| ▲ | Self-host your mail server(blog.haschek.at) | |||||||||||||||||||||||||||||||||||||
| 59 points by geek_at a day ago | 44 comments | ||||||||||||||||||||||||||||||||||||||
| ▲ | mmh0000 an hour ago | parent | next [-] | |||||||||||||||||||||||||||||||||||||
I ran my own self-hosted email server from 2008-ish to 2018, and I would highly recommend against doing it! Especially when Fastmail and Proton are so cheap. I was running Postfix+Dovecot+Seive+SpamAssassin+Fail2ban+certbot+spf+dkim+reverse-ip+<other random crap> It worked! Receiving email was overall pretty easy. I know I also did things the "hard way" by ad-hoccing all that together, and today there are a lot more out-of-the-box solutions that do all that for you. But still. Being a full-time email administrator is a job I will never do again unless I'm getting paid for it. You know what really sucked? Deliverability. Frequently, emails I would send would just ... vanish ... no warnings, no errors, no failures. From my end, everything was perfect. Until days later, people would follow up with me and say, "Are you going to send that email?" ... I had a business IP (Comcast Business). The IP address was clean, not black listed anywhere, not on SORBS or other lists. Still, successfully delivering an email was like 50/50, with no way to confirm the other party actually got it. | ||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||
| ▲ | fisian 7 minutes ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
I started hosting my email at home some months ago and it works great. However, my ISP blocks some ports necessary for running a mailserver (incoming SMTP), so I have to use an SMTP relay (which is on a VPS and does port 25 to some other port that is not blocked). Additionally, to not worry about deliverability, I let my mailserver send all outgoing mail through another service. The additional costs for this are about 2€/month. I use Stalwart as a mail server and it was not too hard to setup (with some caveats to get it working with my SSL certs behind a reverse proxy. But nothing a bit of LLM chatting couldn't solve). All in all, it's not 100% self hosted, but works well. However, I don't agree with the suggestion in the article to use a self hosted LLM. My mailserver needs a few hundred MBs of RAM at max, but with the spam filter this would increase like 10x-100x. | ||||||||||||||||||||||||||||||||||||||
| ▲ | dandersch an hour ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
Before self-hosting your own, first get a domain and just point it at a mail provider that allows custom domains. It will cost, but so will a VPS. I suspect a lot of DIY homelab types would have most of their needs met with just that setup: - you get the vanity email address - you can switch email providers (including self-hosting later on) - you can have ~unlimited aliases (depends on the provider) Most of the setup consists of steps you will have to take anyway when self-hosting (getting a domain, changing DNS records), except for a major amount of headaches that will be taken care of for you. | ||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||
| ▲ | Mike-Kelner 20 minutes ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
I know an old-school Linux admin who has been successfully running his own email servers for 30+ years - from small private ones to larger corporate setups. For spam detection he uses his own system, and it works surprisingly well even without any LLM (though an LLM could surely make it even better). So the "you can't self-host email" meme was never quite true - it is about willingness and ability to configure everything right. | ||||||||||||||||||||||||||||||||||||||
| ▲ | MattTheRealOne an hour ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
The biggest problem with self-hosting a mail server is reliably being able to send email and have it be delivered to the recipient. Something I have been thinking about setting up is self-hosting a dovecot server so that all of my emails that I receive are on my system, but using another provider for sending email. I don't send that many emails, so there is not much privacy loss in regards to a third-party being able to see my sent emails, but I still get the benefit of noone but me having access to my received emails. | ||||||||||||||||||||||||||||||||||||||
| ▲ | muppetman 2 hours ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
I do. It's nowhere as hard as everyone on here makes it out to be. And I don't even use an easy solution like Mailcow. Spam is a solved problem with rspamd, and it's not even an llm | ||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||
| ▲ | comrade1234 an hour ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
