Tony Finch wrote:

> On Tue, 13 Jun 2006, Marc Perkel wrote:
> 
>>I'm trying to prevent hackers who might get in from being able to send
>>email if they manage to hack me.
> 
> 
> Not possible.
> 
> Tony.

Can be prevented.  But not with any box config you are likely to 
have ever seen or would want to admin.

Little to do with the MTA, lots to do with the box, OS, external 
storage, & firewalls (plural).

Essentially you have to turn it into a 'state machine', as once 
were telco CO switches.  Periodically burning, then physically 
swapping new proms (UV or fuse-link, not EEPROM) could get to be 
a PITA 'Real Soon'.

And forget about having shell accounts, running an httpd - or 
anything else, even pop/imap, or ssh - on the same box.

Oh.. and you'll need 24x7 physical security - say armed guards 
and server self-destruct, preferably thermal, which means your 
own data center, not a public one.

And can you trust all that, even if you can afford it?

Then some zombified WinBox will forge you anyway, so....
.....what's was the point, again?

Bill




-- 
## List details at http://www.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/

Reply via email to