Live data from Hacker News

After self-hosting my email for twenty-three years I have thrown in the towel

cfenollosa.com

591–600 of 744 posts

Re: After self-hosting my email for twenty-three years I have thrown in the towel

#591

I tried to operate my own email server as well on a VPS, and I have been thinking that the way to solve these problems is to solve the problem of spam itself. Detecting spam puts the costs on the email providers... when the costs should be born by spammers. Perhaps some sort of digital stamp (digital signatures similar to stamps on physical envelopes) for each email sent paid for with micropayments in a cryptocurrenc…

> Small cost per email like 0.01 cents that is trivial for legitimate senders but not for bulk-sending spammers Given how much is spent on ads, I’d say that an email is still worth more than that. So, what you get is spammers paying minuscole amount of money to skip the spam filter and killing the idea at the root. Or they can simply steal these credentials from one of the millions of hacked sites and cause additiona…

Within the confines of "a digital stamp is a good idea" [1], what you're saying isn't quite true: instead of being treated as a whitelist, a digital stamp can just be seen as an finite increase in credibility of some quantum that's decided over time by adaptive filters.

[1] It's not quite. See sibling post to yours.

Re: After self-hosting my email for twenty-three years I have thrown in the towel

#593

Earlier quoted context omitted.

Of course whitelist is easier, but how valuable would your email be if you only allowed your friends to email you? Goodbye order confirmations, subscription reminders, recruiter emails, notifications…

Sounds like a dream, really. And you could always have it be user-driven action, like "Copy this line and paste it into your email provider's whitelist", framing it as a positive win for the user since they have total control over who is allowed to communicate with them.

Yeah, I feel to that is a much better system. You could have a “grey”list postbox that uses a one time code for that company.

Say you enter a form at a company,and in the message box you just leave that code so they can mail you.

Re: After self-hosting my email for twenty-three years I have thrown in the towel

#594
post #252

Here’s an idea Make a new protocol for this decade, that isn’t email. HTTP is supported nearly everywhere SMTP is. Just build something over that, and this time around make sure to avoid SPAM bullshit. People shouldn’t be able to just message you based on your address. They receive a capability to email you. People can be empowered to give out your capabilities. If a particular such branch leads to spam, you simply c…

actually something similar was proposed by djb with email2000.

sadly it got never picked up.

Re: After self-hosting my email for twenty-three years I have thrown in the towel

#595

Earlier quoted context omitted.

I don't follow. I am pointing out that using the same kinds of lists that the big providers use will result in smaller providers being arbitrarily blocked with little recourse. Do you disagree with that assessment?

First, yes. They (the small providers) have recourse, it’s just annoying. They voluntarily signed up for that annoyance because of their ideology. But much more importantly, that question is orthogonal to my argument. Using blocklists is a good way to cut down on spam, the fact that it might block some trivial percentage of people who for ideological reasons might or might not be on those lists isn’t the receivers pr…

> ideological reasons might or might not be on those lists

What's the ideological reasons here?

Re: After self-hosting my email for twenty-three years I have thrown in the towel

#596
post #551

Maybe there needs to be a self-hosting association/union that self-hosters can join? It could advocate for adherence to open standards, and an equal standing for small servers. It could also be a repository of advice for current best practise in small server administration and configuration. Should it be under the auspices of an existing group such as FreedomBox?

G'Day Femto Over the past 15+ years I have joined a number of groups like a web site 'web hosting talk' and all of them jumped all over my privacy and passed on my details to spammers / hackers. I know what you are thinking -> how would he know that ? Well its really simple I use DedicatedEmailAddressing ( DEA ) and our system tells me when a 3rd party tried to deliver a spam message using one of these DEAs. Some of our customers charge suppliers for a new replacement DEA when they find the supplier has 'leaked' :)

Re: After self-hosting my email for twenty-three years I have thrown in the towel

#597
post #71

I'm on 12 years of self hosting email and counting. Once every so often, I do end up being blocked, usually by Outlook and once by Yahoo. I'm in their 'sender program' and they still don't actually bother to contact postmaster@, but a few emails is usually enough to unblock the block within 24h. Agree with a sibling comment that many major providers fail to operate the SPF/DKIM/DMARC tools they insist you do. Each to…

>VPS provider that disallows things like VPN endpoints

this can't exactly be policed

Re: After self-hosting my email for twenty-three years I have thrown in the towel

#598
post #458
post #319

Earlier quoted context omitted.

I have also been self-hosting email for 15 years and only had couple of problems at the beginning, mainly until my IP got enough reputation. I have been hosting it on a bare metal Supermicro server in a proper datacenter, though. It has reverse-DNS, SPF, DKIM, TLS, MTA-STS and even DANE with DNSSEC (on a self-hosted BIND but that's another story). It is implemented using Exim, Dovecot, SpamAssasin, DNSBL and Roundcub…

> I have been hosting it on a bare metal Supermicro server in a proper datacenter, though. This is a key difference. Many people who have a bad time self-hosting mail set up with a minimum-effort major provider like Hetzner or DO — you're guaranteed to have spammers as neighbours some of the time, and other networks will behave accordingly when deciding whether to accept your mail. A real server in a proper datacentr…

I had tried it on a very inexpensive VPS before having my own physical server. The IP was blocked almost everywhere. Even though I filled out a lot of forms in Outlook, Yahoo, etc, it appeared that those major email providers had blacklisted the entire subnet of the VPS provider, and IP reputation seemed to have made little difference. Choosing the right provider is crucial!

A new VPS provider may work well and make you happy, but later on, many spammers may start abusing it to send spam. Then, major email providers begin to block the entire IP subnets that belong to your VPS provider and you are screwed.

Since spammers typically can't afford to buy and house servers, having your own physical or dedicated server will likely increase the likelihood of everything being fine for a long time or forever.

Re: After self-hosting my email for twenty-three years I have thrown in the towel

#599
post #250

I've been hosting my mail for 20+ years now, with minor issues. I guess I've been lucky. Reading the comments here makes me incredibly sad. Every answer that tells me to use a provider misses the point. The Internet was created so that there could be many independent nodes, not so that everybody has to rely on one of several blessed providers. I should be able to run my own E-mail. The real problem is lack of incenti…

I think the problem was this guy was providing email accounts for other people. Other people who probably reused their passwords and had their email in the same DB in the apps they used. That DB was compromised. Hackers got an account to send spam. Then the domain was blacklisted. He alluded to this in > At some point your IP range is bound to be banned, either by one asshole IP neighbor sending spam, one of your use…

> one of your users being pwned

Wow, good catch! He really buried the lede there -- "I kept getting blacklisted because my servers kept sending out spam." I don't know what to tell you pal -- spam is a serious problem, and if your users are sending it out, you're contributing to that. If you can't keep your users in line, other providers don't have any choice but to blacklist you.

Re: After self-hosting my email for twenty-three years I have thrown in the towel

#600
I self-host email for a bit less than 20 years and still not given up. Being blackholed by Microsoft or Google is a real risk (though I was lucky so far), but at least I fully control receiving side - if I expect a message I can check my logs to see if there was a delivery attempt if it was not successful why.
Post reply on HN