E-mail

From Things and Stuff Wiki
Revision as of 20:48, 26 April 2017 by Milk (talk | contribs) (→‎Server)
Jump to navigation Jump to search


General

Protocols

POP3

SMTP

IMAP

MIME

Gmail API

Inbox

JMAP

Misc


Tools


  • DavMail is a POP/IMAP/SMTP/Caldav/Carddav/LDAP exchange gateway allowing users to use any mail/calendar client (e.g. Thunderbird with Lightning or Apple iCal) with an Exchange server, even from the internet or behind a firewall through Outlook Web Access. DavMail now includes an LDAP gateway to Exchange global address book and user personal contacts to allow recipient address completion in mail compose window and full calendar support with attendees free/busy display. [5]

Clients

mail

list
  show commands
[number]
  select message
r
  reply
mail test@example.com
  send message

mailx

mailx bill@example.com

then type subject, then message, then ctrl-d (end of transmission)

mutt

other


Web

Xuheki

Horde

Roundcube

Other

  • Mailr is an Open Source webmail client with gmail like conversations. [9]

Testing

openssl s_client -connect localhost.com:995


Server

Stack and components

  • Scrollout F1 is an easy to use, already adjusted email firewall (gateway) offering free anti-spam, anti-virus protection and Data Loss Prevention aiming to secure existing email servers, old or new, such as Microsoft Exchange, Lotus Domino, Postfix, Exim, Sendmail, Qmail and others.
  • https://github.com/al3x/sovereign - A set of Ansible playbooks to build and maintain your own private cloud: email, calendar, contacts, file sync, IRC bouncer, VPN, and more.
  • YunoHost - server operating system aiming to make self-hosting accessible to everyone. It is based on Debian GNU/Linux and is fully compatible with it. YunoHost automatically installs and configures some services around LDAP, and provides tools to administrate them.

Listserv


  • Dada Mail - Make running your business and personal mailing lists easy, fun, and inexpensive.

Security

SPF

The Sender Policy Framework (SPF) is an open standard specifying a technical method to prevent sender address forgery. More precisely, the current version of SPF — called SPFv1 or SPF Classic — protects the envelope sender address, which is used for the delivery of messages. See the box on the right for a quick explanation of the different types of sender addresses in e-mails.

(There are other solutions that protect the header sender address or that do not care at all about who sent the message, only who originally wrote it.)

Even more precisely, SPFv1 allows the owner of a domain to specify their mail sending policy, e.g. which mail servers they use to send mail from their domain. The technology requires two sides to play together: (1) the domain owner publishes this information in an SPF record in the domain's DNS zone, and when someone else's mail server receives a message claiming to come from that domain, then (2) the receiving server can check whether the message complies with the domain's stated policy. If, e.g., the message comes from an unknown server, it can be considered a fake.

Once you are confident about the authenticity of the sender address, you can finally "take it for real" and attach reputation to it. While IP-address-based reputation systems like Spamhaus or SpamCop have prevailed so far, reputation will increasingly be based on domains and even individual e-mail addresses in the future, too. Furthermore, additional kinds of policies are planned for a future version of SPF, such as asserting that all of a domain's outgoing mail is S/MIME or PGP signed.

DKIM

  • DomainKeys Identified Mail (DKIM) lets an organization take responsibility for a message that is in transit. The organization is a handler of the message, either as its originator or as an intermediary. Their reputation is the basis for evaluating whether to trust the message for further handling, such as delivery. Technically DKIM provides a method for validating a domain name identity that is associated with a message through cryptographic authentication.

DMARK

  • DMARC, which stands for "Domain-based Message Authentication, Reporting & Conformance", is a technical specification created by a group of organizations that want to help reduce the potential for email-based abuse by solving a couple of long-standing operational, deployment, and reporting issues related to email authentication protocols. DMARC standardizes how email receivers perform email authentication using the well-known SPF and DKIM mechanisms. This means that senders will experience consistent authentication results for their messages at AOL, Gmail, Hotmail, Yahoo! and any other email receiver implementing DMARC. We hope this will encourage senders to more broadly authenticate their outbound email which can make email a more reliable way to communicate.

Anti-spam

  • https://en.wikipedia.org/wiki/Joe_job - a spamming technique that sends out unsolicited e-mails using spoofed sender data. Early joe jobs aimed at tarnishing the reputation of the apparent sender or inducing the recipients to take action against them (see also e-mail spoofing), but they are now typically used by commercial spammers to conceal the true origin of their messages.


Notifications

Systems

Encryption

See Comms#PGP_.2F_GPG

Dark Mail

Alliance including Lavabit n co.

Services

Gmail

Google Apps

£3.30/user/month, or £33/user/year

Zoho

Zimbra

"/opt/zimbra/zdesktop/linux/prism/zdclient" |
-webapp "/home/milk/.zdesktop/data/zdesktop.webapp" |
-override "/home/milk/.zdesktop/data/zdesktop.webapp/override.ini" |
-profile "/home/milk/.zdesktop/data/profile"

other


Anonymous

Bulk sending

Articles

HTML

Other


Mailing List

OSS service