Section 7.6. Resources

ftp://ftp.isi.edu/in-notes/rfc2821.txt. RFC 2821, "Simple Mail Transfer Protocol." (Useful for making sense of mail logs, SMTP headers, etc.)

http://www.sendmail.org/~ca/email/other/cagreg.html. Shapiro, Gregory Neil. "Very brief introduction to create a CA and a CERT.". (A bare-bones procedure for generating a Certificate Authority certificate, generating server/client certificates, and using the CA certificate to sign server and client certificates. Handy for people who want to use X.509 mechanisms such as STARTTLS without becoming X.509 gurus.)

Costales, Bryan, with Eric Allman. sendmail, Sebastopol, CA: O'Reilly & Associates, 1997. (The definitive guide to Sendmail. Chapters 19 and 34 are of particular interest, as they concern use of the m4 macros ? most of the rest of this weighty tome covers the ugly insides of sendmail.cf).

http://www.itworld.com/Net/3314/swol-0699-security/. Fennelly, Carole. "Setting up Sendmail on a Firewall, Part III." Unix Insider 06/01/1999. (Excellent article on running Sendmail 8.9 and later in a chroot environment.)

http://www.sendmail.net/000705securitygeneral.shtml. Allman, Eric and Greg Shapiro. "Securing Sendmail." (Describes many built-in security features in Sendmail and offers security tips applicable to most Sendmail installations.)

http://www.sendmail.net/000710securitytaxonomy.shtml. Durham, Mark. "Securing Sendmail on Four Types of Systems."

http://www.sendmail.net/usingsmtpauth.shtml. Durham, Mark. "Using SMTP AUTH in Sendmail 8.10."

http://www.sendmail.net/810usingantispam.shtml. "Using New AntiSpam Features in Sendmail 8.10."

http://www.sendmail.org/~ca/email/starttls.html. "SMTP STARTTLS in sendmail/Secure Switch."

http://mail-abuse.org/rbl. Home of the Realtime Blackhole List, which is a list of known sources of UCE.

http://www.postfix.org. (The definitive source for Postfix and its documentation.)

http://msgs.securepoint.com/postfix/. (Archive site for the Postfix mailing list.)