les were run,
due to a shortcircuited rule
* -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
X-SA-Exim-Version: 4.2.1 (built Mon, 22 Mar 2010 06:51:10 +0000)
X-SA-Exim-Scanned: Yes (on mail.bitfolk.com)
Cc: users@???
Subject: Re: [bitfolk] My first time running mail and DNS
X-BeenThere: users@???
X-Mailman-Version: 2.1.13
Precedence: list
List-Id: Users of BitFolk hosting <users.lists.bitfolk.com>
List-Unsubscribe: <https://lists.bitfolk.com/mailman/options/users>,
<mailto:users-request@lists.bitfolk.com?subject=unsubscribe>
List-Archive: <http://lists.bitfolk.com/lurker/list/users.html>
List-Post: <mailto:users@lists.bitfolk.com>
List-Help: <mailto:users-request@lists.bitfolk.com?subject=help>
List-Subscribe: <https://lists.bitfolk.com/mailman/listinfo/users>,
<mailto:users-request@lists.bitfolk.com?subject=subscribe>
X-List-Received-Date: Fri, 25 May 2012 13:49:42 -0000
On Fri, May 25, 2012 at 02:43:03PM +0100, Paul Stimpson wrote:
> Hi,
>
> Thank you for you help with choosing a domain registrar. I went with Gandi I'm the end and they seem great.
>
> I've bought my first domains and I'm just about to begin configuring services on my VPS. This is the first time I've run a server facing the public internet.
>
> I'd really appreciate any guidance on the best way to set up the following so that it's competent, reliable and doesn't get pwned. I want to be a good net citizen.
>
> *BIND
I found the debian packages good. Possibly I should look at chrooting
things. I might even be doing it already for all I know!
> *Incoming mail
I've had good results with exim.
> *A POP3/IMAP server for my client.
I've had good results with dovecot.
> *An SMTP server for my client to send to.
I've had good results with exim.
> *Webmail for on-the-road access to my mail. (my existing provider uses Open.Exchange and I like it but I'm also happy to consider other recommendations)
I've had good results with prayer
(
http://www-uxsup.csx.cam.ac.uk/~dpc22/prayer/)
but I think it's very much a niche product - it focusses on the "basic, but fast" angle whereas most people seem to want more functionality, and not to have to compile a C server.
For debian, I like the "securing debian" manual:
http://www.debian.org/doc/manuals/securing-debian-howto/
Some of it needs to be taken with a pinch of salt, but it's a good list
of things to look at.
Michael
From stuart@??? Fri May 25 14:02:03 2012
Received: from numpty.absolutelyplastered.com ([85.119.82.19])
by mail.bitfolk.com with esmtp (Exim 4.72)
(envelope-from <stuart@???>) id 1SXv5f-000570-MF
for users@???; Fri, 25 May 2012 14:02:03 +0000
Received: from localhost (localhost.localdomain [127.0.0.1])
by numpty.absolutelyplastered.com (Postfix) with ESMTP id 123E364AB3
for <
