.index.html• Thedefaultsmostlyworkbutforaproductionenvironment,pleasereadthemanual!• Wewillinstallwithbasicfeaturesof

• ProcessemailandcheckforSPAMandviruses• LogallemailstoMySQL(SPAMandNotSPAM)• Storeallemailsinthequarantine

Page 14: Email Gateways - GitHub Pagesafnog.github.io/sse/postfix/mailfilter_preso.pdf · for virus protection and spam filtering. • MailScannerscans email for viruses, spam, phishing, malware,
Page 15: Email Gateways - GitHub Pagesafnog.github.io/sse/postfix/mailfilter_preso.pdf · for virus protection and spam filtering. • MailScannerscans email for viruses, spam, phishing, malware,
Page 16: Email Gateways - GitHub Pagesafnog.github.io/sse/postfix/mailfilter_preso.pdf · for virus protection and spam filtering. • MailScannerscans email for viruses, spam, phishing, malware,

MailScanner Reports

Page 17: Email Gateways - GitHub Pagesafnog.github.io/sse/postfix/mailfilter_preso.pdf · for virus protection and spam filtering. • MailScannerscans email for viruses, spam, phishing, malware,

LetusbuildourMailGateway

• Wewillnowsetupamailgateway• Configuringamailfilterisnoteasy.Youmustbeawareofwhatyouareenablingordisabling.Preconfiguredfileswillbeprovidedduetotimelimitation• SettingthecorrectDNSentriesiskey• Youwillfilteremailforyourneighborandhewillfilteryouremail• Attheend,youshouldhaveafairlystrongandworkingmailfilter

Page 18: Email Gateways - GitHub Pagesafnog.github.io/sse/postfix/mailfilter_preso.pdf · for virus protection and spam filtering. • MailScannerscans email for viruses, spam, phishing, malware,

References

• https://www.mailscanner.info• https://en.wikipedia.org/wiki/DomainKeys_Identified_Mail• http://postfix.org• https://www.safaribooksonline.com/library/view/postfix-the-definitive/0596002122/ch04s05.html


Email Spam Detection using machine Learning

Email Spam Detection using machine Learning

The Carbon Footprint of Email Spam Report · The Carbon Footprint of Email Spam Report • An estimated worldwide total of 62 trillion spam emails were sent in 2008 • Globally,

The Carbon Footprint of Email Spam Report · The Carbon Footprint of Email Spam Report • An estimated worldwide total of 62 trillion spam emails were sent in 2008 • Globally,

Spam Email: 8 Do's and Don'ts

Spam Email: 8 Do's and Don'ts

Unclogging My Email: Spam, Phishing Attacks, Netiquette

Unclogging My Email: Spam, Phishing Attacks, Netiquette

FTC Spam Forum Technological Solutions to Spam / Structural Changes to Email Trusted Email Open Standard A Comprehensive Policy and Technology Proposal.

FTC Spam Forum Technological Solutions to Spam / Structural Changes to Email Trusted Email Open Standard A Comprehensive Policy and Technology Proposal.

PREDIKSI SPAM EMAIL MENGGUNAKAN METODE SUPPORT … · Spam email is the term used to describe the messages sent in mass emails or incoming email received without approval. Spam Email

PREDIKSI SPAM EMAIL MENGGUNAKAN METODE SUPPORT … · Spam email is the term used to describe the messages sent in mass emails or incoming email received without approval. Spam Email

Uts Spam Email

Uts Spam Email

Trend Micro Hosted Email Security Stop Spam. Save Time.la.trendmicro.com/media/wp/hosted-email-security-whitepaper-en.pdf · Trend Micro Hosted Email Security Stop Spam. Save Time.

Trend Micro Hosted Email Security Stop Spam. Save Time.la.trendmicro.com/media/wp/hosted-email-security-whitepaper-en.pdf · Trend Micro Hosted Email Security Stop Spam. Save Time.

Spam Email: 8 Dos and Dont's

Spam Email: 8 Dos and Dont's

Email Spam Filtering Computer Security Seminar

Email Spam Filtering Computer Security Seminar

Verizon Email: Managing Spam – Verizon QuickGuides Outlook, forward spam to spam@verizon.net. Avoid posting your email address online, or on public forums. Spammers use programs

Verizon Email: Managing Spam – Verizon QuickGuides Outlook, forward spam to [email protected]. Avoid posting your email address online, or on public forums. Spammers use programs

The Carbon Footprint of Email Spam Report

The Carbon Footprint of Email Spam Report

Comcast Email Account SPAM Preference Change Instructions · Comcast Email Account SPAM Preference Change Instructions 1. Log into your Comcast email account at web this web address:

Comcast Email Account SPAM Preference Change Instructions · Comcast Email Account SPAM Preference Change Instructions 1. Log into your Comcast email account at web this web address:

090417_Carbon Footprint of Spam Email Report_McAfee

090417_Carbon Footprint of Spam Email Report_McAfee

Email marketing: Keeping your email out of the spam filter

Email marketing: Keeping your email out of the spam filter

Email Marketing VS SPAM

Email Marketing VS SPAM

Anti-Spam Spam Manager User Guide - Symantecimages.messagelabs.com/.../AntiSpam_SpamManagerUserGuide.pdf · Spanish Swedish About Spam Manager Spam is unwanted email, often promoting

Anti-Spam Spam Manager User Guide - Symantecimages.messagelabs.com/.../AntiSpam_SpamManagerUserGuide.pdf · Spanish Swedish About Spam Manager Spam is unwanted email, often promoting

The evolution-of-spam-an-email-marketing-infographic

The evolution-of-spam-an-email-marketing-infographic

Verizon Email: Managing Spam – Verizon QuickGuides Email: Managing Spam – Verizon QuickGuides Subject: Learn how to manage and prevent spam on your Verizon email account. An overview

Verizon Email: Managing Spam – Verizon QuickGuides Email: Managing Spam – Verizon QuickGuides Subject: Learn how to manage and prevent spam on your Verizon email account. An overview

Email Best Practices - GitHub Pagesafnog.github.io/sse/postfix/email_best_practices.pdf · mechanism to help protect both email receivers and email senders from forged and phishing

Email Best Practices - GitHub Pagesafnog.github.io/sse/postfix/email_best_practices.pdf · mechanism to help protect both email receivers and email senders from forged and phishing