• 0 Posts
  • 342 Comments
Joined 2 years ago
cake
Cake day: January 1st, 2024

help-circle

  • I’ve been hosting my own email server having 4 domains (one is business-related) for 6 years. I don’t have any problems, because I know what I do.

    In case it’s a help. The stack is: Postfix (SPF-support), Dovecot (Sieve), OpenDKIM, OpenDMARC and rspamd. I also recommend fail2ban, because an open infrastructure is hammered on very often.

    Of course TLS is needed, so nginx with acme.sh as combo does the job fine.

    Backups are also essential. I like restic. CLI tools are automated very easy.

    I don’t think, it’s much. My setup is very generic, but maybe it’s already too overwhelming for some people.
















  • First layer is done by Postscreen (by Postfix). It watches bots misbehaving, check blackhole DNS and disconnects them. Fail2ban takes care of bots who cause errors and warnings in logs and bans them. Third layer is SPF and DKIM. If it does not match, it’s getting flagged.

    If someone conforms to protocols and passes the tests, there is still rspamd on the fourth layer. It does zillions of checks on the metadata and additionally learns via bayes. Dovecot moves all the crap to Junk and inserts the valid mails into their proper folders.

    The fifth layer is me. If some junk mail arrives in the inbox, I move it to Junk manually and Dovecot tells rspamd to learn it as spam.