Ukukhishwa kokusabalalisa kwe-Proxmox Mail Gateway 6.1

I-Proxmox, eyaziwa ngokuthuthukisa ukusatshalaliswa Imvelo Ebonakalayo ye-Proxmox ukusebenzisa ingqalasizinda yeseva ebonakalayo, kwethulwe ukukhishwa kokusabalalisa IProxmox Mail Gateway 6.1. I-Proxmox Mail Gateway yethulwa njengesixazululo se-turnkey sokudala ngokushesha uhlelo lokuqapha ithrafikhi yemeyili nokuvikela iseva yemeyili yangaphakathi.

Ukufakwa kwesithombe se-ISO iyatholakala ukulanda mahhala. Izingxenye Eziqondile Zokusabalalisa vula ilayisensi ngaphansi kwe-AGPLv3. Ukuze ufake izibuyekezo, kokubili inqolobane ekhokhelwayo Yebhizinisi kanye izinqolobane ezimbili zamahhala, ehluke ngezinga lokuzinzisa kwezibuyekezo. Ingxenye yesistimu yokusabalalisa isekelwe kusisekelo sephakheji ye-Debian 10 (Buster) kanye ne-Linux 5.3 kernel. Kungenzeka ukufakwa kwezingxenye ze-Proxmox Mail Gateway phezu kwamaseva asevele esebenza asekelwe ku-Debian 10.

I-Proxmox Mail Gateway isebenza njengeseva elibamba esebenza njengesango phakathi kwenethiwekhi yangaphandle kanye neseva yemeyili yangaphakathi esekelwe ku-MS Exchange, i-Lotus Domino noma i-Postfix. Kungenzeka ukuphatha konke ukugeleza kwemeyili engenayo naphumayo. Wonke amalogi ezincwadi ayacutshungulwa futhi ayatholakala ukuze ahlaziywe kusetshenziswa isixhumi esibonakalayo sewebhu. Womabili amagrafu anikeziwe ukuze kuhlolwe ukuguquguquka okupheleleyo, kanye nemibiko ehlukahlukene namafomu ukuze kutholwe ulwazi mayelana nezinhlamvu ezithile nesimo sokulethwa. Isekela ukudalwa kokulungiselelwa kweqoqo lokutholakala okuphezulu (ukugcina iseva yokulinda evumelanisiwe, idatha ivunyelaniswa ngomhubhe we-SSH) noma ukulinganisa kokulayisha.

Ukukhishwa kokusabalalisa kwe-Proxmox Mail Gateway 6.1

Isethi ephelele yokuvikela, ogaxekile, ubugebengu bokweba imininingwane ebucayi kanye nokuhlunga amagciwane kunikezwa. I-ClamAV kanye Nokuphequlula Okuphephile kwe-Google kusetshenziselwa ukuvimba okunamathiselwe kwi-imeyili okunonya, futhi isethi yezinyathelo ezisuselwe ku-SpamAssassin inikezwa ngokumelene nogaxekile, okuhlanganisa ukusekelwa kokuqinisekiswa komthumeli okuhlehliswayo, i-SPF, i-DNSBL, ukufakwa ohlwini okumpunga, isistimu yokuhlukanisa i-Bayesia kanye nokuvinjwa okusekelwe kuma-URI ogaxekile.
Ngokubhalelana okusemthethweni, uhlelo lokuhlunga oluguquguqukayo lunikezwa olukuvumela ukuthi uchaze imithetho yokucubungula imeyili kuye ngesizinda, umamukeli / umthumeli, isikhathi sokuthola kanye nohlobo lokuqukethwe. Kungenzeka ukuphatha konke ukugeleza kwemeyili engenayo naphumayo. Wonke amalogi ezincwadi ayacutshungulwa futhi ayatholakala ukuze ahlaziywe kusetshenziswa isixhumi esibonakalayo sewebhu. Womabili amagrafu anikeziwe ukuze kuhlolwe ukuguquguquka okupheleleyo, kanye nemibiko ehlukahlukene namafomu ukuze kutholwe ulwazi mayelana nezinhlamvu ezithile nesimo sokulethwa.

main emisha:

  • Usekelo olungeziwe lokukhiqiza amasiginesha edijithali ye-DKIM (DomainKeys Identified Mail) yama-imeyili aphumayo. Ukuze ulungiselele ukusetshenziswa kwe-DKIM, kunikezwa isixhumi esibonakalayo sewebhu esivumela i-DKIM ukuthi inikwe amandla ezizindeni ezithile kuphela;
  • Kungezwe isistimu entsha yokuvalela okunamathiselwe kwi-imeyili okususiwe, isibonelo, ngemva kokuthi kuqaliswe igciwane noma i-malware scan. Esikhundleni sokususwa, okunamathiselwe okunjalo manje kungabekelwa eceleni kanye nama-imeyili ukuze kuhlaziywe kamuva ngumlawuli;
  • Kuhlongozwa ukusebenzelana kwewebhu ukuze kumiswe izisindo zemibandela yokuhlunga ogaxekile ehlukahlukene ku-SpamAssassin. Izinguquko zesisindo zingenzeka ezingeni lemithetho yomuntu ngamunye, okukuvumela ukuthi uvumelanise uhlelo lokulwa nogaxekile kulokho okucacisiwe kwendawo yamanje. Ungakwazi futhi ukukhubaza ngokukhetha imithetho ebangela amanga;
  • Imodi yokuhlunga yokuhlola yengezwe esigabeni seseshini ye-SMTP ngaphambi kokuthi umlayezo ubekwe kulayini ("Ngaphambi Komugqa"). Le modi ayihambisani Nesikhungo Sokulandelela;
  • Ukuphathwa okuthuthukisiwe kwezilungiselelo nemithetho ezindaweni ezihlangene. Injini yokuhlunga manje yaziswa mayelana nezilungiselelo ezishintshile ezidinga ukucushwa kabusha kokucushwa, okunciphisa inani lezimo ezidinga ukuqalisa phansi mathupha kwesihlungi se-pmg-smtp. Izaziso zoshintsho zithunyelwa phakathi nokuvumelanisa kweqoqo;
  • Ukusabalalisa kuvumelaniswa nesisekelo sephakheji ye-Debian 10.2. I-Linux kernel ibuyekeziwe ukuze ikhulule i-5.3, ebolekwe ku-Ubuntu 19.10.

Source: opennet.ru

Engeza amazwana