Ive self-hosted my email server since 1999. It started in a closet at home in San Francisco. As things got more restrictive (residential ips being black holes) I moved to a Colo. but now I'm back to hosting it on my server in my cellar. I have a fixed ip from my provider init7 (Switzerland) that has never been blacklisted. Reverse dns is set up. All the acronyms like spf, dkim, dmarc are set up. I have no problems sending to Microsoft and Google email addresses. So I'm doing it now but I'm ready to switch back to one of my Colo servers at any time and I won't be surprised if I have to at some point. | ||||||||||||||||||||||||||||||||||||||
| ▲ | cjs_ac 21 minutes ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
I started self-hosting my email server earlier this year. I use maddy[0] as my email server and route outgoing mail through MailPace[1] to avoid being memory-holed (despite having SPF and DKIM set up correctly). My reason for self-hosting is control, not privacy: the fact that the cleartext of my outbound emails is visible in the MailPace UI is not a concern; the problem I'm solving is that email providers can delete your account. | ||||||||||||||||||||||||||||||||||||||
| ▲ | eljimmy an hour ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
I've been self-hosting for 20 years now - a few years ago I switched to using Mail-in-a-Box (https://mailinabox.email/) which makes management a lot easier than configuring each service manually. It definitely requires some effort but once you've got it up and running it's pretty hands off. The only issues I've ever had are expiring certs but I've fixed that by configuring auto-renewals and it's all good now. Ensuring your source IP isn't blacklisted is probably the single most important factor. I had to request a new IP from Linode where my server runs as the one it was originally assigned had a bad reputation. | ||||||||||||||||||||||||||||||||||||||
| ▲ | tylerjl 40 minutes ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
I've hosted and actively used my own email server for > 10 years and there are two things that are true at the same time: It is absolutely possible to host, use, and achieve decent deliverability with your own server. It takes work and is a different beast than running a webserver, but that frontier is not dead (yet). At the same time: it is an ABSOLUTELY TERRIBLE IDEA to suggest that folks operate an email server out of residential IP through your ISP. The spam prevention ecosystem is so draconian now that email traffic flowing out of address ranges belonging to residential owners is yeeted into the sun. If you've operated email infrastructure at decently large scales, you know that SPF/DKIM/DMARC are just one part of how spam is identified, and mixing in the source of email traffic into the detection heuristics is a significant part of that identification process. Achieving decent delivery can often involve "warming up" an IP over time to establish its reputation, and consumer address ranges are a hodge-podge of activity that incur very little trust about what they're doing. I agree with some commenters that exhort the exercise of self-hosting email to prevent the venerable protocol becoming a homogeneous GMail and Outlook-only world, but there are reliable ways to do this: using a VPS, relying on a company for the sending/SMTP part, or something similar. But footguns abound, and disgorging SMTP packets from your LAN edge is one of them. | ||||||||||||||||||||||||||||||||||||||
| ▲ | JoshTriplett 43 minutes ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
Every single person I know who has run their own email server has, at one point or another, either outright lost mails or had important mails delayed for days. It's not worth it. | ||||||||||||||||||||||||||||||||||||||
| ▲ | EMAIL36245 an hour ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
I beg to differ on: > but if your home internet checks these boxes, you can 100% host your own mailserver at home:
Because above is only needed if you want to communicate with people using Gmail, Yahoo, Outlook, Fastmail, Proton etc (The monopoly).For normal folks, they are better off using an alternate less privileged email service like email.riamu.io. | ||||||||||||||||||||||||||||||||||||||
| ▲ | tenacious_tuna an hour ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
I'd love to self-host a mailing list, or that protonmail or fastmail offered listserv like functionality. It feels fairly intimidating to hoist my own mail server and listserv on top of that. It feels like there's too much domain-specific knowledge one needs to have to reliably debug and maintain it: DKIM, spam management, certbot, fail2ban, blah blah blah. | ||||||||||||||||||||||||||||||||||||||
| ▲ | tossitawayplz an hour ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
Michael W Lucas has a book[0] on the subject too: https://mwl.io/static/books/run-your-own-mail-server.html | ||||||||||||||||||||||||||||||||||||||
| ▲ | Krei-se an hour ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
I self-host with telekom business, 2 fixed ip lines fiber and vdsl at home everything from auth ns to mail and web. Its around 85€ for me. it's still doable and you get the best feeling there is: Living in the internet. Can recommend 100%. | ||||||||||||||||||||||||||||||||||||||
