[cobalt-users] Spam/AV & Secure Encrypted Email

["Troy Arnold" <cobalt@xxxxxxxxxxxxxx>]

Hey all. You guys started this conversation right when I was finishing up my
research on the first phase (Spam/AV), so I thought I would share some
stuff. It goes a bit beyond (not far) and covers some stuff I think is
pertinent. It's long. Hope it helps.

Just for kicks, wanted to throw this out for newbies. I have basically
modeled my Cobalt installs and configuration upon many posts from the user
lists, most notably Carrie's
(http://list.cobalt.com/pipermail/cobalt-security/2001-June/002620.html),
reading/researching (RTFM) alot, and Solarspeed.net
(http://www.solarspeed.net). If you haven't got your box upto the levels
outlined on these links then your not ready.

To give credit where it is due...
1. Carrie Rules...
2. Solarspeed.net
http://www.solarspeed.net/cobalt_security_package.html
http://www.solarspeed.net/mailvirus-scanner.html
Among my many researches looking for procedures, methods, faqs, etc. I found
Michael Staubers site. I used his services outline to define what I required
to make my box secure. His site provided one of the best outlines/procedures
for securing your RAQ. I wish the Cobalt came with a basic FAQ like that, or
better yet a installed.

But I been doing this a year now, got a new box and figured I wanted to do
all of the installs and configuration myself (to know the ins and outs, and
learn Linux in the process) so I didn't use his paid services. Using his
outline you can find alot of great tools, just remember RTFM and search the
archives for assistance. Or, let him do it for a small fee (i think he's too
cheap, hey -  it's bad for business, jk...).

FYI. I am in no way affiliated with the companies or products noted above
and this is not SPAM! So please don't tell me to post this to the
web-hosting talk forum.

Our final decision is leaning towards the following combination...
1. Use Amavis with this Virus Engine (for cheap)...
2. Kaspersky Anti-VirusT for Personal Linux --- $49!
http://www.avp.ru/products.asp?tgroup=4&pgroup=11&id=56
3. Enhancing E-Mail Security With Procmail
ftp://ftp.rubyriver.com/pub/jhardin/antispam/sanitizer-configuration.html
4. Open Relay Blackhole Zones http://www.orbz.org/
Anyone have any advice, warnings, etc?

pjm says...
<snip>
and quotes me before putting me on the spot:
<snip>
I didn't put you on the spot! Your advice really cinched my decision to
utilize Amavis w/Kasperksy for an added level of protection. So thanks! We
want to provide spam & virus protected email accounts (at an added cost of
course) along with providing our own encryption keys, see below.

Also, I am just getting started on the research stage for the install of
GnuPG (http://www.gnupg.org/) and am not sure of what problems I may expect.
We want to provide form to mail encryption as well as keys for personal use
with programs like Outlook Express or Eudora. Anyone install this yet? Let
me know. I looked at SSL but I believe that only works with web based email
(Neomail). Am I correct, any suggestions?

PS To everyone that emailed me for a write-up on CMU... I swear I am getting
to it. Have everything saved (I write everything down)... but have been
mucho busy. My new server is up and live! Working great. Thanks to everyone
who helped with that migration.

Thanks in advance.

Best regards,
Troy Arnold
websetters, inc.