Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Helm: Personal Email Server

thehelm.com

Post reply on HN
Print view View original

351–360 of 592 posts

Re: Helm: Personal Email Server

#351

Post by dev_dull »

__david__ wrote: post #326
dev_dull wrote: post #129

Earlier quoted context omitted.

You can pay $50 and they will open it once again for you. I only know that after much trial and error troubleshooting why my public NTP service doesn’t work (port 123 also blocked).

Can the normal customer service do that? And is it $50 a month or a one time fee? Were you able to unlock outgoing port 25? (Fellow AT&T user here)

It’s a $50 one time fee. You need to call their “premium” service. Not sure if they do it per port or what, but I asked them to open all my ports and verified 25 is accessible (123 udp inbound still blocked for unexplained reasons).

They’re still clueless. I tried to explain that it’s being blocked by AT&T and not my router but eventually I just gave up. Their process involves a logmein session where they take control and mess with your router. Gahd it’s awful.

They also randomly added my “device” (home server) to the DMZ so all of its ports were exposed. Be very careful.

Re: Helm: Personal Email Server

#352

Post by auganov »

This feels like the infamous HN dropbox thread. I don't know if it's solving the problem well or not but this can totally make a killing. Privacy has really gone mainstream, it's pretty clear people are looking for new ways to engage with tech regardless of utilitarian considerations. The holiday season is coming and 500$ is reasonable.

Re: Helm: Personal Email Server

#353

Post by iancarroll »

joezydeco wrote: post #232
gsreenivas wrote: post #195

Earlier quoted context omitted.

We spin our own build of Linux using Yocto. We are using an ARM-based SoC from NXP. We chose this to ensure that the device can only run signed, trusted code by implementing secure boot and signature verification of software updates. We will make a developer program available in the future. I didn't use Protonet so I shouldn't speculate about what's similar or different about the products. I think we are in a time ri…

We spin our own build of Linux...We are using an ARM-based SoC from NXP. Okay, so that narrows it down to the i.MX family. We chose this to ensure that the device can only run signed, trusted code by implementing secure boot and signature verification of software updates. Maybe read this? https://blog.quarkslab.com/vulnerabilities-in-high-assurance...

From the technical specs, it's almost certainly the i.MX 8, which as far as I know is not affected or listed on any of the errata for that vulnerability.

Re: Helm: Personal Email Server

#354

Post by dna_polymerase »

lrvick wrote: post #345
gsreenivas wrote: post #43

Earlier quoted context omitted.

hey jawns, great question. I'm Giri Sreenivas, co-founder and CEO of Helm. To answer your question, ISPs block port 25 and email service providers typically reject emails coming from residential IP blocks. To build a plug and play solution, we knew that our server could not require listening for inbound connections on a residential internet connection. So we set about looking into how we could route traffic to and fr…

But you pay for this EC2 instance, and all traffic flows through it. Honest question: What stops a malicious employee on your end sshing to this server and dumping plaintext messages from memory? What stops a court from ordering you to do that? Even if you disable remote access, what stops someone from adding a new LaunchConfiguation that enables it silently on the next instance rotation in spite of whatever configur…

Well the E-Mail server still runs locally. While they could intercept traffic on their VPN endpoint, the traffic should be encrypted (TLS). However, I am not to sure if all e-mail servers speak TLS to each other.

Re: Helm: Personal Email Server

#355

Post by tortasaur »

8fingerlouie wrote: post #350
jawns wrote: post #9

Don't most ISPs ban residential accounts from running something like this? Comcast terms: > use or run dedicated, stand-alone equipment or servers from the Premises that provide network content or any other services to anyone outside of your Premises local area network (“Premises LAN”), also commonly referred to as public services or servers. Examples of prohibited equipment and servers include, but are not limited t…

I'm so glad to be living in Europe. When it comes to consumer internet services, the US is a 3rd world country, which is kinda odd considering most of the western world does their business there. I just checked the terms on my 300/300 fiber connection, as well as my (backup, company paid) 25/5 ADSL. They're almost identical: * no spamming. * no racism/unethical behavior. * no portscanning. * no illegal downloads/uplo…

>no racism/unethical behavior

That seems to have potential for abuse.

Re: Helm: Personal Email Server

#357

Post by ibigb »

jawns wrote: post #9

Don't most ISPs ban residential accounts from running something like this? Comcast terms: > use or run dedicated, stand-alone equipment or servers from the Premises that provide network content or any other services to anyone outside of your Premises local area network (“Premises LAN”), also commonly referred to as public services or servers. Examples of prohibited equipment and servers include, but are not limited t…

You are misleading us by editing out the rest of the sentence. What you stated is for dial-up service.

AT&T terms: >• with respect to dial-up accounts, using any software or device designed to defeat system time-out limits or to allow Customer's account to stay logged on while Customer is not actively using the IP Services or using such account for the purpose of operating a server of any type;

I have many servers on att internet, including email.

Re: Helm: Personal Email Server

#358

Post by [deleted] »

tortasaur wrote: post #355
8fingerlouie wrote: post #350

Earlier quoted context omitted.

I'm so glad to be living in Europe. When it comes to consumer internet services, the US is a 3rd world country, which is kinda odd considering most of the western world does their business there. I just checked the terms on my 300/300 fiber connection, as well as my (backup, company paid) 25/5 ADSL. They're almost identical: * no spamming. * no racism/unethical behavior. * no portscanning. * no illegal downloads/uplo…

>no racism/unethical behavior That seems to have potential for abuse.

[deleted]

Re: Helm: Personal Email Server

#359

Post by vhost- »

blacksmith_tb wrote: post #338
jawns wrote: post #9

Don't most ISPs ban residential accounts from running something like this? Comcast terms: > use or run dedicated, stand-alone equipment or servers from the Premises that provide network content or any other services to anyone outside of your Premises local area network (“Premises LAN”), also commonly referred to as public services or servers. Examples of prohibited equipment and servers include, but are not limited t…

Hmm, the terms for my CenturyLink fiber connection explicitly allow running servers (with some reasonable limitations): "Service may be used to host a server, personal or commercial, as long as such server is used pursuant to the terms and conditions of this Agreement applicable to Service and not for any malicious purposes. Malicious purposes include without limitation Spam, viruses, worms, Trojans, Denial of Servic…

Came here to say this. Aside from some customer support issues, I've had a very great experience with CenturyLink fiber. I have multiple static IPs and run a plethora of externally available services. I actually moved everything from Linode and digital ocean to my house and bought a APC battery backup and outside me unplugging my stuff to move it around, I've had no downtime at all.

Re: Helm: Personal Email Server

#360

Post by diegoperini »

heartles wrote: post #303
mrunkel wrote: post #299

Earlier quoted context omitted.

The person you are replying too isn't the CEO. Just another new user (that's why the username is in green).

You learn something new every day, I always assumed the green meant OP, like how reddit uses blue. I didn't even notice the change in username Thanks!

Thanks for teaching!
Post reply on HN