quarta-feira, 25 de agosto de 2010

malware e spam - Postfix - (novamente)

acho que nunca termina. Acabo de encontrar o link da Advosys Consulting com um "paper" bem interessante sobre como usar o Postfix para combater spam, e-mails mal-formados ou "limpar" tudo, usando Perl, SpamAssassin e um tal de Anonimy Sanitizer.

é uma documentação bem completa, com todas as instruções apropriadas :)

o site tem um grande conjunto de howtos, vejam:


Fighting malware and spam with Postfix
Friday, May 25 2007 15:56

An easy way to extend Postfix, the popular replacement for Sendmail, to provide high-level attachment filtering and intelligent spam identification.


Adding a second postfix instance
Wednesday, March 10 2004 14:33

By popular demand, a quick HOWTO describing how to run two instances of Postfix to separate inbound mail from outbound.



Email policies that prevent viruses
Wednesday, August 02 2006 15:14

Simple and effective methods you can use at the gateway level to prevent the next Nimda or Sircam from attacking your organization.



Web security
Web application security

HTTP digest authentication
Tuesday, August 22 2006 17:08

Using HTTP digest authentication in web applications as an alternative to SSL for protecting usernames and passwords.


Hardening PHP servers with suhosin
Thursday, November 09 2006 16:44

How to compile and install the suhosin security module for PHP on Ubuntu Linux Server


Writing Secure Web Applications
Wednesday, March 10 2004 15:46

Creating secure web applications is extremely difficult. Learn the basic techniques of writing tamper-proof web apps in Perl and other languages.


Preventing HTML form tampering
Monday, January 02 2006 15:27

HTML form data and cookies can easily be altered by malicious users, especially the so-called "hidden" fields. Learn how to detect tampering using HMAC signatures.