| ▲ | geek_at a day ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
Sorry the title should have been "You should self-host your mail server" but it seems HN removes the "You should" in the beginning of a title. I wanted to start this discussion because I think we are prime for more self hosted mail servers in 2026 and in the post I explain how to use a locally hosted LLM to nudge the spam detector rspamd to whether or not an incoming mail is spam. Also in times where the EU can order your mail providers to scan for unwanted content [1] (currently limited to CSAM, later probably more) it does feel better to have your data at your hand. [1] https://en.philenews.com/international/privacy-to-end-in-the... | ||||||||||||||||||||||||||||||||||||||
| ▲ | kimovski an hour ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
Blast from the past: https://en.wikipedia.org/wiki/Hillary_Clinton_email_controve... | ||||||||||||||||||||||||||||||||||||||
| ▲ | throw0101d 2 hours ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
> But there are other solutions out there like: Stalwart; Mailcow ;Or if you're a purist you can set up your whole server yourself Another good guide that uses Debian and its standard packages: * https://workaround.org/ispmail-trixie (Updated with every release, and upgrade/migration instructions.) | ||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||
| ▲ | throw0101d 2 hours ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
Waiting for a submission of "You should run your own NNTP server" (lots of 'nostalgia' for web forums to come back, so why not this too?). | ||||||||||||||||||||||||||||||||||||||
| ▲ | dangerboysteve an hour ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
What hosting / VPS companies do you recommend? Finding one which allows you to run a mail server is some work. | ||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||
| ▲ | hkt an hour ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
I've been self hosting since 2012 or so and it is a mixed bag. Deliverability is fine provided you're on a clean IP range, which generally only reputable hosts have. There was a moment when my son was born and he was in NICU that my mail broke. I just went without for a while. Not ideal. Since then I've thought: self hosting is nice but hosting cooperatively is probably the best way forward. Democratic control might beat technical control. I'll do it soon, I think: I'd be fascinated to know what people think. | ||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||
| ▲ | tamimio 40 minutes ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
The problem isn’t spam, the problem is you becoming the spam. I did test email selfhosting before and there’s a substantial amount of times my emails were never seen by the recipient, sometimes it did cost me good jobs/deals. So now I use paid email while I control the domain and everything else, so I have the portability feature if I wanted to switch providers without any efforts, but I know now my emails will be delivered whenever I hit sent. That being said, I self host everything else in my digital life, and I believe everyone should. | ||||||||||||||||||||||||||||||||||||||
| ▲ | LoganDark 2 hours ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
I've tried self-hosting my mail server, but that means all my outgoing mail will go to Spam on all providers that use reputation-based filtering. In all cases I had SPF, DKIM and DMARC working perfectly, PTR records, etc. but it just doesn't matter. Even a Fastmail domain goes right to spam on my personal account, and they are very very established. It's just not worth it. | ||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||
| ▲ | ubermonkey an hour ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
Counterpoint: No. | ||||||||||||||||||||||||||||||||||||||
| ▲ | carlosjobim a day ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
I disagree with the author. If you have your own domain for e-mail, then you've already dealt with all risks and vulnerabilities. Of course you have your e-mail stored locally as well by using an e-mail client, which you would anyway. | ||||||||||||||||||||||||||||||||||||||
| ▲ | vouaobrasil an hour ago | parent | prev | next [-] | |||||||||||||||||||||||||||||||||||||
Man these days it's nearly impossible. Even my web host has trouble hosting email, even though I use it and they do a decent job. Only medium-sized specialist companies and large ones like Gmail do it well. It's just those spammers - we could have nice things like self-hosted email if everyone were nice, but we can't. | ||||||||||||||||||||||||||||||||||||||
| ▲ | noncoml an hour ago | parent | prev [-] | |||||||||||||||||||||||||||||||||||||
Good luck having your emails hitting any inbox instead of ending up in spam. | ||||||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||||||