* Michael Peddemors via mailop:

> First thing to do? Full security audit on your server, as well as the
> router in front of it.

I checked what I could straight away. The wider network (router et al)
is the dominion of my ISP and hence outside my sphere of influence. The
virtual machine itself does not permit logins for any user but myself,
and enforces key-based authorization.

The VM also uses the NixOS platform, which means that even libraries'
locations change with every update. Not an easy machine to infect or
exploit with malware, generally speaking, but I checked, of course. I
also ran a NixOS generational rollover, just to be cautious.

Is the underlying hypervisor trustworthy? No idea.

> BTW, on this list it helps if you provide the actual IP address in
> question.

Earlier today I was contacted off-list by a Spamhaus staff member
(thanks!) and provided the IP address in the same manner. I did not
think that making the IP address public right off the bat was the proper
approach.

-Ralph
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop

Reply via email to