Looking for general mail server security best practices here.
I did some research and it's really hard to find the information out there.
How do you safeguard a smtp server log? Are there any encryption tools out there? Our reason is if the server is compromised, at least the logs are not in plaint text format for attackers to see without obtaining our tool/keys.
It seems like most SMTP servers out there store recipient information in the log files. How can we ensure these informations are not stored or at a minimum are scrambled. Is that possible?
Thank you and I'm still researching on the subject.
==== Edit
The context here is we are a gov agency trying to use a third party mail server for sending out mass emails. We are concerned with "client" email addresses being revealed or be read by third parties. How do we safe guard the recipient info as well as the mail content?