In this episode, I will discuss email security best practices.
Host: Paul Joyner
Email: paul@sysadmintoday.com
Facebook: https://www.facebook.com/sysadmintoday
Twitter: https://twitter.com/SysadminToday
Show Links
Podnutz Episode discussing Automation
http://podnutz.com/podnutz273/
Reverse DNS Checker
https://www.debouncer.com/reverse-dns-check?attempt=1
SPF, DKIM & DMARC Information
https://blogs.technet.microsoft.com/fasttracktips/2016/07/16/spf-dkim-dmarc-and-exchange-online/
Exchange 2016 Anti-Spam Setup
http://msexchangeguru.com/2017/08/08/exchange-2016-anti-spam-configuration/
Exchange 2013 Anti-Spam Setup
http://techgenix.com/anti-spam-and-anti-malware-protection-exchange-2013-part1/
Exchange 2010 Anti-Spam Setup
http://www.mustbegeek.com/configure-anti-spam-agents-in-exchange-2010/
How to Create a rule to prevent spoofing
https://www.intrust-it.com/2015/10/14/use-mail-rules-in-office-365-to-tag-emails-with-spoofed-senders/
Preparing for the mandatory use of TLS 1.2 in Office 365
https://support.microsoft.com/en-us/help/4057306/preparing-for-tls-1-2-in-office-365
Encrypted Messaging
https://pixelprivacy.com/resources/encrypted-messaging/
Ultimate Privacy Guide
https://vpnandgo.com/internet-privacy/
RBL List
Spam Cop: bl.spamcop.net
Surriel: psbl.surriel.com
Spamhaus: zen.spamhaus.org
Sorbs: dnsbl.sorbs.net
Barracuda: b.barracudacentral.org
Please Support the Channel
https://www.patreon.com/sysadmintoday
2 thoughts on “Sysadmin Today #38: Email Security”
I”m curious about the email systems referred to in the TV4 program this evening. Would, in theory, the NSA have the CA self-destructing emails? It seems possible, maybe even probable, that the NSA was hoovering CA during this period, no? If CA assumed that they couldn”t/wouldn”t get caught, those emails might be interesting. “In one exchange Alexander Nix revealed the company used a secret self-destructing email system that leaves no trace. He said: “No-one knows we have it, and secondly we set our… emails with a self-destruct timer… So you send them and after they’ve been read, two hours later, they disappear. There’s no evidence, there’s no paper trail, there’s nothing.”
Interesting. I guess in theory you could have a retention policy to delete all emails after one day or even hours. I bet the users would love that.