NSA proof your e mail in 2 hours. You may be concerned that the NSA is reading your e mail. Is there really anything you can do about it though After all, you dont really want to move off of GMail Google Apps. And no place you would host is any better. Except, you know, hosting it yourself. The way that e mail was originally designed to work. Gnomon Tutorials. Weve all just forgotten because, you know, webapps n stuff. Its a lot of work, mkay, and Im a lazy software developer. Today we kill your excuses. Because Im going to show you exactly how to do it, its going to take about two hours to set up, and its a set it and forget it kind of setup. Not only that, but it is actually going to be better than GMail, from a purely features perspective. It might surprise you to learn that people continue to develop email server software in a post Google apps world, and that the state of self hosted is much better than you remember. Now fair warning it took me about two days to figure the stuff out youre going to see in this blogpost, starting from knowing basically nothing about modern e mail servers. But now that Ive figured it out, if you dont ask too many questions you can implement it from these notes in just two hours. So take this not just as a guide for setting up an e mail server, but as two days of free consulting, that just happens to produce a complete recipe for a modern, fully featured, fast email server at the end. Choosing Secure Passwords. As insecure as passwords generally are, theyre not going away anytime soon. Every year you have more and more passwords to deal with, and. Youre really going to turn down free consulting Come on, buckle down and do this. So bookmark this blog post, block off a Saturday next month, and get it done. Seriously. If you are still using GMail or Yahoo, or arbitrary US based email company in August, your right to complain about the NSA spying on you is revoked. AZb_I9noy9U/hqdefault.jpg' alt='Lazy Ssh 1.7 Crack' title='Lazy Ssh 1.7 Crack' />If youre complaining about government spying on the Internet, or in a gathering of programmers, and you wont take basic steps to do anything about it, then youre a hypocrite, full stop. I will personally come to your terminal and demand the return of your complain license. Pick a weekend, get it done. You may be concerned that the NSA is reading your email. Is there really anything you can do about it though After all, you dont really want to move off of. Latest breaking news, including politics, crime and celebrity. Find stories, updates and expert opinion. Or just admit that youre okay with it. Either way, just be consistent. In my salad days I posted some supremely unflattering selfies. I was a photo newbie, a bearded amateur mugging for the camera. Im happy to say that the results of. Vydelenie_273.png' alt='Lazy Ssh 1.7 Crack' title='Lazy Ssh 1.7 Crack' />Edit Some people are complaining that the NSA is pulling all the e mail over the wire anyway, so encrypting your own server is stupid. However, these people are not aware of just how much e mail goes over TLS. For example, if you follow this guide, every message to or from a GMail Google Apps account goes over TLS. I measured it, and thats a third of my ham volume. And Google isnt a special snowflake any reasonably configured mail will be encrypted over the wire. Its 2. 01. 3 people have been getting TLS into wide adoption for awhile now. In the next two hours, were going to fix this. Youre going to build a modern, 2. From scratch. Or something. Youre going to host your own mail. Its going to be encrypted on the server, locked on boot, SSH on reboots to unlock. While were at it, lets fix some things that annoy me about GMail. Better SPAM detection. Yes, you can beat the Big G. Push support that actually works. Little known fact Google discontinued push for i. Avr Software Usb on this page. OS earlier this year. Also little known fact push has never worked in OSX Mail. Were gonna fix it. Lightning fast push on all the devices. Full text search. Believe it or not, mail search on my i. Phone is pretty bad under GMail. Three out of four Google Suggest results for i. Phone mail search are doesnt work, not working, and slow. Our version is going to be working, working, and fast. Take that, Google. Im going to assume Youre running Debian Wheezy. You know your way around Linux more or less. Experience running Apache or Lighttpd or Nginx, etc. You have root access. Nobody really cares if you mess anything up. Youre not stupid and you know how to google things. Hang on just a minute though. Doesnt hosting your own mail require beefy hardware to deal with the spams Not really. I get a lot of mail, and this is my graph Doesnt it go down a lot though Getting up in the middle of the night to do server reboots and that Again, not really. RFC 2. 82. 1 requires that mail servers try for at least 4 5 days to deliver your mail. Lets just say, thats a lot more forgiving than running Apache. A crash course on e mail. The people who have designed e mail software are, on the whole, people with a lot more problems than you. Unfortunately this means there are a lot of separate little projects that work together. Postfix this is called an MTA in the email lingo. Essentially it runs SMTP, and delivers incoming mail to Dovecot. Dovecot this is the LDA in the email lingo. Essentially it runs IMAP. Enc. FS this is what we use to encrypt our email storeopendkim implements DKIM authenticationspamd antispamz push better push supportmy. SQL really were going to use this to hold information about users and domains, but nothing really sensitive. Lets get started Security Foreward. I assume you kinda sorta know how to configure a secure server on the Internet and have done so for your mail server. If you dont know what Im talking about, time to read my first 5 minutes on a server. DNSWe should probably start configuring your DNS, since that stuff takes awhile. If you have an existing domain, you might want to lower the TTL on your MX records to the smallest possible setting. That way you can switch over when youre ready. For this article, Im going to set up my mailserver running on a subdomain drewawesomebox. So I configure an MX record that points mail for the subdomain to my server. Enc. FS apt get install encfs. R grw decrypted mail. Creating new encrypted volume. Please choose from one of the following options. Paranoia configuration selected. Configuration finished. The filesystem to be created has. Filesystem cipher sslaes, version 3 0 2. Filename encoding nameioblock, version 3 0 1. Key Size 2. 56 bits. Block Size 1. 02. MAC header. Each file contains 8 byte header with unique IV data. Filenames encoded using IV chaining mode. File data IV is chained to filename IV. File holes passed through to ciphertext. WARNING. The external initialization vector chaining option has been. This option disables the use of hard links on the. Without hard links, some programs may not work. The programs mutt and procmail are known to fail. For. more information, please see the encfs mailing list. If you would like to choose another configuration setting. CTRL C now to abort and start over. Now you will need to enter a password for your filesystem. You will need to remember this password, as there is absolutely. However, the password can be changed. New Encfs Password. Verify Encfs Password. Its that simple. Its important to use the public option with Enc. FS. This is because by default, Enc. FS goes to great lengths to be a lot narrower than the standard UNIX permissions model. Meanwhile, we have a lot of UNIX users who expect standard UNIX behaviors. Any time we want to mount the decrypted mail dir, we run the same encfs command again, and this time it mounts the folder, instead of creating it. Op. Sec. Its important as a practical matter that you keep other people off your root. It goes without saying, but there are a lot of attack vectors like physical access, or access through a VPS admin panel that could potentially allow your host, acting under the direction of a government agent, to run commands as root, and take your mail.