NHacker Next
  • new
  • past
  • show
  • ask
  • show
  • jobs
  • submit
Self-host your mail server (blog.haschek.at)
mmh0000 4 minutes ago [-]
I ran my own self-hosted email server from 2008-ish to 2018, and I would highly recommend against doing it! Especially when Fastmail and Proton are so cheap.

I was running Postfix+Dovecot+Seive+SpamAssassin+Fail2ban+certbot+spf+dkim+reverse-ip+<other random crap>

It worked! Receiving email was overall pretty easy. I know I also did things the "hard way" by ad-hoccing all that together, and today there are a lot more out-of-the-box solutions that do all that for you. But still. Being a full-time email administrator is a job I will never do again unless I'm getting paid for it.

You know what really sucked? Deliverability. Frequently, emails I would send would just ... vanish ... no warnings, no errors, no failures. From my end, everything was perfect. Until days later, people would follow up with me and say, "Are you going to send that email?" ...

I had a business IP (Comcast Business). The IP address was clean, not black listed anywhere, not on SORBS or other lists. Still, successfully delivering an email was like 50/50, with no way to confirmation the other party actually got it.

comrade1234 5 minutes ago [-]
Ive self-hosted my email server since 1999. It started in a closet at home in San Francisco. As things got more restrictive (residential ips being black holes) I moved to a Colo. but now I'm back to hosting it on my server in my cellar. I have a fixed ip from my provider init7 (Switzerland) that has never been blacklisted. Reverse dns is set up. All the acronyms like spf, dkim, dmarc are set up. I have no problems sending to Microsoft and Google email addresses.

So I'm doing it now but I'm ready to switch back to one of my Colo servers at any time and I won't be surprised if I have to at some point.

dangerboysteve 7 minutes ago [-]
What hosting / VPS companies do you recommend? Finding one which allows you to run a mail server is some work.
muppetman 29 minutes ago [-]
I do. It's nowhere as hard as everyone on here makes it out to be. And I don't even use an easy solution like Mailcow. Spam is a solved problem with rspamd, and it's not even an llm
selectodude 24 minutes ago [-]
It’s not hard to receive or filter mail - knowing that somebody will receive your email after you send it is another thing entirely.
9dev 19 minutes ago [-]
That is the exact problem that got me to abandon my splendidly working, self-hosted email stack. I had so many instances of mail just not getting delivered, despite doing absolutely everything correctly, that I gave up.
muppetman 20 minutes ago [-]
Thankfully not a problem we've encountered yet. All my mail is DKIM signed, SPF aligned etc. I also registered on dnswl.org which is a signal quite a few people seem to use.
john_strinlai 16 minutes ago [-]
out of curiosity, are you talking about personal, small business, or corporate?

"spam is solved" looks a lot different at each of those

muppetman 1 minutes ago [-]
Personal mailserver sorry. rspamd stops all the sent-using-my-from-address "i hacked you" emails (DMARC drops them) and all the other random spam stuff. I can imagine though a large business with thousands of email accounts it wouldn't be as easy though.
throw0101d 29 minutes ago [-]
> But there are other solutions out there like: Stalwart; Mailcow ;Or if you're a purist you can set up your whole server yourself

Another good guide that uses Debian and its standard packages:

* https://workaround.org/ispmail-trixie

(Updated with every release, and upgrade/migration instructions.)

dangerboysteve 3 minutes ago [-]
throw0101d 17 minutes ago [-]
Waiting for a submission of "You should run your own NNTP server" (lots of 'nostalgia' for web forums to come back, so why not this too?).
geek_at 1 days ago [-]
Sorry the title should have been "You should self-host your mail server" but it seems HN removes the "You should" in the beginning of a title.

I wanted to start this discussion because I think we are prime for more self hosted mail servers in 2026 and in the post I explain how to use a locally hosted LLM to nudge the spam detector rspamd to whether or not an incoming mail is spam.

Also in times where the EU can order your mail providers to scan for unwanted content [1] (currently limited to CSAM, later probably more) it does feel better to have your data at your hand.

[1] https://en.philenews.com/international/privacy-to-end-in-the...

ubermonkey 11 minutes ago [-]
Counterpoint: No.
noncoml 2 minutes ago [-]
Good luck having your emails hitting any inbox instead of ending up in spam.
LoganDark 18 minutes ago [-]
I've tried self-hosting my mail server, but that means all my outgoing mail will go to Spam on all providers that use reputation-based filtering. In all cases I had SPF, DKIM and DMARC working perfectly, PTR records, etc. but it just doesn't matter. Even a Fastmail domain goes right to spam on my personal account, and they are very very established. It's just not worth it.
dwedge 4 minutes ago [-]
I use a dedicated server and a vps for this, so I get around the residential IP reputation issue. The rest of the problems with deliverability are overblown. In 15 years of doing it on multiple servers, I've had one 2 month period where Gmail was spamming me and one month where Yahoo spammed me. In both cases it stopped without me changing anything, I've always suspected it's brief periods of anti-competition attempts which don't last forever
LoganDark 2 minutes ago [-]
Oh no I never used residential IPs. Most ISPs don't even let you set PTR records on those. My problem was that any server at practically any provider would reuse an IP that many previous customers have used to send spam in the past. For example you can't hope to send mail from a DigitalOcean IPv4 address. Nor for Kamatera. There are probably a few more providers that are basically blackholed because they're often used for spam.
carlosjobim 1 days ago [-]
I disagree with the author. If you have your own domain for e-mail, then you've already dealt with all risks and vulnerabilities. Of course you have your e-mail stored locally as well by using an e-mail client, which you would anyway.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact
Rendered at 19:11:40 GMT+0000 (Coordinated Universal Time) with Vercel.