4 ms·
By way of a counter-anecdote: I've been running my own email for 8 years and spend almost no time on it. I can't recall having to do any maintenance at all in t
by jstanley 9y ago
By way of a counter-anecdote: I've been running my own email for 8 years and spend almost no time on it. I can't recall having to do any maintenance at all in the last 3 years.
- rightos 9y agoYeah, I do the same - I plugged in Postfix, Dovecot and SpamAssassin and haven't had to touch it other than occasionally confirming backup scripts and automatic security updates are working.
- jacobush 9y agoThis used to work for me but lately, way too much spam. Looking to install rspamd but have not succeeded yet.
- npsimons 9y agoThirded, only with qmail. I know mine is a tiny private server, but scaling up would only require more hardware and minimal increase in hours working on it. OTOH, I manage hosted mail solutions for three other domains, and those all require more time, because I'm supporting other people.
- sfilargi 9y agoDoes you email get marked as SPAM by gmail? I do something similar, but when I send an email to a person for the first time, it always ends up in the spam folder by GMail.
- snksnk 9y agoJust relay it out via a trusted host, in addition to setting up DKIM, SPF, etc.; that solved all the problems for me. My email server is working excellent for many years now (OpenBSD, OpenSMTPD, dovecot) with Rainloop as web-based frontend.
- sfilargi 9y agoI have DKIM, SPF, etc. but still gets caught by spam. What do you mean by "trusted host"?
- snksnk 9y agoAn email provider that is not blacklisted and allows relay. I currently use my ISP for that. Taken from my smtpd.conf: table secrets { mylogin = [email]@ziggo.nl:[pass] } accept tagged DKIM for any relay via tls+auth://mylogin@smtp.ziggo.nl:587 auth <secrets>
- sfilargi 9y agoOh, I see, thanks! It kind of defeats the purpose, since now the third-party will be able to read all my outgoing emails, and have control over them.
- tux1968 9y agoYou're transiting over their network anyway -- the jig is already up even without relaying via their gateway.
- justinclift 9y agoConnecting directly to the remote (non-ISP) mailserver with TLS shouldn't reveal any message contents. Relaying via the ISP's mail server though (even with TLS) seems like it would disclose the message contents.
- phaer 9y agoIs DMARC included in your 'etc'? I think thats needed for gmail these days. If rdns, dkim, spf and dmarc are there, try checking your IPs reputation (senderscore) that could be it.
- michaelbuckbee 9y agoDo you have the system updates on auto? How do you handle all of that?
- icebraining 9y agoOn Debian and derivatives, you can install unattended-upgrades to get automatic security updates. See also apt-listchanges, which can send you an email detailing the changes applied.
- justinclift 9y agoSimilar for RHEL/CentOS/other-EL based distributions too, using the "yum-cron" package.
- znpy 9y agoSame here. I have owned my domain and ran my email server for six years now. Investing a week worth of afternoons harls really paid off and i can do neat things like having infinite email addresses via a catch-all address. By the way, give a look at mail-in-a-box, another cool project that implements a ready to use mail server with great functionalities.
- thunfischbrot 9y agoUsed to manage it all manually, set up https://mailcow.email/ https://mailcow.email/ after a server move a couple years ago. It's been great, running inside docker now via docker-compose alongside https://github.com/JrCs/docker-letsencrypt-nginx-proxy-companion https://github.com/JrCs/docker-letsencrypt-nginx-proxy-compa... for automatic letsencrypt for the web interface along with my additional web services hosted on the same server. I had one minor hiccup when upgrading wherein I had to restart all docker containers, that's about it in terms of maintenance.
- phaer 9y agoI did the same and used my catch-all extensively which I almost regret nowadays because it would make migration to a hosted service much more difficult if I ever wanted to. At least I know of no trustworthy commercial mail hoster which allows catch-all-addresses without requiring a much more expensive 'business' account.