Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Sorry if this is a very basic question (I couldn't find any tutorial on google so asking here).

I want to setup an INCOMING ONLY mail server on Linux. (I have some websites, for which I wish to avoid google apps or some other solution). There are some reasons why I want my own incoming server (like ease of scripting, etc).

Anyways, so I couldn't find any tutorial on this. (There must be some out of the box solution also?).

Further - how to ensure it is secure? I have heard spammers can attack a not-so-well secured mail server to send spam (thats with outgoing mail server - are there too many risks associated with even an INCOMING mail server)?

Thanks much,

JP

PS: I have average knowledge of linux administration but am totally a newbie with mail servers.

share|improve this question

migrated from stackoverflow.com Oct 16 '10 at 20:34

This question came from our site for professional and enthusiast programmers.

    
Just follow any of the thousands of mailserver tutorials out there and to ensure mail doesn't go out, disable all relaying (from localhost and otherwise) and then firewall off any traffic leaving your server with a destination port of 25 and 587. –  EEAA Oct 16 '10 at 21:00

1 Answer 1

up vote 0 down vote accepted

First suggestion: Setting up and approximately securing a web server is not that hard, but keeping it clean and secure is an ongoing effort. And cleaning up after something goes belly-up can be hard. There are services out there who will cheaply do the effort for you.

If you must: You have to read the documentation of the mailer of your choice, I would suggest you select the default mailer for your OS. (Else it is really a matter of taste: Sendmail is both the most feature-complete and seasoned mailer, but can be tricky to set up; Postfix is easier, but also very powerful. And there are also QMail, Exim and a couple of others.)

Ensure you do authentication, use LMTP (Port 587), and block any connection from your host to anywhere Port 25 and you'll be OK.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.