Skip to main content

Securing SMTP server and its logs

Looking for general mail server security best practices here.

I did some research and it's really hard to find the information out there.

  1. How do you safeguard a smtp server log? Are there any encryption tools out there? Our reason is if the server is compromised, at least the logs are not in plaint text format for attackers to see without obtaining our tool/keys.

  2. It seems like most SMTP servers out there store recipient information in the log files. How can we ensure these informations are not stored or at a minimum are scrambled. Is that possible?

Thank you and I'm still researching on the subject.