Best Mail Server Configuration

[MichaelMcC]

Is there a thread containing the best configuration for mail servers. I know there are threads talking about specific things that should be done and it seems as though some of you have spent some time figuring it out, thank you! But wouldn't it be great to have a post with the best configuration to help from being blacklisted because of mail configuration or backscatter.
Just a thought.
I'm usually looking to just pay someone to do it for me, but then I never really know what they did and what I've got afterwards.
Thanks

 

[ranz]

So what excactly are you after?

a post on "How To prevent your mail server from being Blacklisted" ???

There's a stack of posts on this subject already ...

This is only a part of configuring your mail server .. and the most obvious part is to prevent your mail server from being an open relay (that's a guaranteed way to get blacklisted).

Also, a good Google search brings many excellent results, like this:

Checklist:-
* Do not allow unsolicited ads and other bulk e-mails to be sent from your server, by the hosted accounts;
* Do not run pro spam services like: spam websites, drop mail boxes for replies to spam e-mail ads, DNS for junk mailers, payment processing services for the products advertised in spam messages, junk mail tools (like lists of e-mail addresses);
* Make sure all your hosts are as secure as possible;
* Make sure you do not have any spam bots on your systems;
* Make sure your mail server is not an open relay;
* Make sure your proxy server is not an open proxy;
* Check that the [email protected] and [email protected] addresses exist and that they are functional;
* Make sure the information provided in the domain registration service (whois) is updated and complete;
* Make sure all your mail servers accept mail from: <> delivery notifications (NDR);
* Don't use an ISP that has a bad reputation when it comes to spam. Doing so may get you blacklisted just because your IP address is part of their allotted subnet;
* Make sure your DNS is properly set up and that you are complying with the RFC rules regarding service configuration;
* Make sure your mail server does not send poorly-formatted messages;
* Deploy Domain Keys and SPF for outgoing messages;
* Use secured connections (SSL/TLS) as much as possible;
* Do not allow unauthenticated users to send e-mails neither locally nor remotely.

I can see this being very subjective, and open to debate, so really ... it's a matter of research, collating ideas and doing what's more suitable for your situation.

However, I'm interested in seeing other members ideas too.

 

[floyd]

I do not see that there is one that is best for everybody. That is why a bunch of options exist.

Some want to use SpamAssassin. Some do not.
Some want to use SURBL. Some do not.

What is "best"? Best for you or somebody else?

 

[MichaelMcC]

Ranz,
Yes, I suppose that is what I am looking for. And I have seen many posts on various topics on configurations. But even that list that you pasted is good information.
I am running DA dafaults with SA. I am considering not allowing a catchall and asking people to use their own ISP's SMTP when they can.
The IP's I've had for 2 years are not blacklisted anywhere and I want to keep it that way. So I am just trying to be proactive.
Thanks for your reply
Michael